Pricing
Price calculator
Digitally sovereign, convenient, and secure for all user groups with Bare.ID in SaaS operation.
What is your use case?
B2E
B2E
Select B2E to authenticate your employees.
Select B2E to authenticate your employees.
B2B
B2B
Select B2B to authenticate your business partners, such as suppliers, partners, or corporate clients.
Select B2B to authenticate your business partners, such as suppliers, partners, or corporate clients.
B2C
B2C
Select B2C to authenticate your end customers.
Select B2C to authenticate your end customers.
Contract term
Save with a longer contract term
36 months
12 months
Professional
Ideal for companies looking for a centralized IAM solution for their use case.
$99
/ month
- At least 2 cluster nodes
- 1 user federation
- Connect up to 15 applications via OIDC & SAML
- Multi-factor authentication methods (e.g., OTP via email, app, or hardware, WebAuthN hardware tokens, etc.)
Premium
Secure, comprehensive identity and access management with a wide range of features for your business—ready for any challenge.
$99
/ month
- At least 3 cluster nodes & geo-redundancy
- Unlimited applications and federations
- Up to 5 instances (Keycloak realms)
- White label templates
- User management API access & federation via API
- VPN tunnels for federations
- RADIUS authentication
- 24/7 emergency hotline
- Multi-factor authentication methods (e.g., OTP via email, app, or hardware, WebAuthN hardware tokens, etc.)
Self-Hosted
You retain full control over your infrastructure, and we ensure that our solution runs as current, secure, and high-performing on your premises as it does in the cloud.
Upon request
- Same feature set and version as our SaaS version
- Keycloak core always kept up to date
- Verified updates and security patches, tested for breaking changes
- Operate in your own infrastructure, a data center of your choice, or a hybrid environment
- Optional: Support through services from our certified partners
Some of our customers
Plans at a glance
Compare our plans across all features.
Authentication
Active Users
Monthly active users are defined as users with clearly successful activities (e.g., login). Password cracking attempts or other actions are explicitly excluded from this calculation.
From 50 to unlimited
From 50 to unlimited
Active Users
Monthly active users are defined as users with clearly successful activities (e.g., login). Password cracking attempts or other actions are explicitly excluded from this calculation.
Professional:
From 50 to unlimited
Premium:
Up to 100
Number of connected applications
The number of possible applications that can be connected to bare.ID and thus set up for single sign-on.
15
unlimited
Number of connected applications
The number of possible applications that can be connected to bare.ID and thus set up for single sign-on.
Professional:
15
Premium:
5
Preconfigured application gallery
A selection of a variety of preconfigured SAML 2.0, OAuth 2.0 or OpenID Connect-based applications that can be authenticated with bare.ID with just a few clicks. If a standard application is missing, it is set up free of charge by the bare.id team.
Preconfigured application gallery
A selection of a variety of preconfigured SAML 2.0, OAuth 2.0 or OpenID Connect-based applications that can be authenticated with bare.ID with just a few clicks. If a standard application is missing, it is set up free of charge by the bare.id team.
Professional:
Premium:
Individual applications via OAuth 2.0/OpenID Connect
Individual applications that can be set up for single sign-on authentication via OAuth 2.0/OpenID Connect.
Individual applications via OAuth 2.0/OpenID Connect
Individual applications that can be set up for single sign-on authentication via OAuth 2.0/OpenID Connect.
Professional:
Premium:
Individual applications via SAML 2.0
Individual applications that can be set up for single sign-on authentication via SAML 2.0
Individual applications via SAML 2.0
Individual applications that can be set up for single sign-on authentication via SAML 2.0
Professional:
Premium:
Authentication via RADIUS protocol
Authentication that secures applications and systems via the RADIUS protocol.
Authentication via RADIUS protocol
Authentication that secures applications and systems via the RADIUS protocol.
Professional:
Premium:
Cross-application Single Sign-On
Secure single sign-on for all connected applications, replacing the need for multiple logins.
Cross-application Single Sign-On
Secure single sign-on for all connected applications, replacing the need for multiple logins.
