One tariff. Every feature.
Plans differ only by scale — the monthly active users you authenticate and how you're supported. The feature set is identical on all three, and it's the complete one.
Free
Up to 50,000 MAUEverything, for your first 50,000 people.
- The complete feature set — including SAML, OIDC & SCIM.
- No credit card. No feature flags waiting to bite you.
- Community support.
Pro
Up to 1,000,000 MAUOne flat price. Every feature. A million people.
- A single predictable line item — the same $99 at 60,000 MAU or 900,000.
- Approaching the ceiling? We move you to the next flat bracket before you hit it — never a surprise meter.
- Email support, 99.9% uptime.
Enterprise
1,000,000+ MAUVolume, assurances, and paperwork — not features.
- Same complete feature set. You are paying for scale and guarantees, never a gate.
- SLA, DPA, security review, invoicing & procurement.
- Dedicated support and a named contact.
Prices in USD. Free is free forever. No credit card to start.
What counts as a monthly active user?
A monthly active user is a person who authenticates at least once during the billing month. We deduplicate across every sign-in method — password, passkey, Google, SAML — so the same human is counted once, never per credential.
- Test and development users are free — they never count toward your MAU.
- No live per-user meter. Your bill is a flat bracket you can read off in advance.
- No proration games. Change plans and the next monthly invoice simply reflects the new flat price.
What differs, and what doesn't.
The top of this table is the only place the plans diverge. Everything below it — the entire capability set — is a wall of identical checks by design.
| Plan | Free | Pro | Enterprise |
|---|---|---|---|
| Scale & support — the difference | |||
| Monthly active users | 50,000 | 1,000,000 | Unlimited |
| Price | $0 | $99 / mo flat | Custom |
| Billing | — | Flat brackets, no meter | Invoice / PO |
| Support | Community | Email · 99.9% | Dedicated · SLA |
| Uptime SLA | — | 99.9% | Custom |
| DPA & security review | Standard DPA | Standard DPA | Custom + review |
| Sign-in | |||
| Email & password | Included in Free | Included in Pro | Included in Enterprise |
| Passwordless / magic links | Included in Free | Included in Pro | Included in Enterprise |
| Email & SMS one-time codes | Included in Free | Included in Pro | Included in Enterprise |
| Passkeys (WebAuthn) | Included in Free | Included in Pro | Included in Enterprise |
| Social login (Google, GitHub, …) | Included in Free | Included in Pro | Included in Enterprise |
| Multi-factor authentication (TOTP, backup codes) | Included in Free | Included in Pro | Included in Enterprise |
| Enterprise SSO | |||
| SAML 2.0 SSO | Included in Free | Included in Pro | Included in Enterprise |
| OIDC SSO | Included in Free | Included in Pro | Included in Enterprise |
| SCIM 2.0 user provisioning | Included in Free | Included in Pro | Included in Enterprise |
| Directory sync | Included in Free | Included in Pro | Included in Enterprise |
| Just-in-time provisioning | Included in Free | Included in Pro | Included in Enterprise |
| Organizations | |||
| Organizations & memberships | Included in Free | Included in Pro | Included in Enterprise |
| Roles & permissions (RBAC) | Included in Free | Included in Pro | Included in Enterprise |
| Relationship-based access (ReBAC) | Included in Free | Included in Pro | Included in Enterprise |
| Invitations & waitlists | Included in Free | Included in Pro | Included in Enterprise |
| Entitlements & B2B plans | Included in Free | Included in Pro | Included in Enterprise |
| Developer platform | |||
| Drop-in UI components | Included in Free | Included in Pro | Included in Enterprise |
| Hooks & hosted flows | Included in Free | Included in Pro | Included in Enterprise |
| All client & server SDKs | Included in Free | Included in Pro | Included in Enterprise |
| Webhooks & the event stream | Included in Free | Included in Pro | Included in Enterprise |
| The identra CLI & sandbox mode | Included in Free | Included in Pro | Included in Enterprise |
| Brand & delivery | |||
| Custom domains & TLS | Included in Free | Included in Pro | Included in Enterprise |
| Full theming & branding | Included in Free | Included in Pro | Included in Enterprise |
| Localized email / SMS templates | Included in Free | Included in Pro | Included in Enterprise |
| Internationalization (i18n) | Included in Free | Included in Pro | Included in Enterprise |
| Migration importer | Included in Free | Included in Pro | Included in Enterprise |
| Governance & trust | |||
| Tamper-evident audit logs | Included in Free | Included in Pro | Included in Enterprise |
| Named locations & device trust | Included in Free | Included in Pro | Included in Enterprise |
| JIT / PIM privileged access | Included in Free | Included in Pro | Included in Enterprise |
| Access reviews & service accounts | Included in Free | Included in Pro | Included in Enterprise |
| Impersonation & the risk engine | Included in Free | Included in Pro | Included in Enterprise |
The typical gate, and the way out.
Frequently asked.
A person who authenticates at least once in the billing month. We deduplicate across every sign-in method — password, passkey, Google, SAML — so one human is one MAU, never one-per-credential.
Start on Free. Stay for the price.
50,000 MAU, every feature, $0. Upgrade to a flat $99 only when you outscale it — never because you hit a gate.