Pricing
Workforce Identity
Identity and Access Management (IAM)
Basic
Authentication
Limited User Management
PACK PRICE
$3
/user/month
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- Desktop Basic
- Identity Lifecycle Management (5 apps)
Essentials
Authentication
User Management
PACK PRICE
$6
/user/month
- All Basic Plan Features
- Unlimited Identity Lifecycle Management
- Advanced Directory
Business
Advanced Authentication
User Management Automation
PACK PRICE
$10
/user/month
- All Essential Plan Features
- SmartFactor Authentication
- Desktop MFA
- HR Directories
- RADIUS
- VLDAP
- SIEM Integrations
- Smart Hooks
- Custom REST Connectors
Enterprise
Advanced Authentication
Advanced User Management
- All Business Plan Features
- LDAP Directory Sync
- Delegated Administration
- Multiple Brands
- API Access Management
Included in All Plans
Single Sign-On (SSO)
- Cloud Directory
- Unlimited SAML and OIDC Authentication
- Single Directory Integration
- Windows Domain Authentication
- Mobile Single Sign-On
- Password Policy Management
- Password Reset
- Prebuilt integrations to the OneLogin App Catalog
- Multiple Languages
- Custom Branding
- Standard and Custom Reports
- SIEM Integrations
- Dynamic Password Deny List
SeeCollapse Features
Included in All Plans
Multi-Factor Authentication (MFA)
Requires purchase of SSO
- Multi-MFA Configuration
- Multiple Device Support
- Multiple authentication factors per policy
- TOTP & Hardware Tokens
- OneLogin Protect
- MFA Registration API
- Authorization APIs
- Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
- Password Deny List
- Email MFA
- Security Questions
- OneLogin SMS
- OneLogin Voice
- WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
- 3rd Party Passkeys (Device-bound , Synced & Cross-Device Authentication flows)
SeeCollapse Features
Included in All Plans (Limited in Basic)
Identity Lifecycle
Management
Requires purchase of Advanced Directory
- Automated User Provisioning
- Automated User Deprovisioning
- Custom Attributes
- Flexible Entitlement Mappings
- Admin Approval Workflows
- Application-Specific Rules
SeeCollapse Features
Included in All Plans Except Basic
Advanced Directory
Requires purchase of SSO
- Directory and Identity Synchronization
- Unlimited Directory Integrations
- Custom Fields
- Custom Mappings
- Directory Provisioning
- Security Policies
- Custom Connectors
- Trusted IDP
- VLDAP
SeeCollapse Features
Included in Business and Enterprise Plans
SmartFactor
Authentication
Requires purchase of SSO & MFA
- Vigilance AI Threat Engine
- Policy-Driven Access Denial
- Smart Flows
- Smart MFA
- Smart Access
- Compromised Credential Check
SeeCollapse Features
Included in Business and Enterprise Plans
Desktop
Requires purchase of MFA
- Certificate-based trust
- Machine-level authentication
- Automated password resets
- Shared workstation / kiosk mode
- MDM deployment support
SeeCollapse Features
Included in Business and Enterprise Plans
HR-Driven Identity
Requires purchase of Advanced Directory
- HR Integrations (Workday, UKG, Namely, Bamboo HR)
- Automatic Sync to OneLogin Cloud Directory
- Automated Identity Workflows
- Role-Based Access Control (RBAC)
SeeCollapse Features
Included in Business and Enterprise Plans
RADIUS
Requires purchase of SSO
- WiFi and VPN Authentication
- Extend SSO to a RADIUS endpoint
- Extend MFA to a RADIUS endpoint (MFA required)
- Vendor Specific Attributes
SeeCollapse Features
Included in Enterprise Plans
Access
Requires purchase of SSO
- On-premise applications
- Homegrown Applications
- Authorization Policies
- Gateway or Agent Deployment
- Real-Time Deployment & Monitoring
- CRUD APIs for Enforcement Points & Apps
SeeCollapse Features
Included in Enterprise Plans
Delegated
Administration
- Privileges Enforcement for Apps, Users, and Roles
- Programmatic Assignment of Privileges through Roles
- Custom Granular Privileges
- API for Privileges CRUD Operations
SeeCollapse Features
Included in Enterprise Plans
Multiple Brands
- Multiple Application-Level Brands
- Custom Login Pages
- Custom Email and SMS Authentication Messages