Professional:
Premium:
Social login & external Identity Providers
Users can be authenticated via identity providers such as Facebook, Google or LinkedIn using OpenID Connect.
Social login & external Identity Providers
Users can be authenticated via identity providers such as Facebook, Google or LinkedIn using OpenID Connect.
Professional:
Premium:
Device authentication for IoT devices
Authenticate IoT devices for secure machine-to-machine communication.
Device authentication for IoT devices
Authenticate IoT devices for secure machine-to-machine communication.
Professional:
Premium:
IoT/M2M support including client credentials flow
Support for IoT and machine-to-machine scenarios including client credentials flow.
IoT/M2M support including client credentials flow
Support for IoT and machine-to-machine scenarios including client credentials flow.
Professional:
Premium:
Adaptive / contextual authentication
Contextual authentication that considers factors such as location, device, and behavior.
Adaptive / contextual authentication
Contextual authentication that considers factors such as location, device, and behavior.
Professional:
Premium:
Verifiable Credential Support
Support for verifiable credentials for decentralized identity proofs.
Verifiable Credential Support
Support for verifiable credentials for decentralized identity proofs.
Professional:
Premium:
Support for additional/individual Authenticators
Support for additional or individual authentication mechanisms.
Support for additional/individual Authenticators
Support for additional or individual authentication mechanisms.
Professional:
Premium:
Identity & Access Management
User database management via Bare.ID
Users, groups, roles and authentication methods can be managed centrally via Bare.ID's user administration.
User database management via Bare.ID
Users, groups, roles and authentication methods can be managed centrally via Bare.ID's user administration.
Professional:
Premium:
User-defined identity providers
Configure and authenticate users via custom SAML and OAuth 2.0/OpenID Connect-based identity providers.
5
unlimited
User-defined identity providers
Configure and authenticate users via custom SAML and OAuth 2.0/OpenID Connect-based identity providers.
Professional:
5
Premium:
User database via directory service
Federate users, groups, and passwords from your directory service via LDAP or Kerberos.
unlimited
User database via directory service
Federate users, groups, and passwords from your directory service via LDAP or Kerberos.
Professional:
Premium:
User database via SCIM synchronization
Sync users, groups, and passwords via SCIM.
unlimited
User database via SCIM synchronization
Sync users, groups, and passwords via SCIM.
Professional:
Premium:
User database via individual API
Federate users, groups, and passwords via an API.
User database via individual API
Federate users, groups, and passwords via an API.
Professional:
Premium:
Role management
Create application-specific and global roles that can be evaluated by connected applications for access control.
Role management
Create application-specific and global roles that can be evaluated by connected applications for access control.
Professional:
Premium:
Group management
Define a group hierarchy and combine different roles into groups. This allows you to easily assign the same set of roles to multiple users.
Group management
Define a group hierarchy and combine different roles into groups. This allows you to easily assign the same set of roles to multiple users.
Professional:
Premium:
Application access role
Determine whether connected applications should only be authenticated if a user has a corresponding role assignment, or whether the authorization is completely left to the connected application.
Application access role
Determine whether connected applications should only be authenticated if a user has a corresponding role assignment, or whether the authorization is completely left to the connected application.
Professional:
Premium:
Customer-specific attributes for users
Assign additional attributes to users, such as job title, address, etc.
Customer-specific attributes for users
Assign additional attributes to users, such as job title, address, etc.
Professional:
Premium:
Scheduled permissions
Automatically assign roles and permissions to users for a specific period of time — ideal for temporary projects or onboarding processes.
Scheduled permissions
Automatically assign roles and permissions to users for a specific period of time — ideal for temporary projects or onboarding processes.
Professional:
Premium:
Detect inactive users
Identify inactive accounts and mitigate security risks with automatic deactivation or notification.
Detect inactive users
Identify inactive accounts and mitigate security risks with automatic deactivation or notification.
Professional:
Premium:
Detailed role & group reports
Generate transparent reports on user assignments and group memberships for compliance purposes.
Detailed role & group reports
Generate transparent reports on user assignments and group memberships for compliance purposes.
