Auth Identity · pricing · Updated November 2026
WorkOS pricing (2026)
WorkOS's paid plans start at $125/mo (SSO / Directory Sync — Pay as You Go) as checked on 2026-11-01, read from WorkOS's own pricing page; 3 plans. Best for B2B SaaS adding enterprise SSO / SCIM quickly. Every figure below links to its source and the date we captured it.
At a glance
- Entry price: $125/mo (SSO / Directory Sync — Pay as You Go)
- Free tier: Yes
- Compliance: HIPAA — · SOC 2 — · GDPR —
- Best for: B2B SaaS adding enterprise SSO / SCIM quickly; Products with large consumer MAU bases (1M+ free); Startups that need per-connection SSO billing (no flat fee)
As of · every figure below links to its source STALE · 2026-09-02
WorkOS plans & pricing
| Plan | Monthly | Annual | Billing | Notes | Source |
|---|---|---|---|---|---|
| AuthKit — Free Tier | $0 | — | Flat monthly | First 1M MAUs free. Includes email/password, social login, passkeys, MFA, magic auth, enterprise SSO. Usage-based above 1M MAUs: $2,500/mo per additional 1M MAUs. | workos.com |
| SSO / Directory Sync — Pay as You Go STALE · 2026-09-02 | $125 | — | Custom / quote | Per-connection pricing: 1–15 connections at $125/connection/mo; 16–30 at $100/connection/mo (20% off); 31–50 at $80/connection/mo; 51–100 at $65/connection/mo; 101–200 at $50/connection/mo; 201+ contact sales. The monthly price recorded here reflects cost of a single connection at the lowest tier. Audit log streaming: $125/mo per SIEM connection; Event retention: $99/mo per 1M events. | workos.com |
| Annual Credits | not priced monthly | — | Custom / quote | Custom annual pricing with pre-pay discounts. Includes 99.99% uptime SLA, guided migration, guaranteed support SLA. Contact sales. | workos.com |
Last verified 2026-11-01. STALE marks a plan we have not re-checked at its source in over 30 days. 1 of 3 plans above is marked. https://workos.com/pricing accessed 2026-06-14. HIPAA/BAA not mentioned on pricing page. AuthKit (user management) is free up to 1M MAUs; $2,500/mo per additional 1M MAUs. SSO and Directory Sync priced per connection/month with volume tiers. No hipaa/baa confirmed from available pages.
Price changes
Price on record
$125/moFirst on record 2026-06-27
A new dated entry is stamped here each time the price moves — the record builds itself.
Tracked since June 2026. No change record has cleared two sources yet, so nothing is published on the wire.
Capabilities
Integrations: Okta, Microsoft Azure AD / Entra ID, Google Workspace, OneLogin, Ping Identity, JumpCloud, ADFS, Generic SAML / OIDC providers.
Key features: AuthKit: full-stack user management free up to 1M MAUs; Enterprise SSO via SAML/OIDC to any identity provider; SCIM Directory Sync with HRIS integrations; Admin Portal for self-serve IT setup; Radar real-time bot and fraud detection.
Plan limits: AuthKit: first 1M MAUs free, then $2,500/mo per additional 1M; SSO connections: $125/connection/mo (1–15), volume discounts at 16+; Audit log event retention: $99/mo per 1M events; Radar bot protection: first 1,000 checks free.
Frequently asked questions
How much does WorkOS cost?
WorkOS's paid plans start at $125/mo (SSO / Directory Sync — Pay as You Go), and it lists a $0 plan (AuthKit — Free Tier); it has 3 published plans. Verified 2026-11-01.
What are cheaper alternatives to WorkOS?
Cheaper auth identity than WorkOS (entry $125/mo) include Clerk at $25/mo, Supabase at $25/mo, Auth0 at $35/mo. Verified 2026-11-01.
Does WorkOS support HIPAA?
WorkOS's public pages do not say whether it supports HIPAA.
Does WorkOS have a free plan?
Yes — WorkOS publishes a free tier.
WorkOS vs alternatives
Compare all auth identity · True cost of auth identity · SOC 2 claims in auth identity · HIPAA claims in auth identity · GDPR claims in auth identity · Open data · MCP
Cheaper auth identity alternatives
More auth identity tools
Related categories
This standing as a plaque
WorkOS currently holds a bronze deskmark here — Rank 8 of 9 · Auth Identity. Anyone may show it. There is nothing to apply for, nothing to pay, and displaying it changes no score: the standing comes from the published algorithm, which never reads commission data. We never ask anyone to show it, and its link carries rel="nofollow".
The image is drawn from our live data, so it follows the standing rather than freezing it: if WorkOS moves up or down a tier, the plaque on your own site says so at our next publish. Nothing is tracked beyond the ordinary web-server log that records any image request.