--- title: "WorkOS Pricing Explained (2026): Free 1M Users & Per-Connection Costs | IDSync" description: "What WorkOS actually costs: AuthKit free to 1M users, the $125-per-SSO-connection model, Directory Sync, audit log pricing, and how per-connection billing scales with enterprise sales — vendor-neutral, as published July 2026." lang: en json-ld: | [ { "@context": "https://schema.org", "@type": "Article", "headline": "WorkOS Pricing Explained (2026): Free 1M Users & Per-Connection Costs", "description": "What WorkOS actually costs: AuthKit free to 1M users, the $125-per-SSO-connection model, Directory Sync, audit log pricing, and how per-connection billing scales with enterprise sales — vendor-neutral, as published July 2026.", "url": "https://idsync.com/guides/workos-pricing", "dateModified": "2026-07-18", "author": { "@type": "Organization", "@id": "https://idsync.com/#organization", "name": "IDSync" }, "publisher": { "@type": "Organization", "@id": "https://idsync.com/#organization", "name": "IDSync" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://idsync.com/" }, { "@type": "ListItem", "position": 2, "name": "Guides", "item": "https://idsync.com/guides" }, { "@type": "ListItem", "position": 3, "name": "WorkOS pricing", "item": "https://idsync.com/guides/workos-pricing" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "How much does WorkOS cost?", "acceptedAnswer": { "@type": "Answer", "text": "WorkOS publishes AuthKit (user management) as free for the first 1,000,000 monthly active users, then $2,500/month per additional million. Enterprise SSO and Directory Sync are billed per connection: $125/month each for the first 15 connections, sliding down to $50 at 101–200 connections and custom beyond, as of July 2026. Verify current pricing with WorkOS." } }, { "@type": "Question", "name": "Is WorkOS really free up to 1 million users?", "acceptedAnswer": { "@type": "Answer", "text": "Yes — AuthKit's published free tier covers the first 1M MAUs, which makes core auth effectively free for almost every startup, as of July 2026. The paid meter runs on enterprise features: SSO connections, Directory Sync connections, audit logs, and add-ons like custom domains ($99/month published)." } }, { "@type": "Question", "name": "What is a WorkOS 'connection' and why does it matter?", "acceptedAnswer": { "@type": "Answer", "text": "A connection is one federation link to one customer's identity provider (e.g. one customer's Okta SAML). Each enterprise customer that requires SSO consumes at least one connection at $125/month published (declining with volume). Your identity bill therefore scales with enterprise logo count, not headcount — price it into your enterprise plan." } }, { "@type": "Question", "name": "When is WorkOS cheaper than Auth0 or Clerk?", "acceptedAnswer": { "@type": "Answer", "text": "WorkOS's model favors products with huge free/self-serve user bases and a modest number of enterprise SSO customers — 1M users free with 10 SSO connections is about $1,250/month published. MAU-priced platforms flip that math: they charge on total users and often bundle connections. Model your actual user base and enterprise pipeline both ways." } } ] } ] --- [![IDSync — identity software buyer platform](/assets/idsync-logo-BKS89EW4.png)](/) [Directory](/directory) [Compare](/compare) [Resources](/resources) [Browse tools](/directory)[Run Stack Finder](/stack-finder) 1. [Home](/) 2. [Guides](/guides) 3. WorkOS pricing Pricing guide # WorkOS pricing explained: free users, paid connections Prices as published by WorkOS, July 2026 — always verify current pricing with the vendor. Last updated July 2026. Quick answer ## How much does WorkOS actually cost? Short answer **WorkOS AuthKit is free for the first 1,000,000 monthly active users, then $2,500/month per additional million. The real meter is enterprise features: SSO and Directory Sync connections start at $125/month each and slide down with volume.** Figures reflect WorkOS's published pricing as of July 2026 — verify with the vendor. Related tools & categories [WorkOS alternatives](/alternatives/workos)[Clerk pricing](/guides/clerk-pricing)[IAM Stack Finder](/stack-finder) ## What are WorkOS's published prices? WorkOS decouples user volume (mostly free) from enterprise readiness (per-connection billing). The table below summarizes the published structure as of July 2026; exact figures change, so treat these as budgeting anchors, not quotes. Product Published price\* What to know AuthKit (user management) free to 1M MAUs Then $2,500/mo per additional 1M MAUs. Enterprise SSO $125/connection/mo (1–15) Published sliding scale: $100 (16–30), $80 (31–50), $65 (51–100), $50 (101–200), custom at 201+. Directory Sync (SCIM) same per-connection scale as SSO $125/connection/mo at low volume, declining identically. Audit Logs $125/mo per SIEM stream Plus $99/mo per 1M events retained. Radar (bot & fraud protection) first 1,000 checks free Then $100/mo per 50K additional checks. Custom domain $99/mo Auth pages on your own domain. Support plans standard free; Scale $1,000/mo Enterprise support is custom-priced. \*As published by WorkOS (July 2026) — verify with the vendor. Connection volume discounts apply automatically per the published tiers. ## What does WorkOS cost at realistic scale? A B2B SaaS with 40 enterprise SSO customers pays roughly $3,200/month at the published $80 tier (31–50 connections); add Directory Sync for half of them and you're near $4,800/month. That per-logo scaling is the number to build into your enterprise plan pricing — each SSO-requiring customer carries a real monthly cost. For products with large self-serve user