idp pricing in 2026: what identity providers actually cost.
Sixteen identity providers, per-seat list prices fetched live, M365-bundle math, self-host TCO. Sister site to ssopricing.com. No affiliate revenue on any IdP listed.
How much does an identity provider cost per user in 2026?
Published per-user rates for workforce IdPs range from $3 to $9 per user per month at the entry tier. Microsoft Entra ID is effectively free for any organisation already on Microsoft 365 E3 or E5. Self-hosted Keycloak and Authentik Community editions have no licence fee but carry real operational cost ($200-400/mo hosting plus admin time).
CIAM (customer identity) is priced differently: most charge per monthly active user (MAU) above a free tier of 7,500 to 50,000 MAU. Per-MAU rates above the free tier range from $0.015 (AWS Cognito) to $0.10 (Stytch B2C).
What each IdP supports
Twelve features across 18 IdPs. Support is at the IdP's top tier. Check each per-IdP page for which features kick in at which tier.
| Feature | Okta Workforce | Entra ID | JumpCloud | Auth0 | OneLogin | Ping Identity | Duo (Cisco) | Authentik | FusionAuth | Stytch | WorkOS | Frontegg | Clerk | Descope | Google Cloud Identity | AWS Cognito | Keycloak | IBM Verify |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| SAML 2.0 | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y |
| OIDC | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y |
| SCIM | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | |
| MFA | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y |
| Passkeys | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y |
| Conditional access | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y |
| Lifecycle mgmt | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | ||||||
| Audit logs | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y |
| Device trust | Y | Y | Y | Y | Y | Y | Y | Y | ||||||||||
| API access | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y |
| B2B federation | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | |
| Governance | Y | Y | Y | Y | Y |
The 18 identity providers we track
Okta Workforce Identity
Microsoft Entra ID
JumpCloud
Auth0
OneLogin
Ping Identity
Duo (Cisco)
Authentik
FusionAuth
Stytch
WorkOS
Frontegg
Clerk
Descope
Google Cloud Identity
AWS Cognito
Keycloak
IBM Verify
Related cost references
Two halves of one procurement decision
SSO procurement has two cost lines that vendor blogs almost always discuss separately: the IdP itself (Okta, Entra, JumpCloud and similar) and the SSO premium each SaaS vendor charges to integrate with that IdP. Most "true cost of SSO" comparisons cover one side and skip the other.
idppricing.com covers the IdP side. ssopricing.com covers the vendor side. Both publish per-row verified-on dates, link every claim to its source, and re-verify quarterly. Same independence rules. No affiliate revenue, no SSO product to sell, no IdP partnership.
For a buyer-side reader, the right view of "what SSO actually costs you" is the sum of an IdP from this site plus the per-vendor premium from ssopricing.com. Methodology.
You probably already pay for Microsoft Entra ID
Microsoft 365 E3 includes Entra ID P1. M365 E5 includes Entra ID P2. The marginal cost of using Microsoft as your IdP, for any organisation already on those M365 tiers, is $0.
Practical test: if your team is on M365 E3 or E5 and the IdP feature set on Entra P1/P2 covers your needs (it does for most companies under 1,000 seats), you are paying twice if you also subscribe to Okta or JumpCloud. The calculator above factors this in when you tick the M365 E3 box.
Cheapest paid workforce tier in the cohort: JumpCloud at $3/user/month.