Questions, answered plainly.
Everything you need to decide.
The basics
Who makes IdRa?
IdRa Corp. (US) is the company behind IdRa and the hosted service at idra.team.
What license does IdRa use?
MIT. IdRa is open source, on GitHub.
Is IdRa really free?
Yes, up to 100 users, apps and servers per org, forever. Growth is $249/mo up to 500 users, Business is $699/mo up to 2,000, and Enterprise starts at $25k/yr. No feature is ever held back on any plan. You choose your own providers for services such as SMS.
Can it replace Okta today?
Yes, for single sign-on, MFA, directory, SCIM and threat protection. The comparison goes row by row.
Where does compliance stand?
SOC 2 Type I audit in progress. IdRa also runs the OpenID Foundation’s conformance suite itself, with no failures. The security page has the details.
Who is it for?
Teams that want a real identity provider without per-seat pricing, and service providers hosting identity for many customers.
What does “workforce identity” mean here?
Sign-in, MFA and access control for the people who work with your organization: employees, contractors and partners.
What’s the pattern on the site?
The line-work is guilloché, the fine interlaced engraving on passports and banknotes that makes them hard to forge. IdRa’s mark is a small knot of it.
Getting started
How do I start?
Go to idra.team, pick an address and confirm your email. You’ll sign in as the first admin, enroll MFA and get a setup wizard you can leave and resume.
Can I use my own domain?
Yes. Add it under Customizations → Domains, prove ownership with a DNS TXT record, and make it primary.
Can I run it myself?
Yes. It’s one Bun process and one Postgres. See the self-hosting guide.
Is the code open source?
IdRa is open source under the MIT license. Read the code, run it yourself, or use the hosted service, free up to 100 users, apps and servers per org.
Security
Where is my data?
On the hosted service, in a Postgres database dedicated to your organization. Self-hosted, wherever you put it.
How do I get my data out?
People, groups, apps and the audit log can be read through /api/v1, and the audit log and reports export to CSV.
Which factors are phishing-resistant?
Passkeys and security keys, which give you phishing-resistant MFA.
What happens when someone leaves?
Deactivate them once. Their sessions end, refresh tokens are revoked and OIDC apps with back-channel logout are told to sign them out.
Okta
Can I use Okta’s SDKs with IdRa?
Yes. Okta’s SDKs work with IdRa by changing the issuer URL. The SDK guide walks through it.
Can I use Okta’s Terraform provider?
Yes, the Okta Terraform provider works with IdRa, using an API token. The migration guide lists the supported resources.
What happens to passwords and factors when moving from Okta?
The Okta importer brings users, groups and apps. People set a password and enroll factors again when you activate them, or keep signing in through Okta while you federate. See the migration path.
Is IdRa related to Okta?
IdRa is independent, and isn’t affiliated with or endorsed by Okta.
Create your organization.
Pick an address and confirm your email, then sign in as its first admin. A setup wizard takes you through the rest.
