What SaaS vendors charge to turn on SSO.
Independent. Sourced. Quarterly-verified. Every row links to the live pricing page. No affiliate revenue on any vendor or IdP listed.
Your annual SSO premium
Pick the SaaS you actually use, set seat counts, see the annual premium you pay for the privilege of SSO. Quote-only vendors flagged separately.
Estimate based on public pricing pages. Negotiated rates differ. Quote-only vendors not included in totals. Add IdP cost separately — see the IdP cost matrix.
How the index distributes
Median SSO premium across all vendors with public pricing: +150%
Which categories tax SSO hardest
Median SSO premium % per category. Click to see all vendors in that category.
Identity Provider cost layer
The SSO tax forces you to buy an IdP. Most vendor-side comparisons skip this — we don't. Pick a seat count and see annual IdP cost across the major options.
| IdP | Starter | Enterprise | Annual @ 50 | SAML | SCIM | MFA | Passkeys |
|---|---|---|---|---|---|---|---|
Okta Workforce Identity Okta | $6 $1,500/yr minimum | $17 | $3,600 | ✓ | ✓ | ✓ | ✓ |
Microsoft Entra ID Microsoft · bundled in M365 E3 (P1) / E5 (P2) | $6 | $12 | $3,600 | ✓ | ✓ | ✓ | ✓ |
JumpCloud JumpCloud | $3 | Quote | $1,800 | ✓ | ✓ | ✓ | ✓ |
Auth0 Okta | $0 $150/mo flat floor | Quote | Free | ✓ | ✓ | ✓ | ✓ |
OneLogin One Identity | $3 | $10 | $1,800 | ✓ | ✓ | ✓ | ✓ |
Ping Identity Ping Identity | $3 5,000-user min ($180k/yr floor) | $6 | $1,800 | ✓ | ✓ | ✓ | ✓ |
Duo (Cisco) Cisco | $0 | $9 | Free | ✓ | ✓ | ✓ | ✓ |
Authentik Authentik Security | $0 | $5 | Free | ✓ | ✓ | ✓ | ✓ |
Annual cost is starter price × seats × 12. Microsoft Entra ID is often $0 marginal if you already pay for M365 E3 (P1) or E5 (P2). Authentik is free to self-host but factor ~$200-400/mo hosting + admin time.
The SSO tax, defined
The SSO tax is the difference between the cheapest plan that contains a SaaS product and the cheapest plan that lets you connect SAML-based Single Sign-On. Most vendors charge a substantial premium for what is, technically, the most secure way to authenticate.
Procurement transparency
The existing reference (sso.tax) is community-maintained, often years out of date per vendor, and inconsistently sourced. ssopricing.com publishes a per-row verified-on date, links every claim to the vendor's live pricing page, and re-checks quarterly.
No commission, no sponsorship
We do not sell access management, SSO infrastructure, or IdP services. We earn no affiliate commission on any vendor or IdP listed. Funding is display advertising only and the exclusion list forbids identity / SSO / access-management ads on this property.