- Custom SMTP Server Settings
SeeCollapse Features
$2
/user/month
OneLogin Workflows
Requires purchase of Identity Lifecycle Management & HR-Driven Identity for HR Directories
- Workflow Builder
- Pre-Built Templates
- Event-Based Triggers
- Scheduled Tasks
- Custom Notifications
- Data Transformation
SeeCollapse Features
Enterprise Sandbox
- Production data clone
- Full performance testing
- Dedicated URL & Environment
SeeCollapse Features
B2B Identity
Advanced
Policy-driven security with SSO and MFA
- Single Sign-On (SSO)
- Advanced Directory
- Multi-Factor Authentication (MFA)
Professional
Strong Authentication with Advanced User Management
- All Advanced Bundle Products
- Identity Lifecycle Management
- HR Driven Identity
Included in Advanced & Pro Bundles
Single Sign-On (SSO)
- Cloud Directory
- Unlimited SAML and OIDC Authentication
- Single Directory Integration
- Windows Domain Authentication
- Mobile Single Sign-On
- Password Policy Management
- Password Reset
- Prebuilt integrations to the OneLogin App Catalog
- Multiple Languages
- Custom Branding
- Standard and Custom Reports
- SIEM Integrations
- Dynamic Password Deny List
SeeCollapse Features
Included in Advanced & Pro Bundles
Advanced Directory
Requires purchase of SSO
- Directory and Identity Synchronization
- Unlimited Directory Integrations
- Custom Fields
- Custom Mappings
- Directory Provisioning
- Security Policies
- Custom Connectors
- Trusted IDP
- VLDAP
SeeCollapse Features
Included in Advanced & Pro Bundles
Multi-Factor Authentication (MFA)
Requires purchase of SSO
- Multi-MFA Configuration
- Multiple Device Support
- Multiple authentication factors per policy
- TOTP & Hardware Tokens
- OneLogin Protect
- MFA Registration API
- Authorization APIs
- Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
- Password Deny List
- Email MFA
- Security Questions
- OneLogin SMS
- OneLogin Voice
- WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
- 3rd Party Passkeys (Device-bound , Synced & Cross-Device Authentication flows)
SeeCollapse Features
Included in Pro Bundles
HR-Driven Identity
Requires purchase of Advanced Directory
- HR Integrations (Workday, UKG, Namely, Bamboo HR)
- Automatic Sync to OneLogin Cloud Directory
- Automated Identity Workflows
- Role-Based Access Control (RBAC)
SeeCollapse Features
Included in Pro Bundles
Identity Lifecycle
Management
Requires purchase of Advanced Directory
- Automated User Provisioning
- Automated User Deprovisioning
- Custom Attributes
- Flexible Entitlement Mappings
- Admin Approval Workflows
- Application-Specific Rules
SeeCollapse Features
Customer Identity
Customer Identity and Access Management (CIAM)
CIAM Plus
- All of CIAM Core
- Multi-Factor Authentication (MFA)
- Passwordless (All Authentication Factors)
- Custom Domain
- Advanced Directory
- Delegated Administration
- Multiple Brands
- Development Tenant
- SmartFactor Authentication
Included in CIAM Plus
CIAM Core
- Custom Branding
- Social Login/Registration
- Passwordless (Email/SMS)
- Unlimited OIDC and SAML Authentication
- Cloud Directory
- Single Directory Integration
- Password Reset
- APIs
- Prebuilt integrations with OneLogin App Catalog
- Dynamic Password Deny List
SeeCollapse Features
Included in CIAM Plus
Multi-Factor Authentication (MFA)
- Multi-MFA Configuration
- Multiple Device Support
- Multiple authentication factors per policy
- TOTP & Hardware Tokens
- OneLogin Protect
- MFA Registration API
- Authorization APIs
- Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
- Password Deny List
- Email MFA
- Security Questions
- OneLogin SMS
- OneLogin Voice
- WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
- 3rd Party Passkeys (Device-bound , Synced & Cross-Device Authentication flows)
SeeCollapse Features
Included in CIAM Plus
Advanced Directory
- Directory and Identity Synchronization
- Unlimited Directory Integrations
- Custom Fields
- Custom Mappings
- Directory Provisioning
- Security Policies
- Custom Connectors
- Trusted IdP
SeeCollapse Features
Included in CIAM Plus
Delegated
Administration
- Privileges Enforcement for Apps, Users, and Roles
