Authentication,
issued flat.
Drop-in sign-in, hosted flows, and hooks — the developer experience you expect. Sold on one flat, predictable rate that unlocks every feature. No per-user meter. No SSO tax. No plan you outgrow.
No credit card Every feature SAML & SCIM included
- sub
- usr_7K3Qa9fP
- sid
- sess_2tXp4Lm
- aal
- aal2 · MFA
- iss
- api.identrahq.com
Priced by scale, not by feature.
Every other auth vendor sells you the product, then sells the important parts back one gate at a time. Identra sells one thing: the whole thing. Plans differ only by how many people you authenticate.
One flat rate, every feature
Passkeys, MFA, orgs, RBAC, webhooks, audit logs, the governance suite — all of it, on day one, on every plan.
SSO is included, not upsold
SAML, OIDC and SCIM ship on the free tier. The capability enterprises pay a premium for elsewhere is simply on.
A bill you can read in advance
Flat brackets, deduplicated MAU, test users free. No live per-user meter ticking against your growth.
One register. Every plan.
This is the complete feature set — and it is identical on Free, Pro, and Enterprise. Nothing here is a tier. Read the whole index and notice what's missing: an asterisk.
Sign-in
Sec. I- I·01 Email & password
- I·02 Passwordless / magic links
- I·03 Email & SMS one-time codes
- I·04 Passkeys (WebAuthn)
- I·05 Social login (Google, GitHub, …)
- I·06 Multi-factor authentication (TOTP, backup codes)
Enterprise SSO
Sec. II- II·01 SAML 2.0 SSO
- II·02 OIDC SSO
- II·03 SCIM 2.0 user provisioning
- II·04 Directory sync
- II·05 Just-in-time provisioning
Organizations
Sec. III- III·01 Organizations & memberships
- III·02 Roles & permissions (RBAC)
- III·03 Relationship-based access (ReBAC)
- III·04 Invitations & waitlists
- III·05 Entitlements & B2B plans
Developer platform
Sec. IV- IV·01 Drop-in UI components
- IV·02 Hooks & hosted flows
- IV·03 All client & server SDKs
- IV·04 Webhooks & the event stream
- IV·05 The identra CLI & sandbox mode
Brand & delivery
Sec. V- V·01 Custom domains & TLS
- V·02 Full theming & branding
- V·03 Localized email / SMS templates
- V·04 Internationalization (i18n)
- V·05 Migration importer
Governance & trust
Sec. VI- VI·01 Tamper-evident audit logs
- VI·02 Named locations & device trust
- VI·03 JIT / PIM privileged access
- VI·04 Access reviews & service accounts
- VI·05 Impersonation & the risk engine
The part they usually
sell back to you.
Across this category, single sign-on is the classic upsell — fenced behind an “Enterprise” call, often at four to ten times the price, sometimes metered per connection. It's the same SAML either way. We just don't charge a toll to cross into it.
Drop it in.
Sign them in.
A publishable key, a provider, and the drop-in UI — that's a working sign-in. Server-side, verify tokens locally with cached JWKS: no round-trip on the hot path.
import {
IdentraProvider, SignedIn, SignedOut, SignIn, UserButton,
} from "@identra/react";
export function App() {
return (
<IdentraProvider baseUrl="https://api.identrahq.com" applicationId={APP_ID}>
<SignedOut><SignIn /></SignedOut>
<SignedIn><UserButton /></SignedIn>
</IdentraProvider>
);
}Three plans. One feature set.
The only thing that changes across tiers is how many people you authenticate and how you're supported. Everything an app could need is already switched on.
Free
Up to 50,000 MAUEverything, for your first 50,000 people.
- The complete feature set — including SAML, OIDC & SCIM.
- No credit card. No feature flags waiting to bite you.
- Community support.
Pro
Up to 1,000,000 MAUOne flat price. Every feature. A million people.
- A single predictable line item — the same $99 at 60,000 MAU or 900,000.
- Approaching the ceiling? We move you to the next flat bracket before you hit it — never a surprise meter.
- Email support, 99.9% uptime.
Enterprise
1,000,000+ MAUVolume, assurances, and paperwork — not features.
- Same complete feature set. You are paying for scale and guarantees, never a gate.
- SLA, DPA, security review, invoicing & procurement.
- Dedicated support and a named contact.
Bring your users.
SSO comes with.
The migration importer pulls your existing users across so people keep their sessions and sign-in methods. Point it at your current provider, ship, and the enterprise features you were about to pay extra for are already turned on.
-
50,000 MAU on the house
A genuinely usable free tier — with every feature, not a trial.
-
SSO out of the enterprise cage
SAML, OIDC and SCIM are on from your first sign-in.
-
A bill that stops surprising you
Flat brackets and deduplicated MAU replace the per-user meter.
-
Import without a rip-and-replace
Bring users, sessions, and sign-in methods across in place.
“The teams who read the fine print are the ones who switch first.”
Placeholder — customer logos land here.
Issue your first credential today.
Fifty thousand monthly active users, every feature, and a flat price you can read in advance. No card. No SSO tax. No plan you'll have to escape.