Transparency
ID-Kit is free and shared: a few limits protect the service for everyone.
| Item | Free |
|---|---|
| Test SAML identity providers | 3 |
| Test SAML applications | 3 |
| Test OpenID Connect providers | 3 |
| Test OpenID Connect applications | 3 |
| Metadata watches | 3 |
| Teams created | 2 |
| Members per team | 10 |
| Health: monitored items | 1 (trial) |
Pour tous : 100 liens de rapport partagés en même temps (30 jours), 25 clients et 50 utilisateurs par fournisseur OpenID Connect, 200 connexions mémorisées par IdP, 100 tests par application.
Histories (simulated logins, test reports) are deleted automatically after 90 days. Deleting an IdP or an application also erases its history. The account-free analyser keeps nothing.
Public addresses (analysis, response receiving) refuse more than 30 to 60 calls per minute from the same address, with an explanatory message. The IP address is never stored as is (only a hash, erased within minutes).
ID-Kit counts page views without cookies and without storing IP addresses: only the page, the language, the country (and the city when Cloudflare provides it), the device type, the browser and the referring site. A unique visitor is recognised by a hash that changes every day and allows no tracking from one day to the next. These counters are kept 13 months at most.
Fictional identities only: never enter real passwords or real personal data. Service provided as is, without support.