How much does an identity provider cost per user in 2026?
Workforce IdP entry-tier rates sit between $3 and $9 per user per month. JumpCloud and OneLogin start at $3/user/mo; Microsoft Entra ID P1 and Okta Starter are $6/user/mo. CIAM products price on monthly active users (MAU), with free tiers of 7,500 to 50,000 MAU and per-MAU rates of $0.015 to $0.10 above that.
Is Microsoft Entra ID free?
Microsoft Entra ID has a free tier that includes SSO to common SaaS applications. Conditional access, MFA on third-party apps, and SCIM provisioning require P1 ($6/user/mo) or P2 ($9/user/mo). If your organisation is on Microsoft 365 E3 you already have P1 included; M365 E5 includes P2.
What is the cheapest IdP?
For organisations on Microsoft 365 E3 or E5, Microsoft Entra ID has a $0 marginal cost. For organisations not on M365, JumpCloud's standalone SSO module at $3/user/mo and OneLogin Basic at $3/user/mo are the cheapest commercial workforce IdPs without an annual minimum. For self-host, Keycloak (Apache 2.0) and Authentik Community are free in licence; operational cost is real.
Why does Okta cost more than the headline rate at small seat counts?
Okta carries a $1,500 per year annual minimum across every tier. At fewer than about 21 seats, the floor applies regardless of seat count. A 10-seat team pays $1,500 per year, which works out to roughly $12.50 per user per month - double the published $6 Starter rate.
Why is Ping Identity priced at $3/user/mo but quoted as enterprise-only?
Ping's $3/user/mo Essential tier carries a 5,000-user contractual minimum. The effective floor is $180,000 per year regardless of how many seats you actually deploy. Below about 10,000 seats, every other commercial IdP in this cohort is cheaper.
What does MAU mean and how is it billed?
MAU is monthly active users. A user is billable in any 30-day rolling window during which they authenticate. Definitions vary slightly between vendors but the practical effect is the same: every authentication event counts a user as active for the window. Users who log in once and never return are billed for the full window.
Is open-source self-hosting really free?
The licence is free for Keycloak, Authentik Community, and FusionAuth Community. Operational cost is real: hosting infrastructure ($200 to $400 per month for HA setup), database administration, upgrades, monitoring, and incident response. Below about 30 seats, the operational burden is usually small enough that self-host is the cheapest credible option. Above that, the engineering time typically justifies a commercial product.
How often is the data on this site verified?
Every tier price is verified at least quarterly. Material vendor repricing events trigger off-cycle updates within seven days. Each per-IdP page shows a verifiedOn date and links to the vendor's published pricing source.
Do you accept affiliate revenue from any IdP listed?
No. idppricing.com is funded by display advertising only. No affiliate links, no sponsored placements, no IdP partnership. The advertiser exclusion list specifically forbids identity and access-management ads on this property.
Last verified June 2026.