Displayed Essentials B2C price for 500 monthly active users; B2B and MAU selections change price; free plan also exists. Source
Auth0 vs authentik
Fit:
Migration notes
Supports SAML/OIDC and directory/proxy protocols. Recreate app integrations, policy flows and user stores. Some workplace provisioning/security integrations require Enterprise.
Sources: goauthentik.io · checked 2026-10-21
Auth0Paid incumbent
| Free | entry | Free |
|---|---|---|
| Professional | business | Not established |
| Enterprise | enterprise | Quote only |
| Open Source | self-hosted open-source core | Free |
|---|---|---|
| Enterprise | paid self-hosted enterprise subscription | USD 60 / user / yr |
| Enterprise Plus | paid self-hosted enterprise contract | USD 20,000 / organization / yr |
What you may give up
- Privileged access management and agent accounts
- Google Workspace and Microsoft Entra ID integrations
- Enhanced audit logging, scheduled offboarding and CSV reports
- mTLS authentication and device trust integrations
Tier B: Core MIT; root LICENSE explicitly carves out enterprise directory under separate terms. Paid administration/security integrations; community protocols and B2B/B2C login remain available. Vendor explicitly states no hosted service. License source
What running it takes
-
- authentik server and worker processes
-
- Podman
Hover or focus an icon for its name. Dashed means not established; struck through means no; grouped icons are alternatives.
Current Compose guide documents PostgreSQL and server/worker deployment. Raw compose.yml fetch rejected unsupported YAML content type; exact auxiliary service/version matrix not established here; no legacy Redis dependency inferred. Infrastructure and staff time are not priced here; this page does not compare total cost.