Our take
Pick authentik if homelab and platform teams who will self-host OSS at $0 for OIDC/SAML SSO, then move to Enterprise at $5/internal user/month (annual) plus $0.02/external user when they need PAM, Entra/Workspace sync, or ticketed support over $1k. Pick SuperTokens if app teams who will stay on Cloud free under 5,000 MAUs ($0) or self-host OSS at $0 while they list a first user, then pay $0.02/MAU (and the
open-source auth desk
Best for
authentik SSO you start at $0
SuperTokens Sessions you start at $0 / 5k MAU
Free plan
authentik $0 · / Free. OIDC, SAML, LDAP, SCIM, RADIUS, Kerberos, proxy. OpenID Certified™. Web-based RDP/SSH. Community Discord. No vendor support
SuperTokens $0 · “Free and open source (No free MAUs count limit).” You run the core
Lowest paid
authentik Enterprise $5/mo
SuperTokens Account linking $0.005
Next step up
authentik
SuperTokens Cloud $0.02/mo
Runs where
authentik Local or hosted
SuperTokens Local; you host it
Watch out
authentik There is no authentik Cloud
SuperTokens Cloud’s printed minimum is $100/month
Last checked
authentik 2026-10-22 · goauthentik.io/pricing
SuperTokens 2026-10-22 · supertokens.com/pricing
homelab and platform teams who will self-host OSS at $0 for OIDC/SAML SSO, then move to Enterprise at $5/internal user/month (annual) plus $0.02/external user when they need PAM, Entra/Workspace sync, or ticketed support over $1k.
Read the authentik pageapp teams who will stay on Cloud free under 5,000 MAUs ($0) or self-host OSS at $0 while they list a first user, then pay $0.02/MAU (and the $100/month minimum) when they pass 5k — plus $20/dashboard user after the 3 free seats.
Read the SuperTokens page