Trial license
New customers can evaluate the paid premium modules (SAML SSO, SCIM provisioning, audit log streaming, branded transactional emails) under a 30-day trial license at no cost. The trial unlocks the same feature set as the Scale tier.
There are two ways to get one:
- Self-service script — for evaluations on your own infrastructure from a checkout of the source tree.
- Contact sales — for a trial license tied to a real organization that you can install on a production-shaped deployment.
Option 1: Self-service script
From a checkout of the IdentSphere source tree:
./scripts/issue-trial-license.sh > my-trial.license
That writes a 30-day trial license to my-trial.license (suitable for
IDENTSPHERE_LICENSE_FILE) or you can redirect to stdout for copy-paste:
./scripts/issue-trial-license.sh
The script is a thin wrapper around identsphere-license-gen, which is the
official license-generation CLI. The wrapper passes:
--tier trial --expires-in-days 30 --features all
so you don't have to remember the flag set.
If the identsphere-license-gen binary isn't built yet (it's part of the
licensing tooling that ships alongside the SDK), the script prints a
helpful message and exits non-zero. Run cargo build --workspace --release
once and try again.
Custom recipient / organization
If you want the license tied to a particular organization name (so the
auditing log surfaces it correctly), pass --org through to the
wrapper:
./scripts/issue-trial-license.sh --org "Acme Inc" > acme.license
Any extra flags after the recognized ones are forwarded to
identsphere-license-gen as-is.
Option 2: Contact sales
For a trial license tied to a domain we've verified — for example, because you want to share the trial across a team — email sales (see the README for the current address). We turn these around inside one business day during weekdays.
What's unlocked in trial mode
The trial license enables every feature listed under the Scale column of the pricing comparison:
- SAML SSO via the
identsphere-samlcrate - SCIM v2 provisioning via
identsphere-scim - Audit log streaming to your SIEM via
identsphere-audit-export - Branded transactional emails
- Custom roles
- All Pro-tier features
Premium modules respect the same license check in trial as they do in production. If something works under the trial license, it will work under a paid Scale or Enterprise license — there are no separate "trial-only" code paths to surprise you on conversion.
What happens at expiry
The trial license expires 30 days after issuance. At expiry, the deployment drops to the Community tier:
- Premium features stop working at the next binary restart.
- No data is lost. All users, organizations, sessions, and audit records remain intact.
- Core authentication flows (registration, login, MFA, passkeys, OAuth, password reset) continue to operate normally.
- A licensed reinstall — by issuing a new license and dropping it into
IDENTSPHERE_LICENSE_FILE— restores premium feature access without any data migration.
This is the same fail-open posture every license expiry follows. We never want a license dispute to lock customers out of their own authentication system.
Running trial in test mode
The trial license works identically in test mode. A common evaluation pattern:
- Stand up
identsphere-serverwithIDENTSPHERE_TEST_MODE=true. - Issue a trial license with the script.
- Point your application at the sandbox URL.
- Exercise the premium flows (e.g. SAML federation against a test IdP) without any risk of leaking real notification mail.
When you're ready to flip the deployment to production, restart the
server without IDENTSPHERE_TEST_MODE and re-issue a non-trial license. No
schema changes are required.