Pricing
Workforce Identity
Identity and Access Management (IAM)
Advanced
Policy-driven security with SSO and MFA
- Single Sign-On (SSO)
- Advanced Directory
- Multi-Factor Authentication (MFA)
LIST PRICE
$6
/user/month
BUNDLE PRICE
$4
/user/month
Professional
Strong Authentication with
Advanced User Management
- All Advanced Bundle Products
- Identity Lifecycle Management
- HR Driven Identity
LIST PRICE
$12
/user/month
BUNDLE PRICE
$8
/user/month
Expert
Advanced Authentication and Risk
Insights with Lifecycle
Automation
- All Professional Bundle Products
- SmartFactor Authentication
- OneLogin Desktop
- Delegated Administration
- RADIUS
LIST PRICE
$21
/user/month
BUNDLE PRICE
$10
/user/month
$2
/user/month
Single Sign-On (SSO)
- Cloud Directory
- Unlimited SAML and OIDC Authentication
- Single Directory Integration
- Windows Domain Authentication
- Mobile Single Sign-On
- Password Policy Management
- Password Reset
- Prebuilt integrations to the OneLogin App Catalog
- Multiple Languages
- Custom Branding
- Standard and Custom Reports
- SIEM Integrations
SeeCollapse Features
$2
/user/month
Advanced Directory
Requires purchase of SSO
- Directory and Identity Synchronization
- Unlimited Directory Integrations
- Custom Fields
- Custom Mappings
- Directory Provisioning
- Security Policies
- Custom Connectors
- Trusted IDP
- VLDAP
SeeCollapse Features
$2
/user/month
Multi-Factor Authentication (MFA)
Requires purchase of SSO
- Multi-MFA Configuration
- Multiple Device Support
- Multiple authentication factors per policy
- TOTP & Hardware Tokens
- OneLogin Protect
- MFA Registration API
- Authorization APIs
- Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
- Password Deny List
- Email MFA
- Security Questions
- OneLogin SMS
- OneLogin Voice
- WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
- 3rd Party Passkeys (Device-bound , Synced & Cross-Device Authentication flows)
SeeCollapse Features
$3
/user/month
SmartFactor
Authentication
Requires purchase of SSO & MFA
- Vigilance AI Threat Engine
- Policy-Driven Access Denial
- Smart Flows
- Smart MFA
- Smart Access
- Compromised Credential Check
- Dynamic Password Deny List
SeeCollapse Features
$4
/user/month
Desktop
Requires purchase of MFA
- Certificate-based trust
- Machine-level authentication
- Automated password resets
- Shared workstation / kiosk mode
- MDM deployment support
SeeCollapse Features
$4
/user/month
Identity Lifecycle
Management
Requires purchase of Advanced Directory
- Automated User Provisioning
- Automated User Deprovisioning
- Custom Attributes
- Flexible Entitlement Mappings
- Admin Approval Workflows
- Application-Specific Rules
SeeCollapse Features
$2
/user/month
HR-Driven Identity
Requires purchase of Advanced Directory
- HR Integrations (Workday, UKG, Namely, Bamboo HR)
- Automatic Sync to OneLogin Cloud Directory
- Automated Identity Workflows
- Role-Based Access Control (RBAC)
SeeCollapse Features
$4
/user/month
Access
Requires purchase of SSO
- On-premise applications
- Homegrown Applications
- Authorization Policies
- Gateway or Agent Deployment
- Real-Time Deployment & Monitoring
- CRUD APIs for Enforcement Points & Apps
SeeCollapse Features
$2
/user/month
RADIUS
Requires purchase of SSO
- WiFi and VPN Authentication
- Extend SSO to a RADIUS endpoint
- Extend MFA to a RADIUS endpoint (MFA required)
- Vendor Specific Attributes
SeeCollapse Features
RD Gateway
Requires purchase of SSO
- Remote access to Windows Servers
- Remote access to Windows Desktops
- Extend SSO to RDG
- Extend MFA to RDG (requires MFA)
SeeCollapse Features
Enterprise Sandbox
- Production data clone
- Full performance testing
- Dedicated URL & Environment
SeeCollapse Features
Delegated
Administration
- Privileges Enforcement for Apps, Users, and Roles
- Programmatic Assignment of Privileges through Roles
- Custom Granular Privileges
- API for Privileges CRUD Operations
SeeCollapse Features
Universal Connector
Requires purchase of Identity Lifecycle Management & HR-Driven Identity for HR Directories
- Custom, Pre-Built Connector
