Sold by: WSO2
Deployed on AWS
AWS Free Tier
WSO2 Identity Server is a powerful, modern identity and access management solution for your on-premises or cloud environment. It enables organizations to deliver exceptional, trusted digital experiences to all types of users: internal workforce, external consumers, business customers or API consumers. Preferred by customer reviewers over Okta, WSO2 Identity Server offers a more compelling technical direction, better feature updates, and superior support quality.
4.5
Overview
WSO2 Identity Server is an open-source, enterprise-grade identity and access management (IAM) solution that streamlines authentication, authorization, and user management. It supports single sign-on (SSO), multi-factor authentication (MFA), and OAuth2/OpenID Connect, enabling secure access to applications, services, and APIs across cloud, on-premises, and hybrid environments.
Organizations can implement identity federation, social login and BYOID, allowing users to access multiple applications through a single login. Advanced features like role-based access control (RBAC), fine-grained authorization, passkeys, passwordless authentication and risk-adaptive authentication enhance security while improving the user experience.
Designed for compliance with regulations like GDPR and HIPAA, WSO2 Identity Server offers features such as consent management and audit logging.
WSO2 Identity Server streamlines configuration and policy definition using artificial intelligence, simplifying rollout and speeding time to deployment. Its highly extensible, API-driven architecture supports seamless integration with other mission-critical applications and deep customization, making it ideal for businesses of all sizes, and for any use case.
For Business Customers (B2B): Enable secure access for your B2B customers with flexible organization management. For Consumers (B2C): Launch secure, consumer-facing applications with customized branding to attract and retain users. For Citizens (G2C): Provide citizens with secure, seamless access to public services for government digital transformation. Workforce Identity (B2E): Empower your employees with secure access to corporate apps, no matter where they work. API Access Management: Protect critical APIs by ensuring only authenticated and authorized clients can gain access.
Highlights
- The perfect solution for the needs of all user types (consumers, workforce, business customers or API users). With WSO2 Identity Server there is no need to set up and maintain separate products for each user type, saving organizations expense and effort.
- Highly adaptable and extensible architecture to meet your organization specific functionality and integration requirements. WSO2 Identity Server is designed for developers, making it easy for your team to adapt functionality or integrate with other critical systems, using their existing, familiar developer tools.
- Affordably priced for your growing business. Take advantage of the flexible and affordable pricing offered by WSO2. Its also easy to extend licensing for external customers.
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimensions summary
This listing centers on two dimensions. Cores and Use Case covers the software itself. The Public Offer gives you a proof-of-concept setup with no subscription. A Private Offer adds a subscription sized to your core count and use case, whether B2C, B2B, or B2E, as set in your contract. The Support dimension is separate. The Public Offer includes no support, while a Private Offer adds support terms defined in your contract. So pricing scales with your deployment size and chosen use case, and support is contracted independently through a Private Offer.
Top-of-mind questions for buyers
The subscription is sized to the CPU cores running your deployment, not to the number of end users. You can scale to consumer and citizen levels above 100 million users without core-based costs rising in step with user growth. Your core count is set in the Private Offer contract.
B2C covers customer and citizen access, such as consumer login and self-service registration. B2B covers business customers and partners, with delegated administration and separate tenancies per organization. B2E covers employee and workforce access, with single sign-on and internal application management. Your contract specifies which use case applies.
The Public Offer provides a proof-of-concept setup with no subscription and no support. This suits evaluation rather than production use. To run in production and receive support terms, you move to a Private Offer, which adds a subscription sized to your cores and use case.
wso2.com+2
Helpful?
Vendor refund policy
All purchases are final. No refund is applicable.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
WSO2 Identity Server 7.3
Additional details
Usage instructions
To access the deployed Identity Server, please follow the steps given below.
-
SSH into the VM through the Public IP of the VM. The Username is ubuntu and the SSH Key configured during creation should be utilized.
-
Create a entry in the /etc/hosts inside the VM with the below entry. Execute "sudo nano /etc/hosts" and insert the entry: <VM_PRIVATE_IP> is.demo.wso2
-
Execute the command bash -c "export JAVA_HOME=/usr/lib/jvm/temurin-21-jdk-amd64 && wso2is/wso2is-7.3.0/bin/wso2server.sh start" to start the WSO2 Identity Server. This will start the WSO2 IS in the background.
-
Check the logs using the command "tail -f wso2is/wso2is-7.3.0/repository/logs/wso2carbon.log" and wait until the server has started.
After the server is started, please create an /etc/hosts entry in your local machine used to access the WSO2 Identity Server with the value: <VM_PUBLIC_IP> is.demo.wso2
Now you can access the Identity Server using https://is.demo.wso2/console
By default, the credentials for the IS are; username = admin, password = admin as this is a PoC setup. This can be changed if needed.
WSO2 Identity Server documentation is available at https://is.docs.wso2.com/en/latest/
To obtain an Identity Server subscription, please contact us at https://wso2.com/contact/
Support
Vendor support
WSO2 offers two types of support models - Basic Support and Enterprise Support Basic Support offers 12x5 support while Enterprise Support is 24x7 support. For more details, please refer
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This product has charges associated with it for hardening, security configuration, and support.
