Simple, transparent pricing
Every feature on every plan. SAML, SCIM, custom domains, MFA — all included. Pick the user limit that fits. That's it.
Starter
For early-stage products. All features included.
- Up to 1,000 active users
- Email support
- All features included
Pro
For growing SaaS products that need room to scale.
- Up to 5,000 active users
- $0.04 per active user over 5,000
- Priority support
- All features included
Every plan includes
What you actually pay to go enterprise-ready
Most providers gate SAML, SCIM, audit logs, and branding behind per-connection fees, paid add-ons, or an enterprise tier. Authagonal includes every feature in every plan — from $29/mo, with no per-connection charges.
| Authagonal | Auth0Migrate → | Okta | WorkOS | Clerk | DuendeMigrate → | |
|---|---|---|---|---|---|---|
| Starting price | $29/mo | $35 B2C · $150 B2B | Quote only · per-user | Free to 1M MAU | $25/mo · 50k free | $5,750/yr |
| SAML / enterprise SSO | Unlimited connections | B2B only, +$100/conn. | Separate SKU, ~$2/user | $125 / conn. / mo | 1 free, then $75/conn. | Add-on: +$1,500/yr |
| SCIM provisioning | Included | Needs Enterprise conn. | Separate SKU, ~$4/user | $125 / conn. / mo | Free with connection | Build it yourself |
| MFA | Included | Basic; adaptive = Ent. | Adaptive MFA = add-on | Included in AuthKit | Included on Pro ($25) | Build it yourself |
| Audit logs | Included, 365-day | 1–30d by tier | System Log included | $125/SIEM + $99/1M | 7d Pro / 30d Business | Build it yourself |
| Custom domains | Included | 1 incl., all tiers | Included | $99/mo add-on | Free, all tiers | Your own infra |
| Custom branding | Included, on your domain | Theme only; HTML = Ent. | Gated by edition | Login free; portal = sales | Full on Pro ($25) | You build the UI |
| Hosting | Fully hosted | Hosted | Hosted | Hosted | Hosted | You self-host + patch |
Or run it yourself — Authagonal is open source and free to self-host. Get it on GitHub →
Competitor pricing and feature gating taken from each vendor's public pricing pages, as of June 2026 — figures change, so check their current pages. "Per connection" means per enterprise customer's SSO/SCIM link. *Auth0's cheapest plan that offers SAML is its B2B tier; Clerk bills on retained users rather than monthly active users. Duende IdentityServer is a self-hosted framework you build and operate yourself; SAML is a paid add-on on top of the license.
Frequently asked questions
Do all plans really include every feature?
Yes. SAML, SCIM, custom domains, MFA, audit logging, custom branding — everything. The only difference between plans is the user limit and support level. No feature gating, ever.
How does the free trial work?
Every plan starts with a 30-day free trial. A card is required up front, but you can cancel any time before it ends and won't be charged.
What counts as an "active user"?
An active user is any unique user who logs in at least once during a billing month, including SCIM-provisioned users. Users in your directory who don't log in don't count toward your limit.
Can I change plans later?
Yes. Upgrade or downgrade anytime through the billing portal. Changes take effect at the start of your next billing period.
What happens if I exceed the active user limit?
We email you well before you reach it, and your existing users are never locked out. On Starter you get a 10-day grace to upgrade before new sign-ins beyond your limit are paused. On Pro, Scale, and Enterprise, active users beyond your plan's limit are simply billed as overage at $0.04, $0.025, and $0.015 per additional user respectively — no interruption.
Is there a separate fee for sandbox environments?
No. Every account includes a free sandbox environment for testing. The sandbox is a full clone of your production setup at a separate URL, included at no extra cost.