Transparency
ID-Kit is free and shared: a few limits protect the service for everyone.
| Item | Free | Pro | Max |
|---|---|---|---|
| Test SAML identity providers | 3 | 25 | 100 |
| Test SAML applications | 3 | 25 | 100 |
| Test OpenID Connect providers | 3 | 25 | 100 |
| Test OpenID Connect applications | 3 | 25 | 100 |
| Metadata watches | 3 | 30 | 100 |
| Teams created | 2 | 10 | 25 |
| Members per team | 10 | 50 | 100 |
| Health: monitored items | 1 (trial) | 40, every night | 150, every night |
| Health: alerts with solution and e-mail | – | ✓ | ✓ |
Common to all plans: 100 report share links at the same time (30 days), 25 clients and 50 users per OpenID Connect provider, 200 remembered sign-ins per IdP, 100 tests per application. Pro and Max plans are assigned manually for now (no online payment): see Health.
Histories (simulated logins, test reports) are deleted automatically after 90 days. Deleting an IdP or an application also erases its history. The account-free analyser keeps nothing.
Public addresses (analysis, response receiving) refuse more than 30 to 60 calls per minute from the same address, with an explanatory message. The IP address is never stored as is (only a hash, erased within minutes).
ID-Kit counts page views without cookies and without storing IP addresses: only the page, the language, the country (and the city when Cloudflare provides it), the device type, the browser and the referring site. A unique visitor is recognised by a hash that changes every day and allows no tracking from one day to the next. These counters are kept 13 months at most.
Fictional identities only: never enter real passwords or real personal data. Service provided as is, without support.