Professional:
Premium:
Universal Directory including User Synchronization from multiple Meta Directories
Universal directory with user synchronization from multiple meta directories.
Universal Directory including User Synchronization from multiple Meta Directories
Universal directory with user synchronization from multiple meta directories.
Professional:
Premium:
Self-service portals for end users
Self-service portals that enable end users to independently manage profile data and reset passwords.
Self-service portals for end users
Self-service portals that enable end users to independently manage profile data and reset passwords.
Professional:
Premium:
Delegated administration
Delegate administrative tasks to specific users or groups.
Delegated administration
Delegate administrative tasks to specific users or groups.
Professional:
Premium:
Advanced integrations
Users, rights and role management via API
Query, create, update, and delete user and role information via a standardized interface. This simplifies the management of user accounts and roles in applications and increases security by complying with standards.
Users, rights and role management via API
Query, create, update, and delete user and role information via a standardized interface. This simplifies the management of user accounts and roles in applications and increases security by complying with standards.
Professional:
Premium:
Outbound webhooks
Changes to user data are synchronized with external applications via webhooks.
Outbound webhooks
Changes to user data are synchronized with external applications via webhooks.
Professional:
Premium:
Users and roles can be retrieved via SCIM-compatible API
Users and roles can be retrieved via SCIM-compatible API
Professional:
Premium:
Individual user provisioning
Synchronize the user directory with external services every time you make changes.
Individual user provisioning
Synchronize the user directory with external services every time you make changes.
Professional:
Premium:
Event KPIs available via API
Event KPIs can be integrated with other applications or dashboards to improve monitoring and analysis of application events.
Event KPIs available via API
Event KPIs can be integrated with other applications or dashboards to improve monitoring and analysis of application events.
Professional:
Premium:
VPN connection
Whether via LDAP/Active Directory federation or safety-critical applications — we connect local infrastructure to bare.id systems via VPN with WireGuard.
VPN connection
Whether via LDAP/Active Directory federation or safety-critical applications — we connect local infrastructure to bare.id systems via VPN with WireGuard.
Professional:
Premium:
Developer tools and SDK support
Developer tools and SDK support for seamless integration with existing systems
Developer tools and SDK support
Developer tools and SDK support for seamless integration with existing systems
Professional:
Premium:
API Security
Comprehensive API security features to protect your interfaces.
API Security
Comprehensive API security features to protect your interfaces.
Professional:
Premium:
Authentication security
Brute force protection
Brute force protection detects attacks early on and blocks the corresponding IP addresses or user accounts temporarily or permanently to ensure the security of applications.
Brute force protection
Brute force protection detects attacks early on and blocks the corresponding IP addresses or user accounts temporarily or permanently to ensure the security of applications.
Professional:
Premium:
Detailed password requirements
Flexible and individual configuration of minimum password requirements.
Detailed password requirements
Flexible and individual configuration of minimum password requirements.
Professional:
Premium:
Detecting insecure passwords
When users set new passwords, passwords that appear in the largest databases of leaked passwords and could be used for automated attacks are optionally rejected.
Detecting insecure passwords
When users set new passwords, passwords that appear in the largest databases of leaked passwords and could be used for automated attacks are optionally rejected.
Professional:
Premium:
Have I been Pwned — password verification
When logging in, bare.ID can check whether the password used has been compromised in the meantime and ask the user to change their password.
Have I been Pwned — password verification
When logging in, bare.ID can check whether the password used has been compromised in the meantime and ask the user to change their password.
Professional:
Premium:
Passwordless authentication
Authenticate users using alternative password methods (knowledge factor).
Passwordless authentication
Authenticate users using alternative password methods (knowledge factor).
Professional:
Premium:
Passwordless authentication (cryptographic)
The user does not have to enter a user name or password — their identity and access rights are determined using alternative cryptographic methods.
Passwordless authentication (cryptographic)
The user does not have to enter a user name or password — their identity and access rights are determined using alternative cryptographic methods.
Professional:
Premium:
MFA via one-time password via email
Multi-factor authentication process that provides an additional layer of security in addition to the password by sending a one-time password (OTP) via email for verification.