bases and few enterprise deals, the equation is exceptional: 1M users free plus a handful of connections is hundreds, not thousands, per month. When connection counts climb into the hundreds, that's the point to benchmark [WorkOS alternatives](/alternatives/workos) and MAU-bundled platforms like Auth0 (see our [Auth0 pricing guide](/guides/auth0-pricing)). ## What are the pricing gotchas? - **Connections scale with sales, not users:** your identity bill grows with each enterprise logo that requires SSO — forecast off your enterprise pipeline, not your MAU curve. - **SCIM doubles the line:** Directory Sync is billed per connection on the same scale as SSO, so customers wanting both consume two paid connections. - **Audit logs have two meters:** per-SIEM streaming ($125/mo) plus per-1M-event retention ($99/mo) — compliance-heavy customers add both. - **The add-ons are the bill:** custom domain ($99/mo), Radar checks, and Scale support ($1,000/mo) are individually small but collectively meaningful at growth stage. ## Frequently asked questions ### How much does WorkOS cost? WorkOS publishes AuthKit (user management) as free for the first 1,000,000 monthly active users, then $2,500/month per additional million. Enterprise SSO and Directory Sync are billed per connection: $125/month each for the first 15 connections, sliding down to $50 at 101–200 connections and custom beyond, as of July 2026. Verify current pricing with WorkOS. ### Is WorkOS really free up to 1 million users? Yes — AuthKit's published free tier covers the first 1M MAUs, which makes core auth effectively free for almost every startup, as of July 2026. The paid meter runs on enterprise features: SSO connections, Directory Sync connections, audit logs, and add-ons like custom domains ($99/month published). ### What is a WorkOS 'connection' and why does it matter? A connection is one federation link to one customer's identity provider (e.g. one customer's Okta SAML). Each enterprise customer that requires SSO consumes at least one connection at $125/month published (declining with volume). Your identity bill therefore scales with enterprise logo count, not headcount — price it into your enterprise plan. ### When is WorkOS cheaper than Auth0 or Clerk? WorkOS's model favors products with huge free/self-serve user bases and a modest number of enterprise SSO customers — 1M users free with 10 SSO connections is about $1,250/month published. MAU-priced platforms flip that math: they charge on total users and often bundle connections. Model your actual user base and enterprise pipeline both ways. Buyer help ### Request a vendor shortlist Tell us what you're evaluating and IDSync will identify the identity, access, and security tools that fit your use case. [Request shortlist →](/request-shortlist) [ ### WorkOS alternatives When to switch, when to stay. Read ](/alternatives/workos)[ ### Clerk vs WorkOS The developer-auth head-to-head. Read ](/compare/clerk-vs-workos)[ ### WorkOS vendor profile Fit, strengths, and limitations. Read ](/directory/workos) IDSync provides educational buyer guidance based on publicly available information, editorial review, and user-submitted data. Vendor information should be verified before purchase. [Who we are, our methodology & disclosure policy](/about). [![IDSync home](/assets/idsync-logo-BKS89EW4.png)](/) The buyer-focused platform for identity, access, and authentication software. #### Platform - [Home](/) - [IAM Stack Finder](/stack-finder) - [Directory](/directory) - [Resources](/resources) - [State of AI Agent Identity 2026](/reports/state-of-ai-agent-identity-2026) - [Buyer Guides](/guides) - [Glossary](/glossary) - [Newsletter](/newsletter) - [Newsletter Archive](/newsletter/archive) #### Best of guides - [All comparisons](/compare) - [All vendor alternatives](/alternatives) - [Best SSO tools](/compare/best-sso-tools) - [Best MFA tools](/compare/best-mfa-tools) - [Best PAM tools](/compare/best-pam-tools) - [Best IGA tools](/compare/best-iga-tools) - [Best CIAM tools](/compare/best-ciam-tools) - [Best passwordless auth](/compare/best-passwordless-authentication-tools) - [Best identity security](/compare/best-identity-security-tools) - [Best machine identity](/compare/best-machine-identity-tools) - [Best SaaS access governance](/compare/best-saas-access-governance-tools) - [Best developer auth](/compare/best-developer-authentication-tools) - [Best for startups](/compare/best-iam-tools-for-startups) - [Best for enterprises](/compare/best-iam-tools-for-enterprises) - [Best SCIM tools](/compare/best-scim-provisioning-tools) - [Best for AI agents](/compare/best-ai-agent-identity-tools) - [Best NHI tools](/compare/best-nhi-management-tools) - [Okta pricing explained](/guides/okta-pricing) - [Auth0 pricing explained](/guides/auth0-pricing) - [Okta alternatives](/alternatives/okta) - [Auth0 alternatives](/alternatives/auth0) #### For Vendors - [Sponsor](/sponsor) - [Badges](/badges) - [Submit Product](/submit-product) - [Claim Profile](/claim-profile) - [Partner](/partner) #### Company - [About & Methodology](/about) - [Contact](/contact) - [Privacy](/privacy) Vendor names, logos, and trademarks are the property of their respective owners. IDSync is an independent buyer resource and does not imply endorsement unless explicitly stated. Logos are displayed for identification purposes only. IDSync (idsync.com) is operated by TetraCore, Bowling Green, Ohio. It is not affiliated with the IDSync® Active Directory synchronizer by Identity Syncronizer — [learn more](/about#idsync-disambiguation). © 2026 IDSync. All rights reserved. Editorial independence. Sponsored placements are clearly disclosed.