- Directory or App Integration
- Automated Data Synchronization
- API Integration (REST, SOAP)
- SQL Databases
- Text Files (e.g. CSV via STP)
- SaaS and On-Prem Apps
SeeCollapse Features
$2
/user/month
OneLogin Workflows
Requires purchase of Identity Lifecycle Management & HR-Driven Identity for HR Directories
- Workflow Builder
- Pre-Built Templates
- Event-Based Triggers
- Scheduled Tasks
- Custom Notifications
- Data Transformation
SeeCollapse Features
Multiple Brands
- Multiple Application-Level Brands
- Custom Login Pages
- Custom Email and SMS Authentication Messages
- Custom SMTP Server Settings
SeeCollapse Features
B2B Identity
Advanced
Policy-driven security with SSO and MFA
- Single Sign-On (SSO)
- Advanced Directory
- Multi-Factor Authentication (MFA)
Professional
Strong Authentication with Advanced User Management
- All Advanced Bundle Products
- Identity Lifecycle Management
- HR Driven Identity
Included in Advanced & Pro Bundles
Single Sign-On (SSO)
- Cloud Directory
- Unlimited SAML and OIDC Authentication
- Single Directory Integration
- Windows Domain Authentication
- Mobile Single Sign-On
- Password Policy Management
- Password Reset
- Prebuilt integrations to the OneLogin App Catalog
- Multiple Languages
- Custom Branding
- Standard and Custom Reports
- SIEM Integrations
SeeCollapse Features
Included in Advanced & Pro Bundles
Advanced Directory
Requires purchase of SSO
- Directory and Identity Synchronization
- Unlimited Directory Integrations
- Custom Fields
- Custom Mappings
- Directory Provisioning
- Security Policies
- Custom Connectors
- Trusted IDP
- VLDAP
SeeCollapse Features
Included in Advanced & Pro Bundles
Multi-Factor Authentication (MFA)
Requires purchase of SSO
- Multi-MFA Configuration
- Multiple Device Support
- Multiple authentication factors per policy
- TOTP & Hardware Tokens
- OneLogin Protect
- MFA Registration API
- Authorization APIs
- Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
- Password Deny List
- Email MFA
- Security Questions
- OneLogin SMS
- OneLogin Voice
- WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
- 3rd Party Passkeys (Device-bound , Synced & Cross-Device Authentication flows)
SeeCollapse Features
Included in Advanced & Pro Bundles
HR-Driven Identity
Requires purchase of Advanced Directory
- HR Integrations (Workday, UKG, Namely, Bamboo HR)
- Automatic Sync to OneLogin Cloud Directory
- Automated Identity Workflows
- Role-Based Access Control (RBAC)
SeeCollapse Features
Included in Advanced & Pro Bundles
Identity Lifecycle
Management
Requires purchase of Advanced Directory
- Automated User Provisioning
- Automated User Deprovisioning
- Custom Attributes
- Flexible Entitlement Mappings
- Admin Approval Workflows
- Application-Specific Rules
SeeCollapse Features
Customer Identity
Customer Identity and Access Management (CIAM)
CIAM Core
- Custom Branding
- Social Login/Registration
- Passwordless (Email/SMS)
- Unlimited OIDC and SAML Authentication
- Cloud Directory
- Single Directory Integration
- Password Reset
- APIs
- Prebuilt integrations with OneLogin App Catalog
CIAM Plus
- All of CIAM Core
- Multi-Factor Authentication (MFA)
- Passwordless (All Authentication Factors)
- Custom Domain
- Advanced Directory
- Delegated Administration
- Multiple Brands
- Development Tenant
Included in CIAM Plus
Multi-Factor Authentication (MFA)
- Multi-MFA Configuration
- Multiple Device Support
- Multiple authentication factors per policy
- TOTP & Hardware Tokens
- OneLogin Protect
- MFA Registration API
- Authorization APIs
- Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
- Password Deny List
- Email MFA
- Security Questions
- OneLogin SMS
- OneLogin Voice
- WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
- 3rd Party Passkeys (Device-bound , Synced & Cross-Device Authentication flows)
SeeCollapse Features
Included in CIAM Plus
Advanced Directory
- Directory and Identity Synchronization
- Unlimited Directory Integrations
- Custom Fields
- Custom Mappings
- Directory Provisioning
- Security Policies
- Custom Connectors
