Tool profile
Enterprise identity toolkit for B2B SaaS with SSO, SCIM, directory sync, and auth flows.
Closing deals that require SAML SSO and SCIM from the security questionnaire
WorkOS targets B2B SaaS teams that need enterprise checklists without building a full identity company. AuthKit bundles hosted login, social and email/password, MFA, passkeys, organizations, JIT provisioning, and RBAC. SSO and Directory Sync are sold per *connection*—each enterprise customer you onboard with SAML/OIDC or SCIM counts as one connection, regardless of IdP or user count.
Public pricing (workos.com/pricing) lists up to 1 million monthly active users free on AuthKit (MAU = any sign-in, sign-up, or profile update in the month). Beyond that, about $2,500/month per additional 1M MAU appears on the calculator. SSO and Directory Sync start at $125/connection/month for the first 15 connections, with published volume discounts (e.g. ~$100 at 16–30, ~$80 at 31–50, stepping down at higher tiers). Audit Logs include log streaming at $125/month per SIEM connection and $99/month per million stored events. Radar (bot/fraud signals) lists 1,000 checks free, then $100 per 50k checks. A custom domain for AuthKit, Admin Portal, and email sender branding is $99/month.
Staging is free to integrate; production billing starts when you promote. Compare Stytch and Auth0 when you want all-in hosted login with different MAU and connection math; compare Clerk when B2C and speed matter more than IT-admin SSO workflows.
Quick fit
Editorial take
WorkOS is deliberately modular: forecast AuthKit MAU separately from SSO/Directory connections—a few enterprise logos can dominate cost even at modest MAU. Radar and audit retention are easy to under-model; wire billing alerts before production. For adjacent picks, Stytch publishes similar connection overage math; Auth0/Okta bundles differ by MAU tier; Clerk optimizes for product-led B2C unless you add enterprise features elsewhere.
What it does well
Primary use cases
Fit notes
Compare with
Pressure-test this pick against nearby alternatives.
Pricing snapshot
WorkOS pricing currently shows AuthKit free up to 1 million monthly active users, then $2,500 per month for each additional 1 million users. SSO and Directory Sync both start at $125 per connection per month for the first 15 connections, with public volume discounts at higher tiers. Audit Logs cost $125 per SIEM connection and $99 per million stored events, Radar includes 1,000 free checks then $100 per 50,000 checks, and a custom domain is $99 per month.
Auth0
Free planB2B SaaS selling into buyers expecting SAML, SCIM, and audit evidence
Identity platform for adding authentication, user management, SSO, and access control to apps.
Free: 25k MAU; Essentials/Professional self-serve: 500 MAU on public 2026 cards—confirm before budgeting.
