For the best web experience, please use IE11+, Chrome, Firefox, or Safari

Pricing

Workforce Identity

Identity and Access Management (IAM)

Basic

Authentication
Limited User Management

PACK PRICE

$3

/user/month

  • Single Sign-On (SSO)
  • Multi-Factor Authentication (MFA)
  • Desktop Basic
  • Identity Lifecycle Management (5 apps)

Essentials

Authentication
User Management

PACK PRICE

$6

/user/month

  • All Basic Plan Features
  • Unlimited Identity Lifecycle Management
  • Advanced Directory

Business

Advanced Authentication
User Management Automation

PACK PRICE

$10

/user/month

  • All Essential Plan Features
  • SmartFactor Authentication
  • Desktop MFA
  • HR Directories
  • RADIUS
  • VLDAP
  • SIEM Integrations
  • Smart Hooks
  • Custom REST Connectors

Enterprise

Advanced Authentication
Advanced User Management

  • All Business Plan Features
  • LDAP Directory Sync
  • Delegated Administration
  • Multiple Brands
  • API Access Management

Included in All Plans

Single Sign-On (SSO)

  • Cloud Directory
  • Unlimited SAML and OIDC Authentication
  • Single Directory Integration
  • Windows Domain Authentication
  • Mobile Single Sign-On
  • Password Policy Management
  • Password Reset
  • Prebuilt integrations to the OneLogin App Catalog
  • Multiple Languages
  • Custom Branding
  • Standard and Custom Reports
  • SIEM Integrations
  • Dynamic Password Deny List

SeeCollapse Features

Included in All Plans

Multi-Factor Authentication (MFA)

Requires purchase of SSO

  • Multi-MFA Configuration
  • Multiple Device Support
  • Multiple authentication factors per policy
  • TOTP & Hardware Tokens
  • OneLogin Protect
  • MFA Registration API
  • Authorization APIs
  • Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
  • Password Deny List
  • Email MFA
  • Security Questions
  • OneLogin SMS
  • OneLogin Voice
  • WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
  • 3rd Party Passkeys (Device-bound , Synced & Cross-Device Authentication flows)

SeeCollapse Features

Included in All Plans (Limited in Basic)

Identity Lifecycle
Management

Requires purchase of Advanced Directory

  • Automated User Provisioning
  • Automated User Deprovisioning
  • Custom Attributes
  • Flexible Entitlement Mappings
  • Admin Approval Workflows
  • Application-Specific Rules

SeeCollapse Features

Included in All Plans Except Basic

Advanced Directory

Requires purchase of SSO

  • Directory and Identity Synchronization
  • Unlimited Directory Integrations
  • Custom Fields
  • Custom Mappings
  • Directory Provisioning
  • Security Policies
  • Custom Connectors
  • Trusted IDP
  • VLDAP

SeeCollapse Features

Included in Business and Enterprise Plans

SmartFactor
Authentication

Requires purchase of SSO & MFA

  • Vigilance AI Threat Engine
  • Policy-Driven Access Denial
  • Smart Flows
  • Smart MFA
  • Smart Access
  • Compromised Credential Check

SeeCollapse Features

Included in Business and Enterprise Plans

Desktop

Requires purchase of MFA

  • Certificate-based trust
  • Machine-level authentication
  • Automated password resets
  • Shared workstation / kiosk mode
  • MDM deployment support

SeeCollapse Features

Included in Business and Enterprise Plans

HR-Driven Identity

Requires purchase of Advanced Directory

  • HR Integrations (Workday, UKG, Namely, Bamboo HR)
  • Automatic Sync to OneLogin Cloud Directory
  • Automated Identity Workflows
  • Role-Based Access Control (RBAC)

SeeCollapse Features

Included in Business and Enterprise Plans

RADIUS

Requires purchase of SSO

  • WiFi and VPN Authentication
  • Extend SSO to a RADIUS endpoint
  • Extend MFA to a RADIUS endpoint (MFA required)
  • Vendor Specific Attributes

SeeCollapse Features

Included in Enterprise Plans

Access

Requires purchase of SSO

  • On-premise applications
  • Homegrown Applications
  • Authorization Policies
  • Gateway or Agent Deployment
  • Real-Time Deployment & Monitoring
  • CRUD APIs for Enforcement Points & Apps

SeeCollapse Features

Included in Enterprise Plans

Delegated
Administration

  • Privileges Enforcement for Apps, Users, and Roles
  • Programmatic Assignment of Privileges through Roles
  • Custom Granular Privileges
  • API for Privileges CRUD Operations

SeeCollapse Features

Included in Enterprise Plans

Multiple Brands

  • Multiple Application-Level Brands
  • Custom Login Pages
  • Custom Email and SMS Authentication Messages
  • Custom SMTP Server Settings

