Skip to main content

Trial license

New customers can evaluate the paid premium modules (SAML SSO, SCIM provisioning, audit log streaming, branded transactional emails) under a 30-day trial license at no cost. The trial unlocks the same feature set as the Scale tier.

There are two ways to get one:

  1. Self-service script — for evaluations on your own infrastructure from a checkout of the source tree.
  2. Contact sales — for a trial license tied to a real organization that you can install on a production-shaped deployment.

Option 1: Self-service script

From a checkout of the IdentSphere source tree:

./scripts/issue-trial-license.sh > my-trial.license

That writes a 30-day trial license to my-trial.license (suitable for IDENTSPHERE_LICENSE_FILE) or you can redirect to stdout for copy-paste:

./scripts/issue-trial-license.sh

The script is a thin wrapper around identsphere-license-gen, which is the official license-generation CLI. The wrapper passes:

--tier trial --expires-in-days 30 --features all

so you don't have to remember the flag set.

If the identsphere-license-gen binary isn't built yet (it's part of the licensing tooling that ships alongside the SDK), the script prints a helpful message and exits non-zero. Run cargo build --workspace --release once and try again.

Custom recipient / organization

If you want the license tied to a particular organization name (so the auditing log surfaces it correctly), pass --org through to the wrapper:

./scripts/issue-trial-license.sh --org "Acme Inc" > acme.license

Any extra flags after the recognized ones are forwarded to identsphere-license-gen as-is.

Option 2: Contact sales

For a trial license tied to a domain we've verified — for example, because you want to share the trial across a team — email sales (see the README for the current address). We turn these around inside one business day during weekdays.

What's unlocked in trial mode

The trial license enables every feature listed under the Scale column of the pricing comparison:

  • SAML SSO via the identsphere-saml crate
  • SCIM v2 provisioning via identsphere-scim
  • Audit log streaming to your SIEM via identsphere-audit-export
  • Branded transactional emails
  • Custom roles
  • All Pro-tier features

Premium modules respect the same license check in trial as they do in production. If something works under the trial license, it will work under a paid Scale or Enterprise license — there are no separate "trial-only" code paths to surprise you on conversion.

What happens at expiry

The trial license expires 30 days after issuance. At expiry, the deployment drops to the Community tier:

  • Premium features stop working at the next binary restart.
  • No data is lost. All users, organizations, sessions, and audit records remain intact.
  • Core authentication flows (registration, login, MFA, passkeys, OAuth, password reset) continue to operate normally.
  • A licensed reinstall — by issuing a new license and dropping it into IDENTSPHERE_LICENSE_FILE — restores premium feature access without any data migration.

This is the same fail-open posture every license expiry follows. We never want a license dispute to lock customers out of their own authentication system.

Running trial in test mode

The trial license works identically in test mode. A common evaluation pattern:

  1. Stand up identsphere-server with IDENTSPHERE_TEST_MODE=true.
  2. Issue a trial license with the script.
  3. Point your application at the sandbox URL.
  4. Exercise the premium flows (e.g. SAML federation against a test IdP) without any risk of leaking real notification mail.

When you're ready to flip the deployment to production, restart the server without IDENTSPHERE_TEST_MODE and re-issue a non-trial license. No schema changes are required.

  • Pricing — tier comparison and FAQs.
  • Test mode — sandbox mode details.
  • Licensing — why IdentSphere is source-available and how the license check works.