The EliteSSO widget is a drop-in <SignIn/> for any stack — like Clerk, but Authentik-backed, self-hostable, and $471/mo cheaper at 5K MAU. Passkeys, Google, GitHub, SAML — all included.
Powering auth for
5 lines. Your brand. Authentik backend. Passkeys + Google + GitHub included. Clerk charges $0.02/MAU beyond 10K — we charge nothing until 50K.
<!-- Load once --> <script src="https://empiregit.eliteaiempire.com/elitesso/widget.js"></script> <!-- Mount point --> <div id="auth-root"></div> <!-- Initialize --> <script> EliteSSO.mount('#auth-root', { tenant: 'YOUR_TENANT_ID', client_id: 'YOUR_CLIENT_ID', redirect_uri: window.location.origin + '/auth/callback', }); </script>
FIDO2 biometric login — Authentik WebAuthn stage active
Authentik OAuth source created — enable via admin panel
Authentik OAuth source created — enable via admin panel
Live widget — initiates real OIDC flow
Open full demo page
One Authentik instance, multi-tenant, your data stays in your region.
Drop-in OIDC provider per tenant. Works with any app that speaks OpenID Connect — Forgejo, Ghost, Grafana, your own app.
Self-serve SAML app creation. Wire your Okta/AD users into your SaaS in minutes, not weeks.
Your auth data lives on EU-hosted infrastructure. GDPR-compliant by design. No cross-Atlantic calls for token validation.
MAU-based tiers, not per-seat. 50,000 MAU free forever — matches Clerk's free tier (Auth0 is 25K). Pro $29/mo for 5K MAU vs Auth0's $228/mo for the same usage. SAML included — Clerk charges $500+/connection.
Each customer gets their own namespaced OIDC provider. No shared client IDs. Tenant create/delete via API in <200ms.
REST API for tenant lifecycle: create provider, configure SAML, revoke access. Build your own auth UI on top.
At 5,000 MAU the cost difference is 7x. At 25,000 MAU it's >10x.
| Feature / Cost | EliteSSO Pro | Auth0 Essential | Clerk Pro | Okta |
|---|---|---|---|---|
| 5,000 MAU cost/mo | $29 | $228 | $125 | $1,500+ |
| SAML 2.0 | Yes (all plans) | Enterprise only ($) | No | Yes |
| EU data residency | Yes | Extra cost | US only | Add-on |
| Self-host option | Yes (Authentik OSS) | No | No | No |
| Multi-tenant API | REST API (200ms) | Dashboard only | Dashboard only | Complex API |
| Free tier MAU | 50,000 | 25,000 (limited) | 50,000 (no SAML) | None |
| SAML 2.0 cost | Included (all paid plans) | Enterprise contract only | $500+/enterprise connection | Yes ($2+/user) |
| Vendor lock-in | None (Authentik OSS) | High | High | Very high |
Pay for active users, not seats. Scale down any month.
From signup to first SSO login in under 5 minutes.
Create your account. We provision an OIDC provider namespace instantly via our API.
Paste your redirect URI. Get client_id + client_secret. Point your app at our OIDC discovery URL.
POST your ACS URL to our API. Get SAML metadata URL back. Wire into your IdP in minutes.
Your users log in via Authentik. You own the session. We never see your user data.
No credit card required for Free tier. Pro trial is 14 days free.