MFA via one-time password via email
Multi-factor authentication process that provides an additional layer of security in addition to the password by sending a one-time password (OTP) via email for verification.
Professional:
Premium:
MFA via one-time password via SMS
Multi-factor authentication process that provides an additional layer of security in addition to the password, in which a one-time password (OTP) is sent via SMS for verification.
External license fees
External license fees
MFA via one-time password via SMS
Multi-factor authentication process that provides an additional layer of security in addition to the password, in which a one-time password (OTP) is sent via SMS for verification.
Professional:
External license fees
Premium:
MFA via time-based one-time password via Authenticator App/ Hardware Generator
Multi-factor authentication process that provides an additional layer of security in addition to the password, in which a time-based one-time password (TOTP) is generated via an authenticator app or hardware generator for verification.
MFA via time-based one-time password via Authenticator App/ Hardware Generator
Multi-factor authentication process that provides an additional layer of security in addition to the password, in which a time-based one-time password (TOTP) is generated via an authenticator app or hardware generator for verification.
Professional:
Premium:
MFA via Apple Passkey
Multi-factor authentication process that provides an additional layer of security in addition to or as an alternative to the password that uses the Apple Passkey for authentication.
MFA via Apple Passkey
Multi-factor authentication process that provides an additional layer of security in addition to or as an alternative to the password that uses the Apple Passkey for authentication.
Professional:
Premium:
MFA via FIDO tokens
Multi-factor authentication process that provides an additional layer of security in addition to or as an alternative to a password, which uses FIDO tokens for authentication.
MFA via FIDO tokens
Multi-factor authentication process that provides an additional layer of security in addition to or as an alternative to a password, which uses FIDO tokens for authentication.
Professional:
Premium:
MFA via WebAuthn compatible mechanisms
Multi-factor authentication process that provides an additional layer of security in addition to or as an alternative to a password, using any WebAuthn-compatible authentication mechanism.
MFA via WebAuthn compatible mechanisms
Multi-factor authentication process that provides an additional layer of security in addition to or as an alternative to a password, using any WebAuthn-compatible authentication mechanism.
Professional:
Premium:
Certificate-based authentication
Existing smart cards or client certificates on your systems: Users authenticate themselves using existing X.509 certificates.
Certificate-based authentication
Existing smart cards or client certificates on your systems: Users authenticate themselves using existing X.509 certificates.
Professional:
Premium:
Step-up authentication
Critical applications or actions that require a higher level of security guarantee Use so-called step-up authentication or level-based authentication to ensure that every application and action is authenticated with the required level of security.
Step-up authentication
Critical applications or actions that require a higher level of security guarantee Use so-called step-up authentication or level-based authentication to ensure that every application and action is authenticated with the required level of security.
Professional:
Premium:
UMA-compliant, fine-grained rights management
Control access rights to resources within an application very precisely with UMA-compliant, fine-grained rights management. Restrict or approve access to individual resources.
UMA-compliant, fine-grained rights management
Control access rights to resources within an application very precisely with UMA-compliant, fine-grained rights management. Restrict or approve access to individual resources.
Professional:
Premium:
Security event notifications
Get instant notifications about security-related events, such as failed login attempts or suspicious activity.
Security event notifications
Get instant notifications about security-related events, such as failed login attempts or suspicious activity.
Professional:
Premium:
MYRA DDoS Protection
Protect your identity platform from targeted attacks with MyRA's powerful DDoS defense.
MYRA DDoS Protection
Protect your identity platform from targeted attacks with MyRA's powerful DDoS defense.
Professional:
Premium:
Advanced passwordless login with dedicated flows
Advanced passwordless login with dedicated authentication flows.
Advanced passwordless login with dedicated flows
Advanced passwordless login with dedicated authentication flows.
Professional:
Premium:
Security Dashboard
Central security dashboard to monitor safety-related events.
Security Dashboard
Central security dashboard to monitor safety-related events.
Professional:
Premium:
Security Score
Evaluate your instance's security configuration.
Security Score
Evaluate your instance's security configuration.
Professional:
Premium:
Branding & Whitelabel operation
Login masks in the individual user experience
Design the login masks in your own branding.