SeeCollapse Features

$2

/user/month

OneLogin Workflows

Requires purchase of Identity Lifecycle Management & HR-Driven Identity for HR Directories

  • Workflow Builder
  • Pre-Built Templates
  • Event-Based Triggers
  • Scheduled Tasks
  • Custom Notifications
  • Data Transformation

SeeCollapse Features

Call for Pricing

Enterprise Sandbox

  • Production data clone
  • Full performance testing
  • Dedicated URL & Environment

SeeCollapse Features

B2B Identity

Advanced

Policy-driven security with SSO and MFA

  • Single Sign-On (SSO)
  • Advanced Directory
  • Multi-Factor Authentication (MFA)

Professional

Strong Authentication with Advanced User Management

  • All Advanced Bundle Products
  • Identity Lifecycle Management
  • HR Driven Identity

Included in Advanced & Pro Bundles

Single Sign-On (SSO)

  • Cloud Directory
  • Unlimited SAML and OIDC Authentication
  • Single Directory Integration
  • Windows Domain Authentication
  • Mobile Single Sign-On
  • Password Policy Management
  • Password Reset
  • Prebuilt integrations to the OneLogin App Catalog
  • Multiple Languages
  • Custom Branding
  • Standard and Custom Reports
  • SIEM Integrations
  • Dynamic Password Deny List

SeeCollapse Features

Included in Advanced & Pro Bundles

Advanced Directory

Requires purchase of SSO

  • Directory and Identity Synchronization
  • Unlimited Directory Integrations
  • Custom Fields
  • Custom Mappings
  • Directory Provisioning
  • Security Policies
  • Custom Connectors
  • Trusted IDP
  • VLDAP

SeeCollapse Features

Included in Advanced & Pro Bundles

Multi-Factor Authentication (MFA)

Requires purchase of SSO

  • Multi-MFA Configuration
  • Multiple Device Support
  • Multiple authentication factors per policy
  • TOTP & Hardware Tokens
  • OneLogin Protect
  • MFA Registration API
  • Authorization APIs
  • Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
  • Password Deny List
  • Email MFA
  • Security Questions
  • OneLogin SMS
  • OneLogin Voice
  • WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
  • 3rd Party Passkeys (Device-bound , Synced & Cross-Device Authentication flows)

SeeCollapse Features

Included in Pro Bundles

HR-Driven Identity

Requires purchase of Advanced Directory

  • HR Integrations (Workday, UKG, Namely, Bamboo HR)
  • Automatic Sync to OneLogin Cloud Directory
  • Automated Identity Workflows
  • Role-Based Access Control (RBAC)

SeeCollapse Features

Included in Pro Bundles

Identity Lifecycle
Management

Requires purchase of Advanced Directory

  • Automated User Provisioning
  • Automated User Deprovisioning
  • Custom Attributes
  • Flexible Entitlement Mappings
  • Admin Approval Workflows
  • Application-Specific Rules

SeeCollapse Features

Customer Identity

Customer Identity and Access Management (CIAM)

CIAM Plus

  • All of CIAM Core
  • Multi-Factor Authentication (MFA)
  • Passwordless (All Authentication Factors)
  • Custom Domain
  • Advanced Directory
  • Delegated Administration
  • Multiple Brands
  • Development Tenant
  • SmartFactor Authentication

Included in CIAM Plus

CIAM Core

  • Custom Branding
  • Social Login/Registration
  • Passwordless (Email/SMS)
  • Unlimited OIDC and SAML Authentication
  • Cloud Directory
  • Single Directory Integration
  • Password Reset
  • APIs
  • Prebuilt integrations with OneLogin App Catalog
  • Dynamic Password Deny List

SeeCollapse Features

Included in CIAM Plus

Multi-Factor Authentication (MFA)

  • Multi-MFA Configuration
  • Multiple Device Support
  • Multiple authentication factors per policy
  • TOTP & Hardware Tokens
  • OneLogin Protect
  • MFA Registration API
  • Authorization APIs
  • Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
  • Password Deny List
  • Email MFA
  • Security Questions
  • OneLogin SMS
  • OneLogin Voice
  • WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
  • 3rd Party Passkeys (Device-bound , Synced & Cross-Device Authentication flows)

SeeCollapse Features

Included in CIAM Plus

Advanced Directory

  • Directory and Identity Synchronization
  • Unlimited Directory Integrations
  • Custom Fields
  • Custom Mappings
  • Directory Provisioning
  • Security Policies
  • Custom Connectors
  • Trusted IdP

SeeCollapse Features

Included in CIAM Plus

Delegated
Administration

  • Privileges Enforcement for Apps, Users, and Roles
  • Programmatic Assignment of Privileges through Roles
  • Custom Granular Privileges
  • API for Privileges CRUD Operations

