Consent management and role-based access controlIncluded capability
Core login, registration, SSO and TOTP MFAIncluded capability
Self-hosted deploymentsIncluded capability
Advanced OAuth scopes and Lambda HTTP ConnectPlan-dependent capability
Plan: Community: Unavailable · Licensed Community: Unavailable · Starter: Unavailable · Essentials: Included · Enterprise: Included
Advanced multi-factor authenticationPlan-dependent capability
Plan: Community: Unavailable · Licensed Community: Unavailable · Starter: Included · Essentials: Included · Enterprise: Included
Advanced threat detectionPlan-dependent capability
Plan: Community: Unavailable · Licensed Community: Unavailable · Starter: Unavailable · Essentials: Unavailable · Enterprise: Included
Application MFA policies and MFA LambdaPlan-dependent capability
Plan: Community: Unavailable · Licensed Community: Unavailable · Starter: Unavailable · Essentials: Unavailable · Enterprise: Included
Application-specific themes and custom registration formsPlan-dependent capability
Plan: Community: Unavailable · Licensed Community: Unavailable · Starter: Included · Essentials: Included · Enterprise: Included
Breached password detectionPlan-dependent capability
Fully air-gapped deployments cannot use this feature fully because it requires network database access.
Plan: Community: Unavailable · Licensed Community: Unavailable · Starter: Included · Essentials: Included · Enterprise: Included
Entity management and client credentials grantPlan-dependent capability
Connector and machine-entity allowances are stated in planFacts.
Plan: Community: Unavailable · Licensed Community: Unavailable · Starter: Included · Essentials: Included · Enterprise: Included
External user database connectorsPlan-dependent capability
Plan: Community: Unavailable · Licensed Community: Unavailable · Starter: Included · Essentials: Included · Enterprise: Included
Licensed WebAuthn and Universal ApplicationsPlan-dependent capability
Community requires the free Licensed Community entitlement; cross-platform authenticators are separately Enterprise-only.
Plan: Community: Unavailable · Licensed Community: Included · Starter: Included · Essentials: Included · Enterprise: Included
SCIM provisioningPlan-dependent capability
Plan: Community: Unavailable · Licensed Community: Unavailable · Starter: Unavailable · Essentials: Unavailable · Enterprise: Included
Tenant ManagerPlan-dependent capability
Plan: Community: Unavailable · Licensed Community: Unavailable · Starter: Unavailable · Essentials: Unavailable · Enterprise: Included
WebAuthn cross-platform authenticatorsPlan-dependent capability
Plan: Community: Unavailable · Licensed Community: Unavailable · Starter: Unavailable · Essentials: Unavailable · Enterprise: Included