The short answer
Identity provider list prices in 2026 cluster in three bands. Workforce IdPs sit at $3 to $9 per user per month at the entry tier. Customer identity (CIAM) products price on monthly active users (MAU), with free tiers from 7,500 to 50,000 MAU and per-MAU rates of $0.015 to $0.10 above that. Self-hosted open source (Keycloak, Authentik Community, FusionAuth Community) is free in licence and runs $200 to $400 per month in hosting plus admin time.
The single most consequential factor is bundling. Microsoft Entra ID P1 is included in Microsoft 365 E3 and P2 in M365 E5. If your organisation already pays for one of those tiers, the marginal cost of Entra as your IdP is $0. Google Cloud Identity Premium is similarly included in Google Workspace Business and Enterprise.
What "list price" actually means
Vendor pricing pages publish a per-seat figure. Real invoices are shaped by annual minimums, contractual seat floors, bundled discounts, and (for CIAM) actual MAU. The $3/user/mo Ping Identity Essential rate is real but applies only above a 5,000-user contractual floor ($180,000/yr). The $6/user/mo Okta Starter rate applies above a $1,500/yr annual minimum.
For CIAM products, per-user pricing is misleading. Auth0 B2B Essentials is $150/mo at the 500 MAU floor. WorkOS charges per enterprise connection ($125/mo) regardless of users behind that connection. The "right" model depends entirely on the shape of your user base.
How to use this site
- Start with the homepage TCO calculator. Set seat count, tick required features, flag whether you are on Microsoft 365 E3 or E5.
- Click into each vendor page for tier-by-tier pricing, hidden costs, and source links.
- Use the compare pages for head-to-head matchups (Okta vs Auth0, Okta vs Entra, Auth0 vs WorkOS, JumpCloud vs Okta, Clerk vs Auth0).
- Read the implementation cost page for the second invoice (consulting, migration, training) that most pricing pages omit.
Last verified June 2026.