Commercial Licensing
fulla is an open-source IAM core under AGPL-3.0. Everything you need to run a complete identity system is — and stays — free. A commercial license covers non-AGPL distribution terms; enterprise operational capabilities (directory sync, policy management, audit compliance) are planned.
The open-core commitment
Three commitments that come before any pricing discussion.
Protocol semantics are free forever
The complete OAuth2/OIDC surface — including organization claims, organization-level admin consent, org-scoped tokens, and federated login via OIDC-in (next on the core roadmap) — is part of the open-source core, delivered under AGPL-3.0. It will never move behind a paywall.
Core never moves down
What is in the free core today stays in the free core. Paid tiers are added on top — operational automation, compliance, support — not carved out of what you already run.
No SSO tax
Login and authorization protocols are never something you pay for. The paid tier covers operations — directory sync, policy management, audit compliance, support — not the protocols your users authenticate with.
Licensing options
One codebase: AGPL-3.0 by default, commercial terms when your distribution model needs them.
Open-source core (AGPL-3.0)
The complete IAM: protocol engine, admin console, user frontend, multi-tenancy, SDKs. Use it, fork it, run it in production — under AGPL-3.0 (LICENSE).
Read the LICENSE →Commercial license
Embedding or redistributing fulla inside a closed-source product? AGPL-3.0 may not fit your distribution model. A commercial license grants the distribution terms AGPL does not; the licensing framework is anchored in the repository (LICENSE + CLA.md).
View the CLA →Enterprise subscription
Self-hosted, annual, tiered by organization size. Unlocks the enterprise capabilities below — plus a license-key entitlement binding updates and support to your subscription.
Pricing structure
Illustrative structure; quotes are per deployment and available on request.
- Annual subscription — one predictable line item per year.
- Tiered by organization size, not by per-user license counts.
- No MAU / monthly-active-user billing — the norm for self-hosted IAM; your costs do not swing with login traffic.
- One price list: every enterprise capability (and the reserved agent-governance slot) sits in the single Enterprise tier — no edition matrix.
Enterprise capabilities
Customer-triggered roadmap: planned, delivered with customer engagement — none of these are available today.
License-key entitlement
The subscription proof: an offline-friendly signed key that binds update releases and support to your subscription. An entitlement, not DRM — the source stays in the AGPL repository.
SCIM 2.0 directory sync
Automated user and group provisioning from your IdP (Entra ID, Okta) into fulla organizations. Federated login itself stays in the free core — SCIM is directory operations, not a login protocol.
Organization policy pack
Password policies, session lifetimes, lockout thresholds, and mandatory WebAuthn — enforced per organization, overriding the global defaults.
Audit retention & compliance reporting
Organization-sliced compliance reports — logins, administrative actions, authorization changes — with configurable retention and export.
Agent governance (reserved slot)
A reserved slot on the same price list: when AI agents need governed, auditable access through fulla, the entitlement lands here — not in a separate edition.
Talk to us
The fastest channel is GitHub: open an issue with the commercial label, or reach the maintainer directly.
The pricing structure above is illustrative and nothing on this page is a binding offer; final terms are set in a written agreement.