WSO2 Identity Server is an open-source identity and access management platform running on the JVM, implementing OAuth 2.0, OpenID Connect, SAML 2.0 and SCIM 2.0. This Lynxroute build is hardened and ready out of the box: no administrator password baked into the image, a fresh signing keystore generated at first launch to replace the publicly known default, plain HTTP disabled so only TLS is served, TLS restricted to 1.2 and 1.3, PostgreSQL bound to 127.0.0.1 only, UFW firewall pre-configured, and a CIS Level 1 hardened Ubuntu 24.04 LTS base.
Apache-2.0 license - fully auditable, no vendor lock-in.
WSO2 API Manager is an industry-leading full lifecycle API management platform for building, integrating, securing, and exposing an enterprise's digital services as managed APIs in cloud, on-premises, and hybrid architectures. Fast-track your API strategy with all the capabilities needed by API designers, product managers, operations, and consumers.
WSO2 Private Identity Cloud is an individual, secure SaaS instance of our AI-powered open source IAM suite, enabling secure access for every type of identity: B2C customers, B2B SaaS applications, workforce, and APIs.
OpenChoreo is a complete, open-source Internal Developer Platform (IDP) for Kubernetes. It provides reusable platform and developer abstractions as APIs, a Backstage-powered developer portal, built-in CI/CD, GitOps workflows, RBAC and observability. OpenChoreo is a CNCF project.
Customer reviews
Verified User in Government Relations
IAM Integration with Powerful Out-of-the-Box Features
Reviewed on Jun 24, 2026
Review provided by G2
What do you like best about the product?
Out of the box features. Easy to integrate with any IAM project. Open source, hence customizations is super easy.
What do you dislike about the product?
The documentation can be a bit confusing while troubleshooting any issues.
What problems is the product solving and how is that benefiting you?
Solves the problem of providing right access to the right user at right time.
Hospitality
Extensible, Feature-Rich, and Backed by Efficient Support
Reviewed on May 22, 2026
Review provided by G2
What do you like best about the product?
* Extensibility to support multiple use cases that are not in other products
* Efficient product support
* Built on specifications
* Feature rich
* Efficient product support
* Built on specifications
* Feature rich
What do you dislike about the product?
* Can be complex when it comes to configurations. But efficient support resolves this
What problems is the product solving and how is that benefiting you?
* User authentication
* User authorization (scopes, OPA, XACML)
Helps us in quickly building a platform that lasts forever
* User authorization (scopes, OPA, XACML)
Helps us in quickly building a platform that lasts forever
Nadira P.
Highly Flexible But Complex IAM Solution
Reviewed on Mar 19, 2026
Review provided by G2
What do you like best about the product?
I like that WSO2 Identity Platform is open source and provides total transparency. Its scripting feature allows me to use custom login flows through JavaScript, which is a huge plus. I also appreciate the identity bus for connecting different apps and protocols together. The playground and the platform's future-proof design are other standout features that I find valuable. The initial setup was very easy, making it user-friendly right from the start.
What do you dislike about the product?
The UI is complex, which makes it tough to navigate. There's an update overhead that seems to add more effort. The learning curve is pretty steep, especially for new users, and it involves a lot of manual effort.
What problems is the product solving and how is that benefiting you?
WSO2 Identity Platform centralizes login, simplifies security, automates user management, connects systems, and enhances security.
Mohamed B.
Easy Setup, Straightforward Usage, Needs Security Improvement
Reviewed on Dec 01, 2025
Review provided by G2
What do you like best about the product?
I find WSO2 Identity Server straightforward to use, which greatly simplifies my work in the identity domain at Vodafone. Its simplicity in debugging and the ease with which it integrates with different types of identity servers make it stand out. Among the various identity servers I've interacted with, WSO2 Identity Server is the most user-friendly, allowing everything to be managed directly from its console, thanks to its well-defined structure. Additionally, setting it up on virtual machines is hassle-free, with clear, simple steps that make the process very easy. The overall user experience is enhanced by its well-structured interface that supports my daily operations effectively.
What do you dislike about the product?
Within my team we face regular security concerns towards WSO2 Identity Server side, these security concerns are often related to some scripts which is defined for one of the service providers we have, or more general issue. I think specially from the code point of view it should be invulnerable and well tested when provided.
What problems is the product solving and how is that benefiting you?
I use WSO2 Identity Server to integrate with other systems and provide IAM solutions for our internal applications, this is the main service I use.
raju m.
Easy to integrate into enterprise architecture
Reviewed on Sep 24, 2025
Review provided by G2
What do you like best about the product?
The built-in MFA authenticators are easy to configure and can be set up in a short amount of time.
What do you dislike about the product?
Upgrading to the latest version, especially when customizations are involved, remains quite challenging.
What problems is the product solving and how is that benefiting you?
Complete and reliable IAM solution incorporating industry standards.