Powered by Authentik — EU data sovereignty built-in

Enterprise SSO without
the Clerk / Auth0 bill

OIDC + SAML + SCIM for indie SaaS, EU companies, and fintech teams. Free up to 100 MAU. No per-seat shock.

Powering auth for

EmpireGit EAS CohostBNB TradeHouse

Everything auth — nothing you don't need

One Authentik instance, multi-tenant, your data stays in your region.

🔐

OIDC / OAuth2 SSO

Drop-in OIDC provider per tenant. Works with any app that speaks OpenID Connect — Forgejo, Ghost, Grafana, your own app.

🏢

SAML 2.0 for Enterprise

Self-serve SAML app creation. Wire your Okta/AD users into your SaaS in minutes, not weeks.

🇪🇺

EU Data Sovereignty

Your auth data lives on EU-hosted infrastructure. GDPR-compliant by design. No cross-Atlantic calls for token validation.

💰

Predictable Pricing

MAU-based tiers, not per-seat. 100 MAU free forever. Pro $29/mo for 5K MAU vs Auth0's $228/mo for the same usage.

🔑

Multi-tenant by Default

Each customer gets their own namespaced OIDC provider. No shared client IDs. Tenant create/delete via API in <200ms.

🚀

One API, Full Control

REST API for tenant lifecycle: create provider, configure SAML, revoke access. Build your own auth UI on top.

Why escape Clerk & Auth0?

At 5,000 MAU the cost difference is 7x. At 25,000 MAU it's >10x.

Feature / Cost EliteSSO Pro Auth0 Essential Clerk Pro Okta
5,000 MAU cost/mo $29 $228 $125 $1,500+
SAML 2.0 Yes (all plans) Enterprise only ($) No Yes
EU data residency Yes Extra cost US only Add-on
Self-host option Yes (Authentik OSS) No No No
Multi-tenant API REST API (200ms) Dashboard only Dashboard only Complex API
Free tier MAU 100 7,500 (limited) 10,000 (limited) None
Vendor lock-in None (Authentik OSS) High High Very high

Simple MAU pricing

Pay for active users, not seats. Scale down any month.

Free

$0 /mo
Up to 100 MAU
  • OIDC / OAuth2 SSO
  • 1 SAML app
  • Community support
  • API access
Get started

Team

$99 /mo
Up to 25,000 MAU
  • Everything in Pro
  • Priority support
  • Custom flows
  • Audit log export
  • Branding customization
Start Team trial

Enterprise

Custom
25,000+ MAU
  • Everything in Team
  • Dedicated instance
  • SLA guarantee
  • BAA / HIPAA
  • Custom contract
Contact us

How it works

From signup to first SSO login in under 5 minutes.

Sign up free

Create your account. We provision an OIDC provider namespace instantly via our API.

Add your app

Paste your redirect URI. Get client_id + client_secret. Point your app at our OIDC discovery URL.

Configure SAML (optional)

POST your ACS URL to our API. Get SAML metadata URL back. Wire into your IdP in minutes.

Go live

Your users log in via Authentik. You own the session. We never see your user data.