Login masks in the individual user experience
Design the login masks in your own branding.
Professional:
Premium:
No-code configuration of corporate identity
Define colors, effects and positions of UI elements according to individual corporate design guidelines — simply and without code.
No-code configuration of corporate identity
Define colors, effects and positions of UI elements according to individual corporate design guidelines — simply and without code.
Professional:
Premium:
Custom logos, favicons and background images
Easily upload data to your own instance. We take care of high-performance delivery.
Custom logos, favicons and background images
Easily upload data to your own instance. We take care of high-performance delivery.
Professional:
Premium:
Email templates suitable for CI
The HTML email templates automatically adopt the configured CI.
Email templates suitable for CI
The HTML email templates automatically adopt the configured CI.
Professional:
Premium:
Hide Bare.ID label
All references to the provider Bare.ID can be completely hidden.
Hide Bare.ID label
All references to the provider Bare.ID can be completely hidden.
Professional:
Premium:
Impressum & privacy links
Add your own legal notice and privacy policy.
Impressum & privacy links
Add your own legal notice and privacy policy.
Professional:
Premium:
Customizable footer links
Define up to three additional individual links, e.g. for support, terms and conditions or the like.
Customizable footer links
Define up to three additional individual links, e.g. for support, terms and conditions or the like.
Professional:
Premium:
Multilingualism
Use the solution in multiple languages.
Multilingualism
Use the solution in multiple languages.
Professional:
Premium:
Customizable texts
All texts that are displayed to users can be fully customized.
Customizable texts
All texts that are displayed to users can be fully customized.
Professional:
Premium:
Individual domain per instance
A unique, dedicated domain per instance that is used exclusively within that instance.
Individual domain per instance
A unique, dedicated domain per instance that is used exclusively within that instance.
Professional:
Premium:
Use your own domain
Deploy Bare.ID instances as a subdomain of your own (APEX) domain and achieve a higher level of trust.
External license fees
External license fees
Use your own domain
Deploy Bare.ID instances as a subdomain of your own (APEX) domain and achieve a higher level of trust.
Professional:
External license fees
Premium:
E-mail sender can be customized
The email sender of all emails sent to users by Bare.id can be customized individually.
E-mail sender can be customized
The email sender of all emails sent to users by Bare.id can be customized individually.
Professional:
Premium:
SMS senders can be customized
The SMS sender of all SMS messages sent to users by Bare.id can be customized individually.
SMS senders can be customized
The SMS sender of all SMS messages sent to users by Bare.id can be customized individually.
Professional:
Premium:
TLS-only via Let's Encrypt certificates
The application is only accessible via a secure HTTPS connection (TLS) and the certificates used for encryption come from Let's Encrypt.
TLS-only via Let's Encrypt certificates
The application is only accessible via a secure HTTPS connection (TLS) and the certificates used for encryption come from Let's Encrypt.
Professional:
Premium:
Your own TLS certificates
If the IT security policy does not allow the use of Let's Encrypt certificates for TLS termination, simply bring certificates from your authorized issuer with you. Only available for custom domains.
Your own TLS certificates
If the IT security policy does not allow the use of Let's Encrypt certificates for TLS termination, simply bring certificates from your authorized issuer with you. Only available for custom domains.
Professional:
Premium:
Our own email delivery service provider
Use your own SMTP mail server or provider such as Postmark, SendGrid, or Mailjet to send transactional emails via your own infrastructure with an individual sender email address.
Our own email delivery service provider
Use your own SMTP mail server or provider such as Postmark, SendGrid, or Mailjet to send transactional emails via your own infrastructure with an individual sender email address.
Professional:
Premium:
Custom templates
Fully customizable templates outside the specified framework.
Custom templates
Fully customizable templates outside the specified framework.
Professional:
Premium:
Individual branding per application
Adapt the design of each application to your desired branding — from logos to colors to layouts.
Individual branding per application
Adapt the design of each application to your desired branding — from logos to colors to layouts.
Professional:
Premium:
Governance and Compliance
Data center location Germany
All Bare.id GmbH data centers are located exclusively in Germany.
