Skip to content
SPECIFICTION
Get listed

Curity Identity Server

curity.io

Free plan WebmacOSLinuxAPISelf-hosted
Visit curity.io
Spec score 8.4 #9 of 29 in Customer Identity and Access Management Software

What it is

Curity Identity Server is a standards-based platform for securing users, APIs, machines and AI agents. It combines authentication, federation, token services, API access control and user management. Authentication options include passkeys, MFA, national eIDs, native mobile authentication and CIBA; token capabilities include Token Designer, Token Exchange, Ephemeral Clients, Sender-Constrained Tokens, Phantom Tokens and Split Token patterns. The platform is built on OAuth 2.0, OpenID Connect, FAPI, SAML and SCIM, and Curity says it is certified by the OpenID Foundation. Its User Management Service lists connections to directory services and databases including Active Directory, LDAP, Amazon RDS, DynamoDB, Azure SQL, MongoDB, MySQL, Oracle and PostgreSQL. It can run on-premises or in the cloud, using Docker images or Kubernetes Helm charts. Configuration options include a web Admin UI, CLI, RESTCONF API, XML files, GraphQL and a DevOps Dashboard. The Community plan costs nothing and supports unlimited users with username/password and social identity providers. A 14-day trial is listed. Curity was founded in 2015 and is headquartered in Stockholm, Sweden.

Spec sheet

Purpose
Curity Identity Server is a standards-based platform for securing users, APIs, machines, and AI agents.Read 30 Sep 2026 · curity.io
Intended users
Curity describes Community as suitable for individuals or start-ups, Standard for growing teams, and Enterprise for organizations with multiple teams and large-scale deployments.Read 30 Sep 2026 · curity.io
Deployment
Curity says the server can run on-premises or in the cloud, with Docker images and Kubernetes Helm charts.Read 30 Sep 2026 · curity.io
Compliance
Curity states that it is SOC 2 Type 2 and ISO 27001 certified.Read 30 Sep 2026 · curity.io
Support
The pricing page lists Slack support, business-hours helpdesk support, and 24/7 support options across plans; the Community Edition FAQ directs users to Stack Overflow for community support.Read 30 Sep 2026 · curity.io
Headquarters
Stockholm, SwedenRead 28 Sep 2026 · curity.io
Founded
2015Read 28 Sep 2026 · curity.io
Authentication
It supports passkeys, MFA, national eIDs, native mobile authentication, and CIBA.Read 30 Sep 2026 · curity.io
Automation
Configuration and operations options include a web Admin UI, CLI, RESTCONF API, XML configuration files, GraphQL, and a DevOps Dashboard.Read 30 Sep 2026 · curity.io
Core services
The platform combines authentication, federation, token services, API access control, and user management.Read 30 Sep 2026 · curity.io
Data integrations
The User Management Service lists integrations including Active Directory, LDAP, Amazon RDS, DynamoDB, Azure SQL, MongoDB, MySQL, Oracle, PostgreSQL, and SCIM 1.1 and 2.0.Read 30 Sep 2026 · curity.io
FIPS mode
FIPS mode uses a FIPS 140-3-validated cryptographic module and is supported only with a dedicated Docker image.Read 30 Sep 2026 · curity.io
Plan limits
The Community plan lists one JDBC instance and excludes features including MFA, HAAPI, multi-cloud platforms, and HSM support in the comparison table.Read 30 Sep 2026 · curity.io
Standards
The product is built on OAuth 2.0, OpenID Connect, FAPI, SAML, and SCIM, and the company states that it is certified by the OpenID Foundation.Read 30 Sep 2026 · curity.io
Token security
Token capabilities include Token Designer, Token Exchange, Ephemeral Clients, Sender-Constrained Tokens, Phantom Tokens, and Split Token patterns.Read 30 Sep 2026 · curity.io

Plans and prices

Community Free Free to use Unlimited users · username/password and social identity providers · complete OAuth Server Read 30 Sep 2026 · curity.io
Enterprise Price not published Flat annual subscription; price not stated Unlimited users · DevOps Dashboard · OAuth Tools app · SAML IdP · 24/7 support Read 30 Sep 2026 · curity.io
Standard Price not published Flat annual subscription; price not stated Unlimited users · unlimited authentication methods · HAAPI · unlimited databases and repositories · Curity SDK Read 30 Sep 2026 · curity.io
Token Handler Priced on request Contact Sales Unlimited users, APIs, and applications · works with any IAM system/IdP · compatible with most API Gateways Read 30 Sep 2026 · curity.io

Every Curity Identity Server plan and price →

Strong points and limits

Strong points

  • Supports OAuth 2.0, OpenID Connect, FAPI, SAML and SCIM
  • Runs on-premises or in the cloud
  • Community plan supports unlimited users
  • Offers multiple administration and configuration interfaces

Limits

  • Community excludes MFA and HAAPI
  • Community lists one JDBC instance
  • FIPS mode requires a dedicated Docker image

Who it suits

Community is described as suitable for individuals or start-ups; Standard is for growing teams, and Enterprise for organizations with multiple teams or large deployments. Its deployment and administration options suit organizations seeking to manage identity services on-premises or in the cloud.

Verdict

Curity Identity Server covers authentication, federation, token services and user management across a broad set of standards and deployment options. Plan limits, undisclosed paid-plan prices and the dedicated-image condition for FIPS mode are important distinctions.

Where Specifiction places it

Alternatives to Curity Identity ServerAll alternatives →

Ory From $64.17/mo · Free plan 8.9 Visit