Do all plans really include every feature?

Yes. SAML, SCIM, custom domains, MFA, audit logging, custom branding — everything. The only difference between plans is the user limit and support level. No feature gating, ever.

How does the free trial work?

Every plan starts with a 14-day free trial. No credit card required to start. Add a payment method before it ends to keep your service running; if you don't, the trial simply expires and you're never charged.

What counts as an "active user"?

An active user is any unique user who logs in at least once during a billing month, including SCIM-provisioned users. Users in your directory who don't log in don't count toward your limit.

Can I change plans later?

Yes. Upgrade or downgrade anytime through the billing portal. Changes take effect at the start of your next billing period.

What happens if I exceed the active user limit?

We email you well before you reach it, and your existing users are never locked out. On Starter you get a 10-day grace to upgrade before new sign-ins beyond your limit are paused. On Pro, Scale, and Enterprise, active users beyond your plan's limit are simply billed as overage at $0.04, $0.025, and $0.015 per additional user respectively — no interruption.

Is there a separate fee for sandbox environments?

No. Every account includes a free sandbox environment for testing. The sandbox is a full clone of your production setup at a separate URL, included at no extra cost.

Is the built-in support AI translation capped?

Yes — and we'd rather say so plainly. Every paid plan includes a monthly translation allotment, sized so the worst-case cost stays well under your plan price: Starter 1,000 units, Pro 4,000, Scale 12,500, Enterprise 37,500. One unit is one support message translated into one reader language, computed once and cached forever, so re-reads are free. By default it's a hard cap — no surprise bill — so once you've used the allotment, new support messages simply show in their original language until the next month. On Pro and up you can opt in to keep translating beyond it at $0.01 per unit; it's off unless you turn it on.

Simple, transparent pricing

Every feature on every plan. SAML, SCIM, custom domains, MFA — all included. Pick the user limit that fits. That's it.

Every plan starts with a 14-day free trial. No credit card required.

Starter

$29/mo

For early-stage products. All features included.

Up to 1,000 active users
Email support
All features included

Start Free Trial →

Pro

$69/mo

For growing SaaS products that need room to scale.

Up to 5,000 active users
Priority support
All features included

Start Free Trial →

Scale

$149/mo

For products with a large user base.

Up to 25,000 active users
Priority support
All features included

Start Free Trial →

Enterprise

$339/mo

For large-scale deployments.

100,000+ active users
Dedicated support engineer
All features included

Start Free Trial →

Free tier. 250 active users, every feature unlimited — yes, unlimited SSO connections. No credit card, no SLA, community support only. Start free →

Active users beyond your plan's limit are billed as overage, never blocked. How limits and overage work →

Every plan includes

OAuth 2.0 / OIDC
SAML SSO
SCIM provisioning
MFA (TOTP)
Custom branding
Custom domains
Management portal
Audit logging
BYO certificate
Multilingual customer support

What you actually pay to go enterprise-ready

Most providers gate SAML, SCIM, audit logs, and branding behind per-connection fees, paid add-ons, or an enterprise tier. Authagonal includes every feature in every plan — from $29/mo, with no per-connection charges.

	Authagonal	Auth0Migrate →	Okta	WorkOS	Clerk	DuendeMigrate →
Starting price	$29/mo	$35 B2C · $150 B2B	Per user, $1,500/yr min	Free to 1M MAU	$25/mo · 50k free	$5,750/yr
SAML / enterprise SSO	Unlimited connections	1 free; +$100/conn. (B2B)	Separate SKU, ~$2/user	$125 / conn. / mo	1 free, then $75/conn.	Add-on: +$1,500/yr
SCIM provisioning	Included	Free tier & B2B	Separate SKU, ~$4/user	$125 / conn. / mo	Free with connection	Build it yourself
MFA	Included	Basic; adaptive = Ent.	Adaptive MFA = $17 tier	Included in AuthKit	Included on Pro ($25)	Build it yourself
Audit logs	Included, 365-day	1–30d by tier	System Log included	$125/SIEM + $99/1M	7d Pro / 30d Business	Build it yourself
Custom domains	Included	1 incl., all tiers	Included	$99/mo add-on	Free, all tiers	Your own infra
Custom branding	Included, on your domain	Theme only; advanced = Pro+	Gated by edition	Login free; portal branding = sales	Full on Pro ($25)	You build the UI
End-user support desk	Included, auto-translated	Not offered	Not offered	Not offered	Not offered	Not offered
Hosting	Fully hosted	Hosted	Hosted	Hosted	Hosted	You self-host + patch

Or run it yourself — Authagonal is open source and free to self-host. Get it on GitHub →

Competitor pricing and feature gating taken from each vendor's public pricing pages, as of June 2026 — figures change, so check their current pages. "Per connection" means per enterprise customer's SSO/SCIM link. *Auth0 now bundles one enterprise connection, SSO, and SCIM on its free tier (to 25k MAU); paid consumer tiers drop them, so production SSO means its pricier B2B line. Clerk bills on retained users rather than monthly active users. Duende IdentityServer is a self-hosted framework you build and operate yourself; SAML is a paid add-on on top of the license.

Frequently asked questions

Do all plans really include every feature?: Yes. SAML, SCIM, custom domains, MFA, audit logging, custom branding — everything. The only difference between plans is the user limit and support level. No feature gating, ever.
How does the free trial work?: Every plan starts with a 14-day free trial. No credit card required to start. Add a payment method before it ends to keep your service running; if you don't, the trial simply expires and you're never charged.
What counts as an "active user"?: An active user is any unique user who logs in at least once during a billing month, including SCIM-provisioned users. Users in your directory who don't log in don't count toward your limit.
Can I change plans later?: Yes. Upgrade or downgrade anytime through the billing portal. Changes take effect at the start of your next billing period.
What happens if I exceed the active user limit?: We email you well before you reach it, and your existing users are never locked out. On Starter you get a 10-day grace to upgrade before new sign-ins beyond your limit are paused. On Pro, Scale, and Enterprise, active users beyond your plan's limit are simply billed as overage at $0.04, $0.025, and $0.015 per additional user respectively — no interruption.
Is there a separate fee for sandbox environments?: No. Every account includes a free sandbox environment for testing. The sandbox is a full clone of your production setup at a separate URL, included at no extra cost.
Is the built-in support AI translation capped?: Yes — and we'd rather say so plainly. Every paid plan includes a monthly translation allotment, sized so the worst-case cost stays well under your plan price: Starter 1,000 units, Pro 4,000, Scale 12,500, Enterprise 37,500. One unit is one support message translated into one reader language, computed once and cached forever, so re-reads are free. By default it's a hard cap — no surprise bill — so once you've used the allotment, new support messages simply show in their original language until the next month. On Pro and up you can opt in to keep translating beyond it at $0.01 per unit; it's off unless you turn it on.