Data center location Germany
All Bare.id GmbH data centers are located exclusively in Germany.
Professional:
Premium:
KRITIS compliant operation
Our data center design and multi-redundant deployment meet the redundancy and data center requirements of the BSI for critical infrastructures.
KRITIS compliant operation
Our data center design and multi-redundant deployment meet the redundancy and data center requirements of the BSI for critical infrastructures.
Professional:
Premium:
GDPR compliant
Bare.ID can be operated in a 100% GDPR-compliant manner.
GDPR compliant
Bare.ID can be operated in a 100% GDPR-compliant manner.
Professional:
Premium:
ISO27001 compliant service
Bare.id operates an ISMS (information security management system) in accordance with ISO27001.
ISO27001 compliant service
Bare.id operates an ISMS (information security management system) in accordance with ISO27001.
Professional:
Premium:
Application-based activity logs
Information on activities within applications – logs can be used to track application activities, diagnose errors, and monitor security.
Application-based activity logs
Information on activities within applications – logs can be used to track application activities, diagnose errors, and monitor security.
Professional:
Premium:
User-based activity logs
Information about activities performed by users — the logs can be used to track user activity, diagnose errors, and monitor security.
User-based activity logs
Information about activities performed by users — the logs can be used to track user activity, diagnose errors, and monitor security.
Professional:
Premium:
KPI dashboard
A central dashboard within the bare.ID admin interface that contains all relevant KPIs.
KPI dashboard
A central dashboard within the bare.ID admin interface that contains all relevant KPIs.
Professional:
Premium:
Event & log retentions
All event and log retentions are saved for a specific period of time.
90 days
90 days
Event & log retentions
All event and log retentions are saved for a specific period of time.
Professional:
90 days
Premium:
90 days
Log streaming (CIAM integration)
Log streaming automatically stores logs in a third-party storage and analysis tool, which enables near real-time responses to security threats, performance failures, and other issues.
Log streaming (CIAM integration)
Log streaming automatically stores logs in a third-party storage and analysis tool, which enables near real-time responses to security threats, performance failures, and other issues.
Professional:
Premium:
MTLS-secured internal connections
Even within Bare.ID, data is always encrypted during transport.
MTLS-secured internal connections
Even within Bare.ID, data is always encrypted during transport.
Professional:
Premium:
Consent Management
Create different versions of your terms of use and get approval.
Consent Management
Create different versions of your terms of use and get approval.
Professional:
Premium:
Platform and Operations
Daily external data backup
Up to one year of backups based on the grandfather-son principle (10 daily, 5 weekly, 12 monthly). Backups to offline data centers.
Daily external data backup
Up to one year of backups based on the grandfather-son principle (10 daily, 5 weekly, 12 monthly). Backups to offline data centers.
Professional:
Premium:
Multiple redundant database clusters
We operate our databases as an active-passive cluster in the primary data center — in the secondary data center, we have a second DB cluster available as a hot standby.
Multiple redundant database clusters
We operate our databases as an active-passive cluster in the primary data center — in the secondary data center, we have a second DB cluster available as a hot standby.
Professional:
Premium:
Guaranteed availability
The procedural guaranteed availability is 99.9%.
Guaranteed availability
The procedural guaranteed availability is 99.9%.
Professional:
Premium:
Technical support in English and German
Our support team works in and from Germany and offers barrier-free support at native speaker level in German and English.
Technical support in English and German
Our support team works in and from Germany and offers barrier-free support at native speaker level in German and English.
Professional:
Premium:
24/7 Hotline
24/7 support is available for critical and severe incidents of incident classes 1 and 2.
24/7 Hotline
24/7 support is available for critical and severe incidents of incident classes 1 and 2.
Professional:
Premium:
Scheduled maintenance windows
Our maintenance windows are outside regular business hours and are announced at least one week in advance.
Scheduled maintenance windows
Our maintenance windows are outside regular business hours and are announced at least one week in advance.
Professional:
Premium:
Automatic patch and update management
We always work with up-to-date and patched components. Our redundant deployments enable us to perform updates without service interruption.
