A million free users is more headroom than most launches will ever use. WorkOS AuthKit is the hosted login and user management product from WorkOS. The pricing page says the first 1 million monthly active users are free and each additional million costs $2,500 a month. Enterprise features are billed separately: single sign-on starts at $125 per connection, log streaming is $125 a month, audit event retention is $99 a month and a custom domain for AuthKit, the Admin Portal and the email sender address is $99 a month. WorkOS says you do not need a credit card until you move to production. G2 shows 4.5 from 15 reviews. Hacker News and Reddit threads praise the 1 million free allowance and the developer experience, but a commenter pointed out that the custom domain fee arrives long before a million users. Some of the praise comes from WorkOS staff.
Free tier quotas
Monthly active users
First 1 million free
Beyond 1 million
$2,500 a month per additional 1 million users
Credit card
Not needed until you are ready for production
MFA and RBAC
WorkOS staff say in forum posts that both are free. The pricing page excerpt I read does not list them
Single sign-on
$125 per connection with volume discounts
Audit logs
Log streaming $125 a month, event retention $99 a month
Custom domain
$99 a month for AuthKit, the Admin Portal and the email sender address
Custom branding
Available for an additional monthly fee
Last sniffed Oct 14, 2026. Always confirm on the official pricing page.
👍 Good boy
+The first 1 million monthly active users are free, far above the 10,000 that Stytch and PropelAuth include and the 50,000 that Clerk includes.
+Posts that appear to come from WorkOS staff on Hacker News and Reddit say AuthKit includes free MFA and RBAC. Treat that as a vendor statement.
+You do not need a credit card until you move to production, so you can build before committing.
+Enterprise features are priced when you need them. Per-connection SSO means a small app pays nothing for SSO until a customer asks for it.
+A commenter in an r/webdev thread said AuthKit is really nice to use and takes the frustration out of user management.
+G2 shows 4.5 from 15 reviews, and the G2 pricing tab lists plans from $0.
👎 Watch out
−A custom domain costs $99 a month, and custom branding is an extra monthly fee, so a branded login page is not free. An HN commenter made this point in 2024, noting you pay for features well before you reach a million users.
−SSO is $125 per connection at the entry tier. An app with many enterprise customers pays per customer.
−Audit logs are an add-on, with log streaming at $125 a month and event retention at $99 a month.
−I did not capture the Directory Sync price from the page I read, so confirm it before planning SCIM.
−Some of the positive Hacker News and Reddit posts I found appear to come from WorkOS staff, so weigh them as vendor statements.
−G2 has only 15 reviews, so independent evidence is limited.
The catch
The headline is real: the first 1 million monthly active users are free and no card is needed until production. The cost shows up in the add-ons. A custom domain for AuthKit, the Admin Portal and the email sender address is $99 a month, and custom branding carries an additional monthly fee. SSO starts at $125 per connection, log streaming is $125 a month and event retention is $99 a month.
A Hacker News commenter noted in 2024 that you pay for features long before you reach a million users, which matches the page today. Beyond 1 million users each extra million is $2,500 a month.
I did not capture the Directory Sync price. Some praise comes from WorkOS employees on Hacker News, so I treated it as a vendor claim. Commercial-use terms for the free tier are unknown.
What’s included
✓Hosted AuthKit login
✓MFA and RBAC (per WorkOS staff in forum posts)
✓Enterprise SSO with SAML and OIDC
✓Directory sync for provisioning and role mapping
✓Audit logs with log streaming and retention
✓Admin Portal
✓Custom domain
✓Organization-based pricing for enterprise features
Free tier value
Generosity
A
Estimated value
1 million monthly active users free
Feature parity
Enterprise SSO, directory sync, audit logs and custom domain are priced separately from free users.
Screenshots
HomepagePricing page
Paid plans
Beyond 1 million users
$2,500 a month per additional 1 million monthly active users.
Single sign-on
$125 per connection, with lower per-connection rates at higher connection counts.
Audit logs
Log streaming is $125 a month and event retention is $99 a month.
Custom domain
$99 a month for a custom domain on AuthKit, the Admin Portal and the email sender address.
Common questions
Is WorkOS AuthKit free?
The pricing page says the first 1 million monthly active users are free.
Do I need a credit card?
WorkOS says you do not need to add a credit card until you are ready to move to production.
What does a custom domain cost?
$99 a month, per the pricing page.
How is SSO priced?
Per connection, starting at $125 each, with volume discounts.
Is the free tier really 1 million users?
Yes on the pricing page. A Reddit poster asked how WorkOS can offer that when others offer 10,000 or less.
Change history
Checked October 22, 2026
Pricing page read. G2 shows 4.5 from 15 reviews. Hacker News and Reddit comments read as excerpts; some from WorkOS staff. Directory Sync price not captured.
