Notentra is the standards-based identity platform you run on your own network — a full identity provider plus a free IIS service-provider module. OIDC, SAML, FIDO2, and conditional access, on hardware your team controls. No cloud dependency. No vendor lock-in.
Most identity providers ask you to hand your users, tokens, and audit trail to someone else's cloud. Notentra runs where your data already lives — and includes the capabilities competitors gate behind premium tiers.
Self-hosted on Windows Server, IIS, and SQL. No SaaS vendor sees your identities. Air-gap capable for sovereign deployments.
Conditional access, risk policy, per-credential AAL grading, and tamper-evident audit ship in every tier. What competitors paywall is baseline here.
One Setup.exe wizard handles prerequisites, IIS, the database, certificates, and the admin account. A direct ADFS replacement.
Every credential graded to NIST 800-63B. A synced passkey lands at AAL2, a hardware key at AAL3 — so "hardware-bound required" means it.
Every decision is a typed event, HMAC-chained (NIST 800-53 AU-9). Prove the log wasn't edited — verified in one click.
Run the IdP as a SAML spoke off Okta or Entra. Protect any IIS app with the free SP module — no code changes. Adopt without ripping anything out.
The identity provider issues the tokens. The service-provider module protects the apps that consume them. Use either on its own, or both together.
A standards-based IdP for Windows. OIDC, SAML 2.0, WS-Fed, FIDO2, and certificate auth, with conditional access and tamper-evident audit built in.
A native IIS module that turns any IIS-hosted app into a SAML 2.0 service provider. No reverse proxy, no middleware, no application code changes.
3-year license cost at 500 users — and where your identity data physically lives.
| Notentra IdP | Entra ID P1 | Okta + MFA | |
|---|---|---|---|
| 3-yr cost · 500 users | $82,500 | $108,000 | $144K–216K |
| Conditional access | Included | P1 tier | Add-on SKU |
| Per-credential AAL grading | Yes | No | Partial |
| Identity data lives | Your network | Microsoft cloud | Okta cloud |
| Air-gap capable | Yes | No | No |
| Free IIS SP module | Yes | No | No |
Competitor prices are public-list estimates, May 2026. Verify before quoting.
Stand Notentra up beside what you run today. Move one app. Decide at renewal.