SeeCollapse Features

Included in CIAM Plus

Multiple Brands

  • Multiple Application-Level Brands
  • Custom Login Pages
  • Custom Email and SMS Authentication Messages
  • Custom SMTP Server Settings

SeeCollapse Features

Included in CIAM Plus

SmartFactor
Authentication

Requires purchase of CIAM Plus

  • All MFA features
  • Vigilance AI Threat Engine
  • Policy-Driven Access Denial
  • Smart Flows
  • Smart MFA
  • Smart Access
  • Compromised Credential Check

SeeCollapse Features

Call for Pricing

Identity Lifecycle
Management

Requires purchase of CIAM Plus

  • Automated User Provisioning
  • Automated User Deprovisioning
  • Custom Attributes
  • Flexible Entitlement Mappings
  • Admin Approval Workflows
  • Application-Specific Rules

SeeCollapse Features

Education Identity

Education Plan

  • Core Functionality
  • Identity Lifecycle Management
  • RADIUS
  • Desktop
  • SmartFactor
  • Multi-Factor Authentication (MFA)
  • Advanced Directory
  • HR Driven Identity
  • Delegated Administration

Included in Education Plan

Core Functionality

  • Custom Branding
  • Social Login/Registration
  • Passwordless (Email/SMS)
  • Unlimited OIDC and SAML Authentication
  • Cloud Directory
  • Single Directory Integration
  • Password Reset
  • APIs
  • Prebuilt integrations with OneLogin App Catalog
  • Dynamic Password Deny List

SeeCollapse Features

Included in Education Plan

Advanced Directory

  • Directory and Identity Synchronization
  • Unlimited Directory Integrations
  • Custom Fields
  • Custom Mappings
  • Directory Provisioning
  • Security Policies
  • Custom Connectors
  • Trusted IdP

SeeCollapse Features

Included in Education Plan

Identity Lifecycle
Management

  • Automated User Provisioning
  • Automated User Deprovisioning
  • Custom Attributes
  • Flexible Entitlement Mappings
  • Admin Approval Workflows
  • Application-Specific Rules

SeeCollapse Features

Included in Education Plan

Multi-Factor Authentication (MFA)

  • Multi-MFA Configuration
  • Multiple Device Support
  • Multiple authentication factors per policy
  • TOTP & Hardware Tokens
  • OneLogin Protect
  • MFA Registration API
  • Authorization APIs
  • Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
  • Password Deny List
  • Email MFA
  • Security Questions
  • OneLogin SMS
  • OneLogin Voice
  • WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
  • 3rd Party Passkeys (Device-bound , Synced & Cross-Device Authentication flows)

SeeCollapse Features

Included in Education Plan

HR-Driven Identity

  • HR Integrations (Workday, UKG, Namely, Bamboo HR)
  • Automatic Sync to OneLogin Cloud Directory
  • Automated Identity Workflows
  • Role-Based Access Control (RBAC)

SeeCollapse Features

Included in Education Plan

SmartFactor
Authentication

  • All MFA features
  • Vigilance AI Threat Engine
  • Policy-Driven Access Denial
  • Smart Flows
  • Smart MFA
  • Smart Access
  • Compromised Credential Check

SeeCollapse Features

Included in Education Plan

RADIUS

  • WiFi and VPN Authentication
  • Extend SSO to a RADIUS endpoint
  • Extend MFA to a RADIUS endpoint (MFA required)
  • Vendor Specific Attributes

SeeCollapse Features

Included in Education Plan

Delegated
Administration

  • Privileges Enforcement for Apps, Users, and Roles
  • Programmatic Assignment of Privileges through Roles
  • Custom Granular Privileges
  • API for Privileges CRUD Operations

SeeCollapse Features

Included in Education Plan

Desktop

Requires purchase of MFA

  • Certificate-based trust
  • Machine-level authentication
  • Automated password resets
  • Shared workstation / kiosk mode
  • MDM deployment support

SeeCollapse Features

Call for Pricing

Enterprise Sandbox

  • Production data clone
  • Full performance testing
  • Dedicated URL & Environment

SeeCollapse Features

Disclaimer: Pricing in U.S. dollars applies to customers located within the United States. If you are outside the U.S., please contact your local team for region-specific pricing.

Solutions designed just for your organization

Local, regional and international support personalized for your business needs

Professional Services

OneLogin's Professional Services are the most effective way to get you up and running quickly. Our expert Implementation Consultants will guide you through the best practice configuration to set up your specific site, connect to directories and applications from our catalog, and maximize the value from your investment.

Learn More About Our Professional Services

TALK TO AN EXPERT

Reach out to a rep for more information or to get a custom quote