Automatic patch and update management
We always work with up-to-date and patched components. Our redundant deployments enable us to perform updates without service interruption.
Professional:
Premium:
Dediziertes Deployment
Dedizierte Applikations- und Datenbank-Cluster werden für unseren Service in kundenspezifische Netzwerksegmente ausgerollt, jeweils mit kundenspezifischen kryptografischen Schlüsseln für Data-At-Rest und in Transit.
Dediziertes Deployment
Dedizierte Applikations- und Datenbank-Cluster werden für unseren Service in kundenspezifische Netzwerksegmente ausgerollt, jeweils mit kundenspezifischen kryptografischen Schlüsseln für Data-At-Rest und in Transit.
Professional:
Premium:
Organize data into instances
Whether it's different organizations, test and production environments, or your own networks — the bare.ID service is multi-tenant and allows you to create several completely independent instances.
3
5
Organize data into instances
Whether it's different organizations, test and production environments, or your own networks — the bare.ID service is multi-tenant and allows you to create several completely independent instances.
Professional:
3
Premium:
1
Analytics & Monitoring
Comprehensive analytics and monitoring capabilities for your identity platform.
Analytics & Monitoring
Comprehensive analytics and monitoring capabilities for your identity platform.
Professional:
Premium:
Extensibility
Script-based extensibility
Using scripts, for example, to transform data or connect external sources.
Script-based extensibility
Using scripts, for example, to transform data or connect external sources.
Professional:
Premium:
Event geolocation
Assigning IP addresses to countries for analyses, etc.
Event geolocation
Assigning IP addresses to countries for analyses, etc.
Professional:
Premium:
Workflow Engine and Custom Actions/ Scripts/ No-code workflows
Workflow engine and custom actions, scripts, or no-code workflows.
Workflow Engine and Custom Actions/ Scripts/ No-code workflows
Workflow engine and custom actions, scripts, or no-code workflows.
Professional:
Premium:
Governance & Lifecycle
Advanced consent management, GDPR-compliant consent management
Advanced and GDPR-compliant consent management for comprehensive consent management.
Advanced consent management, GDPR-compliant consent management
Advanced and GDPR-compliant consent management for comprehensive consent management.
Professional:
Premium:
IGA (Identity Governance and Lifecycle)
Identity governance and administration to manage the entire identity lifecycle.
IGA (Identity Governance and Lifecycle)
Identity governance and administration to manage the entire identity lifecycle.
Professional:
Premium:
Lifecycle management
Automated provisioning/deprovisioning and recertification.
Lifecycle management
Automated provisioning/deprovisioning and recertification.
Professional:
Premium:
SCIM provisioning
Automated user provisioning via SCIM protocol.
SCIM provisioning
Automated user provisioning via SCIM protocol.
Professional:
Premium:
CIAM-specific features
Progressive profiling
Step-by-step collection of user profile data across multiple interactions.
Progressive profiling
Step-by-step collection of user profile data across multiple interactions.
Professional:
Premium:
B2C flows
Specialized authentication flows for business-to-consumer scenarios.
B2C flows
Specialized authentication flows for business-to-consumer scenarios.
Professional:
Premium:
Advanced Analytics / Threat Detection
AI-based Threat Insight
AI-powered threat detection for proactive security measures.
AI-based Threat Insight
AI-powered threat detection for proactive security measures.
Professional:
Premium:
User Behavior Analytics
Analyze user behavior to identify anomalies and threats.
User Behavior Analytics
Analyze user behavior to identify anomalies and threats.
Professional:
Premium:
Anomaly Detection
Automatic detection of deviations in user behavior and system access.
Anomaly Detection
Automatic detection of deviations in user behavior and system access.
Professional:
Premium:
AI Integration
Freely selectable AI model
Free selection of the AI model for individual requirements.
Freely selectable AI model
Free selection of the AI model for individual requirements.
Professional:
Premium:
Fine-grained data provisioning
Fine-grained control of data provision for AI integrations.
Fine-grained data provisioning
Fine-grained control of data provision for AI integrations.