- Trusted IdP
SeeCollapse Features
Included in CIAM Plus
Delegated
Administration
- Privileges Enforcement for Apps, Users, and Roles
- Programmatic Assignment of Privileges through Roles
- Custom Granular Privileges
- API for Privileges CRUD Operations
SeeCollapse Features
Included in CIAM Plus
Multiple Brands
- Multiple Application-Level Brands
- Custom Login Pages
- Custom Email and SMS Authentication Messages
- Custom SMTP Server Settings
SeeCollapse Features
SmartFactor
Authentication
Requires purchase of CIAM Plus
- All MFA features
- Vigilance AI Threat Engine
- Policy-Driven Access Denial
- Smart Flows
- Smart MFA
- Smart Access
- Compromised Credential Check
- Dynamic Password Deny List
SeeCollapse Features
Identity Lifecycle
Management
Requires purchase of CIAM Plus
- Automated User Provisioning
- Automated User Deprovisioning
- Custom Attributes
- Flexible Entitlement Mappings
- Admin Approval Workflows
- Application-Specific Rules
SeeCollapse Features
Education Identity
Education Bundle
- Core Functionality
- Identity Lifecycle Management
- Multi-Factor Authentication (MFA)
- Advanced Directory
- HR Driven Identity
Included in Education Bundle
Core Functionality
- Custom Branding
- Social Login/Registration
- Passwordless (Email/SMS)
- Unlimited OIDC and SAML Authentication
- Cloud Directory
- Single Directory Integration
- Password Reset
- APIs
- Prebuilt integrations with OneLogin App Catalog
SeeCollapse Features
Included in Education Bundle
Advanced Directory
- Directory and Identity Synchronization
- Unlimited Directory Integrations
- Custom Fields
- Custom Mappings
- Directory Provisioning
- Security Policies
- Custom Connectors
- Trusted IdP
SeeCollapse Features
Included in Education Bundle
Identity Lifecycle
Management
- Automated User Provisioning
- Automated User Deprovisioning
- Custom Attributes
- Flexible Entitlement Mappings
- Admin Approval Workflows
- Application-Specific Rules
SeeCollapse Features
Included in Education Bundle
Multi-Factor Authentication (MFA)
- Multi-MFA Configuration
- Multiple Device Support
- Multiple authentication factors per policy
- TOTP & Hardware Tokens
- OneLogin Protect
- MFA Registration API
- Authorization APIs
- Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
- Password Deny List
- Email MFA
- Security Questions
- OneLogin SMS
- OneLogin Voice
- WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
- 3rd Party Passkeys (Device-bound , Synced & Cross-Device Authentication flows)
SeeCollapse Features
Included in Education Bundle
HR-Driven Identity
- HR Integrations (Workday, UKG, Namely, Bamboo HR)
- Automatic Sync to OneLogin Cloud Directory
- Automated Identity Workflows
- Role-Based Access Control (RBAC)
SeeCollapse Features
SmartFactor
Authentication
- All MFA features
- Vigilance AI Threat Engine
- Policy-Driven Access Denial
- Smart Flows
- Smart MFA
- Smart Access
- Compromised Credential Check
- Dynamic Password Deny List
SeeCollapse Features
RADIUS
- WiFi and VPN Authentication
- Extend SSO to a RADIUS endpoint
- Extend MFA to a RADIUS endpoint (MFA required)
- Vendor Specific Attributes
SeeCollapse Features
Enterprise Sandbox
- Production data clone
- Full performance testing
- Dedicated URL & Environment
SeeCollapse Features
Delegated
Administration
- Privileges Enforcement for Apps, Users, and Roles
- Programmatic Assignment of Privileges through Roles
- Custom Granular Privileges
- API for Privileges CRUD Operations
SeeCollapse Features
Desktop
Requires purchase of MFA
- Certificate-based trust
- Machine-level authentication
- Automated password resets
- Shared workstation / kiosk mode
- MDM deployment support
SeeCollapse Features
Solutions designed just for your organization
Professional Services
OneLogin's Professional Services are the most effective way to get you up and running quickly. Our expert Implementation Consultants will guide you through the best practice configuration to set up your specific site, connect to directories and applications from our catalog, and maximize the value from your investment.