To prevent Alibaba Cloud resources from being wasted, Identity as a Service (IDaaS) sets default quotas on both paid and free resources. Most deployments stay well within these limits. If your workload requires higher quotas — for example, more than 10,000 accounts or 2,000 organizations — contact us to request an increase.
Quota types
IDaaS enforces two categories of limits:
System-wide quotas: Apply uniformly across all instances and editions.
Edition-based limits: Differ between Free Edition and Enterprise Edition. Enterprise Edition limits scale with your paid account count.
Default quotas
The following quotas apply per instance unless otherwise noted.
System-wide quotas
| Resource | Default quota | Notes |
|---|---|---|
| Instances per Alibaba Cloud account | 5 | — |
| Organizations per instance | 2,000 | Contact us to increase |
| Organization depth | 10 levels | Maximum nesting depth |
| Logon methods | 10 | — |
| Application synchronization objects | 10 | Up to 200 organizations and groups |
| Roles per IDaaS account per application | 5 | Maximum roles assignable when an IDaaS account logs on to an application |
| Identity providers (IdPs) on DingTalk | 10 | — |
| Other inbound IdPs | 10 | Excludes DingTalk IdPs |
| Other outbound IdPs | 10 | Excludes DingTalk IdPs |
Edition-based limits
| Resource | Free Edition | Enterprise Edition |
|---|---|---|
| Accounts per instance | 50 | Subject to paid account count |
| Applications per instance | 3 | 1,000 |
Some default quota values in this version may differ from those in earlier versions. Contact us to confirm the actual quotas for your account.
As IDaaS improves, new quota items may be added and existing quotas may be adjusted based on customer feedback.