WorkOS

What it is for

WorkOS is a hosted enterprise-auth desk: you open AuthKit Branding, and User Management is $0 / month up to 1 million users (then $2,500 / month per additional 1M). Use it when the job is SSO and a hosted login you start at $0, not when you need a $20 chat seat.

What makes it unique: the cover is the official WorkOS Branding desk (AuthKit “Sign in to SuperApp”, email / Google / Microsoft, light/dark tokens) from the docs still — not a pricing card. The preview itself is ops of AuthKit. WorkOS bills users and connections, not seats.

Key features

• AuthKit — a hosted login / branding surface (Branding still; docs; pricing User Management). One login. Cover email / Google / Microsoft and tokens are ops of this. Custom domain is $99 / month.
• Single Sign-On — an IdP connection (SAML / OIDC) (Admin Portal still; pricing SSO). A connection, not a login. 1–15 connections are $125 each; volume discounts print $100 / $80 / $65.
• Directory Sync — a SCIM / directory feed that updates users (pricing Directory Sync). A feed, not an SSO connection. Same $125 / connection ladder as SSO on the page we fetched.
• Admin Portal — the IT-admin desk your customer uses to add an IdP (docs). A portal, not a connection. Custom branding of that portal sits here.
• Audit Logs — events you export / stream (pricing Audit Logs). A log, not a login. Streaming is $125 / month per SIEM connection; retention is $99 / month per million events.

Radar (bot / fraud checks) is an add-on (first 1,000 checks free, then $100 / month per 50k) — not a sixth desk. SDKs are install.

Who it's for

Best fit: B2B teams who will stay on AuthKit User Management at $0 (≤1M users) while they brand a first login, then buy SSO at $125 / connection when a customer asks for Okta.

Pricing

Verified 2026-10-23 (Asia/Shanghai) from workos.com/pricing.

• User Management (AuthKit) — $0 / month up to 1 million users; $2,500 / month per additional 1M users.
• Single Sign-On — $125 per connection for 1–15; $100 (16–30); $80 (31–50); $65 (51–100).
• Directory Sync — same $125 / connection ladder on the page we fetched.
• Audit Logs — $0 to start; streaming $125 / month per SIEM; retention $99 / month per million events.
• Radar — first 1,000 checks free; $100 / month per 50k checks.
• Custom Domain — $99 / month.

Confirm checkout; taxes follow your location. Annual credits print as a sales path — do not invent an annual $.

Limitations / costs

• AuthKit $0 stops at 1M users. The next million is $2,500 / month.
• SSO is per connection, not per seat. A second customer IdP is another $125.
• An enterprise-auth desk, not a consumer magic-link toy. For Kinde’s $0 / $25 MAU ladder see Kinde. For Ory’s self-host stack see Ory.

Alternatives

• Kinde — auth + billing when you want a $0 / $25 / $75 / $250 MAU ladder, not WorkOS connections.
• Clerk — hosted user auth when you want Clerk’s consumer UI, not WorkOS Admin Portal.
• Ory — Kratos / Hydra / Keto when you want a self-host identity stack, not WorkOS $125 connections.

Official tutorial

Official WorkOS channel video: Add authentication to your Next.js 15 app in minutes with AuthKit (oEmbed author: WorkOS). First-party AuthKit walkthrough; the docs Branding still is the cover.

Written path: workos.com/pricing plus the Branding still.

Website

https://workos.com

Repository

https://github.com/workos

Source

Catalog row curated for AI Tools Nav. Cover is the official WorkOS AuthKit Branding desk. Dollars checked on workos.com/pricing (User Management $0 to 1M then $2,500/1M; SSO $125/connection; custom domain $99/mo). Tutorial oEmbed author: WorkOS.

Last verified

2026-10-23 (Asia/Shanghai) editorial check.