Professional:
Premium:
Operational flexibility
Choose the operating model that suits you
Bare.ID's SaaS operation already meets high requirements from the public sector and critical infrastructure (KRITIS) environments. For specific circumstances, Bare.ID also professionally and practically supports alternative operating models. Our principle: The same Bare.ID platform for all operating models.
Suitable for:
- Special requirements in the public sector
- Special compliance or architectural requirements
- Combinations of cloud and on-premise operation
SaaS with Bare.ID
Digitally sovereign operation in certified data centers in Germany.
On-Prem / Self-Hosted
When maximum control or specific compliance requirements are necessary.
Hybrid
International setups or if individual applications need to remain local.
What Our Customers Say
“With Bare.ID, a strategic vision of mine has finally become reality: A central IAM for ZDF Studios and their network — with administrative authority within our IT team and without dependence on parent company ZDF.”
Simon Zsebök
VP Digital Innovation | ZDF Studios
“With Bare.ID, we rely on a German manufacturer who not only impresses in terms of reliability, but also uses the latest 2FA technology with our hardware solution.”
Alexander Summerer
Product Management | Swissbit AG
.svg.avif)
“The switch from Keycloak to Bare.ID was completed in just three days — with the technical expertise that we had often missed from our service provider before and a SaaS operation that permanently relieves our IT workload: a real game changer."
Lukas Lachetta
Digital Services | Rheinbahn AG
“Bare.ID offers a multi-factor authentication solution developed and operated in Germany that meets all standard requirements — an important aspect in current times of crisis. As consulting experts for public administration in digitization and process optimization, we are the right link for organizations that want to integrate Bare..ID into their implementation projects."
Markus Kuhn
Tribe Lead Public | RS Group
“Bare.ID impresses with an ideal combination of strong IT security and high usability. This not only meets our safety requirements, but also significantly simplifies internal processes.”
Christian Koch
Head of IT | ZDF Digital
“With Bare.ID's secure identity and access management system, we have gained a partner that now enables our users to automatically authenticate to web applications. In doing so, we have created a holistic solution that offers users maximum convenience.”
Alexander Woeschka
Sales manager | Digitronic
“As a Bare.ID partner, we particularly appreciate the joint focus on digital sovereignty. At a time when data security & independence are essential, Bare.ID is setting new standards as a German manufacturer with an open source component. The first-class, German-language support stands out positively from the market environment.”
Daniel Stutz
Managing Director | XplicitTrust
“Whether it's OTP, facial recognition, or FIDO2 hardware — Bare.ID's flexibility in MFA methods is a game changer for our customers.”
Jochen Göring
Director of Product Management | DRACOON
Q&A
FAQs
Do you have any further questions? Feel free to schedule a non-binding discovery call.
How does Bare.ID's SaaS licensing model work (MAU-based)?
Bare.ID is billed based on Monthly Active Users (MAU). You only pay for users who have logged in at least once in the respective month. This makes costs transparent and scalable – ideal for companies with fluctuating user numbers.
What are Monthly Active Users (MAUs)?
An MAU is a unique user who has authenticated at least once within a calendar month. Multiple logins by the same user are counted only once.
How does Bare.ID handle fluctuating user numbers?
The MAU model adjusts automatically. Minor overages are simply billed retrospectively – the service remains fully usable at all times.
Are there special conditions for non-profit organizations?
Yes, Bare.ID offers special conditions for non-profit organizations. Please contact sales for a customized offer.
Is there a free trial version?
Yes, Bare.ID offers a free trial with full functionality. Individual agreements can be made for proof-of-concepts.
What additional services can be booked?
In addition to the platform tariffs, various services, such as integration, can be flexibly added and tailored to individual needs.
What payment models are supported?
Bare.ID supports monthly or annual payments. Companies can also opt for quarterly billing. Payment is made via invoice or SEPA direct debit.
Register for your Bare.ID test environment
Get started now.
It's that simple:
1
Sign up for free and try out Bare.ID for yourself.
2
Get instant access to your personal Bare.ID test environment.
3
Optional: We’ll answer your questions about using Bare.ID in your company, free of charge.
Thank you for your message!
We have received your request and will get back to you as soon as possible.