- Programmatic Assignment of Privileges through Roles
- Custom Granular Privileges
- API for Privileges CRUD Operations
SeeCollapse Features
Included in CIAM Plus
Multiple Brands
- Multiple Application-Level Brands
- Custom Login Pages
- Custom Email and SMS Authentication Messages
- Custom SMTP Server Settings
SeeCollapse Features
Included in CIAM Plus
SmartFactor
Authentication
Requires purchase of CIAM Plus
- All MFA features
- Vigilance AI Threat Engine
- Policy-Driven Access Denial
- Smart Flows
- Smart MFA
- Smart Access
- Compromised Credential Check
SeeCollapse Features
Identity Lifecycle
Management
Requires purchase of CIAM Plus
- Automated User Provisioning
- Automated User Deprovisioning
- Custom Attributes
- Flexible Entitlement Mappings
- Admin Approval Workflows
- Application-Specific Rules
SeeCollapse Features
Education Identity
Education Plan
- Core Functionality
- Identity Lifecycle Management
- RADIUS
- Desktop
- SmartFactor
- Multi-Factor Authentication (MFA)
- Advanced Directory
- HR Driven Identity
- Delegated Administration
Included in Education Plan
Core Functionality
- Custom Branding
- Social Login/Registration
- Passwordless (Email/SMS)
- Unlimited OIDC and SAML Authentication
- Cloud Directory
- Single Directory Integration
- Password Reset
- APIs
- Prebuilt integrations with OneLogin App Catalog
- Dynamic Password Deny List
SeeCollapse Features
Included in Education Plan
Advanced Directory
- Directory and Identity Synchronization
- Unlimited Directory Integrations
- Custom Fields
- Custom Mappings
- Directory Provisioning
- Security Policies
- Custom Connectors
- Trusted IdP
SeeCollapse Features
Included in Education Plan
Identity Lifecycle
Management
- Automated User Provisioning
- Automated User Deprovisioning
- Custom Attributes
- Flexible Entitlement Mappings
- Admin Approval Workflows
- Application-Specific Rules
SeeCollapse Features
Included in Education Plan
Multi-Factor Authentication (MFA)
- Multi-MFA Configuration
- Multiple Device Support
- Multiple authentication factors per policy
- TOTP & Hardware Tokens
- OneLogin Protect
- MFA Registration API
- Authorization APIs
- Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
- Password Deny List
- Email MFA
- Security Questions
- OneLogin SMS
- OneLogin Voice
- WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
- 3rd Party Passkeys (Device-bound , Synced & Cross-Device Authentication flows)
SeeCollapse Features
Included in Education Plan
HR-Driven Identity
- HR Integrations (Workday, UKG, Namely, Bamboo HR)
- Automatic Sync to OneLogin Cloud Directory
- Automated Identity Workflows
- Role-Based Access Control (RBAC)
SeeCollapse Features
Included in Education Plan
SmartFactor
Authentication
- All MFA features
- Vigilance AI Threat Engine
- Policy-Driven Access Denial
- Smart Flows
- Smart MFA
- Smart Access
- Compromised Credential Check
SeeCollapse Features
Included in Education Plan
RADIUS
- WiFi and VPN Authentication
- Extend SSO to a RADIUS endpoint
- Extend MFA to a RADIUS endpoint (MFA required)
- Vendor Specific Attributes
SeeCollapse Features
Included in Education Plan
Delegated
Administration
- Privileges Enforcement for Apps, Users, and Roles
- Programmatic Assignment of Privileges through Roles
- Custom Granular Privileges
- API for Privileges CRUD Operations
SeeCollapse Features
Included in Education Plan
Desktop
Requires purchase of MFA
- Certificate-based trust
- Machine-level authentication
- Automated password resets
- Shared workstation / kiosk mode
- MDM deployment support
SeeCollapse Features
Enterprise Sandbox
- Production data clone
- Full performance testing
- Dedicated URL & Environment
SeeCollapse Features
Solutions designed just for your organization
Professional Services
OneLogin's Professional Services are the most effective way to get you up and running quickly. Our expert Implementation Consultants will guide you through the best practice configuration to set up your specific site, connect to directories and applications from our catalog, and maximize the value from your investment.