Auth0 starts at $35/month.
Okta charges $2/user/month for SSO, then got breached in October 2023.
The breach exposed names and email addresses of every Okta customer support user. HAR files for 134 customers.
There is a self-hosted alternative.
It is called Authentik. 21,763 stars on GitHub.
Here is what it does:
→ SAML 2.0 and OAuth2 / OpenID Connect identity provider
→ LDAP outpost for legacy apps
→ SCIM user provisioning
→ MFA: TOTP, WebAuthn, passkeys, SMS, static tokens
→ Drag-and-drop authentication flows with custom stages
→ Social login: Google, GitHub, Azure AD, and more
→ Forward-auth outpost to protect any app without modifying it
→ Role-based access control with self-service enrollment
Here's the part that matters for small teams:
SSO, SAML, and OIDC are not paywalled in the community edition. Okta charges $2/user/month for SSO at the minimum. For a 50-person company, that's $1,200/year for SSO alone.
Auth0: $35/month and up.
Okta SSO: $2/user/month, breach track record.
Authentik: $0. Self-hosted. MIT core license.
21,763 GitHub stars. Community edition actively maintained.
(Link in the comments)