Curity Identity Server
Curity Identity Server secures access for users, APIs, machines, and AI agents through a standards-based platform.
What Curity Identity Server is
Curity Identity Server secures access for users, APIs, machines, and AI agents through a standards-based platform. It brings together authentication, federation, token services, API access control, and user management. Authentication options include passkeys, MFA, national eIDs, native mobile authentication, and CIBA. Token features include exchange, ephemeral clients, sender-constrained and phantom tokens, and split-token patterns. The platform is built on OAuth 2.0, OpenID Connect, FAPI, SAML, and SCIM; Curity says it is certified by the OpenID Foundation. It can run on-premises or in the cloud, including through Docker images and Kubernetes Helm charts. Administrators can configure it with a web Admin UI, CLI, RESTCONF API, XML files, GraphQL, or a DevOps Dashboard. The free Community plan costs nothing and supports unlimited users with username/password and social identity providers. A 14-day trial is listed. Curity was founded in 2015 and is headquartered in Stockholm, Sweden.
Good
- Supports passkeys, MFA, national eIDs, and CIBA.
- Offers on-premises and cloud deployment.
- Integrates with many databases and directories.
- Community plan supports unlimited users.
- SOC 2 Type 2 and ISO 27001 certified.
Watch out
- Community excludes MFA and HAAPI.
- Community is limited to one JDBC instance.
- FIPS mode requires a dedicated Docker image.
Who it suits
The Community plan is described as suitable for individuals or start-ups. Standard is aimed at growing teams, while Enterprise is for organizations with multiple teams and large-scale deployments.
Verdict
Curity combines identity, authentication, token, and API access controls in one platform, with multiple deployment and administration options. Check the Community plan exclusions and confirm plan pricing with Curity for paid tiers.
Plans and prices
From Curity Identity Server's own pricing page, checked 30 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Community | Free | Unlimited users · username/password and social identity providers · complete OAuth Server · Free to use |
| Enterprise | — | Unlimited users · DevOps Dashboard · OAuth Tools app · SAML IdP · 24/7 support · Flat annual subscription; price not stated |
| Standard | — | Unlimited users · unlimited authentication methods · HAAPI · unlimited databases and repositories · Curity SDK · Flat annual subscription; price not stated |
| Token Handler | Priced on request | Unlimited users, APIs, and applications · works with any IAM system/IdP · compatible with most API Gateways · Contact Sales |
The facts
Each one read from Curity Identity Server's own pages, with the date it was checked.
What it does
- Authentication
- It supports passkeys, MFA, national eIDs, native mobile authentication, and CIBA.checked 30 Sep 2026
- Automation
- Configuration and operations options include a web Admin UI, CLI, RESTCONF API, XML configuration files, GraphQL, and a DevOps Dashboard.checked 30 Sep 2026
- Compliance
- Curity states that it is SOC 2 Type 2 and ISO 27001 certified.checked 30 Sep 2026
- Core services
- The platform combines authentication, federation, token services, API access control, and user management.checked 30 Sep 2026
- Data integrations
- The User Management Service lists integrations including Active Directory, LDAP, Amazon RDS, DynamoDB, Azure SQL, MongoDB, MySQL, Oracle, PostgreSQL, and SCIM 1.1 and 2.0.checked 30 Sep 2026
- Deployment
- Curity says the server can run on-premises or in the cloud, with Docker images and Kubernetes Helm charts.checked 30 Sep 2026
- FIPS mode
- FIPS mode uses a FIPS 140-3-validated cryptographic module and is supported only with a dedicated Docker image.checked 30 Sep 2026
- Intended users
- Curity describes Community as suitable for individuals or start-ups, Standard for growing teams, and Enterprise for organizations with multiple teams and large-scale deployments.checked 30 Sep 2026
- Purpose
- Curity Identity Server is a standards-based platform for securing users, APIs, machines, and AI agents.checked 30 Sep 2026
- Standards
- The product is built on OAuth 2.0, OpenID Connect, FAPI, SAML, and SCIM, and the company states that it is certified by the OpenID Foundation.checked 30 Sep 2026
- Support
- The pricing page lists Slack support, business-hours helpdesk support, and 24/7 support options across plans; the Community Edition FAQ directs users to Stack Overflow for community support.checked 30 Sep 2026
- Token security
- Token capabilities include Token Designer, Token Exchange, Ephemeral Clients, Sender-Constrained Tokens, Phantom Tokens, and Split Token patterns.checked 30 Sep 2026
The company
- Founded
- 2015checked 28 Sep 2026
- Headquarters
- Stockholm, Swedenchecked 28 Sep 2026
Money
- Plan limits
- The Community plan lists one JDBC instance and excludes features including MFA, HAAPI, multi-cloud platforms, and HSM support in the comparison table.checked 30 Sep 2026
Alternatives to Curity Identity Server
- 1
Authgear
Free planOpen sourceAndroidiOSWebAPI8.5From $50 a month - 2
Ory
Free planOpen sourceWebAPILinuxmacOS8.4From $770 a year - 3
FusionAuth
Free planAndroidiOSWebAPI8.3From $162 a month - 4
Google Cloud Identity
Free planAndroidiOSWebAPI8.3Free plan - 5
cidaas
Free planAndroidiOSWebAPI8.1Free plan - 6
Descope
Free planAndroidiOSWebAPI7.6From $249 a month