Features
If you want to compare OpenID Connect features of different providers, please check out the OpenID Connect Providers benchmark.
Looking for Ory’s (C)IAM features like MFA, SSO, and user management? View Ory on the (C)IAM Identity Providers benchmark.
Frequently Asked Questions
Does Ory support the Authorization Code grant type?
Ory supports Authorization Code grant type.
Does Ory support the Refresh Token grant type?
Ory supports Refresh Token grant type.
Does Ory support the Client Credentials grant type?
Ory supports Client Credentials grant type.
Does Ory support the Implicit grant type?
Ory supports Implicit grant type.
Does Ory support the Token Exchange grant type?
Ory partially supports Token Exchange grant type. RFC 8693 token exchange is available on Ory Network and Ory Enterprise License, not in the open-source edition. Read more
Does Ory support the Client Initiated BackChannel Authentication grant type?
Ory does not support Client Initiated BackChannel Authentication grant type.
Does Ory support the Device Authorization Grant grant type?
Ory supports Device Authorization Grant grant type.
Does Ory support the JWT Bearer Token grant type?
Ory supports JWT Bearer Token grant type.
Does Ory support the SAML 2.0 Bearer Assertion grant type?
Ory does not support SAML 2.0 Bearer Assertion grant type.
Does Ory support the Resource Owner Password Credentials grant type?
Ory partially supports Resource Owner Password Credentials grant type. Resource owner password credentials grant is available on Ory Network and Ory Enterprise License, not in the open-source edition. Read more
Does Ory support the PKCE extension?
Ory supports PKCE extension.
Does Ory support the PAR extension?
Ory does not support PAR extension. Read more
Does Ory support the RAR extension?
Ory does not support RAR extension. Read more
Does Ory support the JAR extension?
Ory does not support JAR extension. Read more
Does Ory support the Authorization Endpoint endpoint?
Ory supports Authorization Endpoint endpoint. Read more
Does Ory support the Token Endpoint endpoint?
Ory supports Token Endpoint endpoint. Read more
Does Ory support the UserInfo Endpoint endpoint?
Ory supports UserInfo Endpoint endpoint. Read more
Does Ory support the Token Revocation endpoint?
Ory supports Token Revocation endpoint. Read more
Does Ory support the Token Introspection endpoint?
Ory supports Token Introspection endpoint. Read more
Does Ory support the Device Authorization Endpoint endpoint?
Ory supports Device Authorization Endpoint endpoint. Read more
Does Ory support the OpenID Connect Discovery Endpoint endpoint?
Ory supports OpenID Connect Discovery Endpoint endpoint. Read more
Does Ory support the OAuth 2.0 Authorization Server Metadata Endpoint endpoint?
Ory supports OAuth 2.0 Authorization Server Metadata Endpoint endpoint. Read more
Does Ory support the none token endpoint authentication method?
Ory supports none token endpoint authentication method. Read more
Does Ory support the client_secret_basic token endpoint authentication method?
Ory supports client_secret_basic token endpoint authentication method. Read more
Does Ory support the client_secret_post token endpoint authentication method?
Ory supports client_secret_post token endpoint authentication method. Read more
Does Ory support the client_secret_jwt token endpoint authentication method?
Ory does not support client_secret_jwt token endpoint authentication method. Read more
Does Ory support the private_key_jwt token endpoint authentication method?
Ory supports private_key_jwt token endpoint authentication method. Read more
Does Ory support the tls_client_auth token endpoint authentication method?
Ory does not support tls_client_auth token endpoint authentication method.
Does Ory support the none prompt?
Ory supports none prompt. Read more
Does Ory support the login prompt?
Ory supports login prompt. Read more
Does Ory support the consent prompt?
Ory supports consent prompt. Read more
Does Ory support the select_account prompt?
Ory does not support select_account prompt. Read more
Does Ory support the create prompt?
Ory partially supports create prompt. Uses registration prompt Read more
Does Ory support the RP-initiated Logout feature?
Ory supports RP-initiated Logout feature. Read more
Does Ory support the Dynamic Client Registration Protocol feature?
Ory supports Dynamic Client Registration Protocol feature.
Does Ory support the Dynamic Client Registration Management Protocol feature?
Ory supports Dynamic Client Registration Management Protocol feature. RFC 7592 management endpoints, disabled by default.
Does Ory support the Refresh Token Rotation feature?
Ory supports Refresh Token Rotation feature. Read more
Does Ory support the Refresh Token Rotation Grace Period feature?
Ory supports Refresh Token Rotation Grace Period feature. Configurable via 'rotation_grace_period' (up to 180 days when combined with 'rotation_grace_reuse_count') so a rotated-out refresh token stays valid, optionally capped to a limited number of reuses. Read more
Does Ory support the OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature?
Ory does not support OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature.
Does Ory support the FAPI 1.0 Security Profile - Part 1: Baseline feature?
Ory does not support FAPI 1.0 Security Profile - Part 1: Baseline feature. Read more
Does Ory support the FAPI 1.0 Security Profile - Part 2: Advanced feature?
Ory does not support FAPI 1.0 Security Profile - Part 2: Advanced feature. Read more
Does Ory support the FAPI 2.0 Security Profile feature?
Ory does not support FAPI 2.0 Security Profile feature. Read more
Does Ory support the FAPI 2.0 Message Signing feature?
Ory does not support FAPI 2.0 Message Signing feature. Read more
Does Ory support the JARM feature?
Ory does not support JARM feature.
Compare with other providers
Note: The current data is based on provider documentation/experience and may not be 100% accurate.