Pricing
Advanced
Policy-driven security, MFA and advanced user management
- Single Sign-On (SSO)
- Advanced Directory
- Multi-Factor Authentication (MFA)
LIST PRICE
$6
/user/month
BUNDLE PRICE
$4
/user/month
Professional
Complete identity management
for the enterprise
- All Advanced Bundle Products
- Identity Lifecycle Management
- HR Driven Identity
LIST PRICE
$12
/user/month
BUNDLE PRICE
$8
/user/month
Are you a small business under 50 users? View pricing options.
Workforce Experience
Identity and Access Management (IAM)
$2
/user/month
Single Sign-On (SSO)
- Cloud Directory
- Unlimited SAML and OIDC Authentication
- Single Directory Integration
- Windows Domain Authentication
- Mobile Single Sign-On
- Password Policy Management
- Password Reset
- Prebuilt integrations to the OneLogin App Catalog
- Multiple Languages
- Custom Branding
- Standard and Custom Reports
- SIEM Integrations
SeeCollapse Features
$2
/user/month
Advanced Directory
Requires purchase of SSO
- Directory and Identity Synchronization
- Unlimited Directory Integrations
- Custom Fields
- Custom Mappings
- Directory Provisioning
- Security Policies
- Custom Connectors
- Trusted IDP
- VLDAP
SeeCollapse Features
$2
/user/month
Multi-Factor Authentication (MFA)
Requires purchase of SSO
- Multi-MFA Configuration
- Multiple Device Support
- Multiple authentication factors per policy
- TOTP & Hardware Tokens
- OneLogin Protect
- MFA Registration API
- Authorization APIs
- Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
- Password Blacklist
- Email MFA
- Security Questions
- OneLogin SMS
- OneLogin Voice
- WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
SeeCollapse Features
$5
/user/month
SmartFactor
Authentication
Requires purchase of SSO
- All MFA features
- Vigilance AI Threat Engine
- Policy-Driven Access Denial
- Smart Flows
- Smart MFA
- Smart Access
- Compromised Credential Check
- Dynamic Password Blacklist
SeeCollapse Features
$4
/user/month
Desktop
Requires purchase of MFA
- Certificate-based trust
- Machine-level authentication
- Automated password resets
- Shared workstation / kiosk mode
- MDM deployment support
SeeCollapse Features
$4
/user/month
Identity Lifecycle
Management
Requires purchase of Advanced Directory
- Automated User Provisioning
- Automated User Deprovisioning
- Custom Attributes
- Flexible Entitlement Mappings
- Admin Approval Workflows
- Application-Specific Rules
SeeCollapse Features
$2
/user/month
HR-Driven Identity
Requires purchase of Advanced Directory
- HR Integrations (Workday, UKG, Namely, Bamboo HR)
- Automatic Sync to OneLogin Cloud Directory
- Automated Identity Workflows
- Role-Based Access Control (RBAC)
SeeCollapse Features
$4
/user/month
Access
Requires purchase of SSO
- On-premise applications
- Homegrown Applications
- Authorization Policies
- Gateway or Agent Deployment
- Real-Time Deployment & Monitoring
- CRUD APIs for Enforcement Points & Apps
SeeCollapse Features
$2
/user/month
RADIUS
Requires purchase of SSO
- WiFi and VPN Authentication
- Extend SSO to a RADIUS endpoint
- Extend MFA to a RADIUS endpoint (MFA required)
- Vendor Specific Attributes
SeeCollapse Features
RD Gateway
Requires purchase of SSO
- Remote access to Windows Servers
- Remote access to Windows Desktops
- Extend SSO to RDG
- Extend MFA to RDG (requires MFA)
SeeCollapse Features
Enterprise Sandbox
- Production data clone
- Full performance testing
- Dedicated URL & Environment
SeeCollapse Features
Delegated
Administration
- Privileges Enforcement for Apps, Users, and Roles
- Programmatic Assignment of Privileges through Roles
- Custom Granular Privileges
- API for Privileges CRUD Operations
SeeCollapse Features
Universal Connector
Requires purchase of Identity Lifecycle Management & HR-Driven Identity for HR Directories
- Custom, Pre-Built Connector
- Directory or App Integration
- Automated Data Synchronization
- API Integration (REST, SOAP)
- SQL Databases
- Text Files (e.g. CSV via STP)
- SaaS and On-Prem Apps
SeeCollapse Features
$2
/user/month
OneLogin Workflows
Requires purchase of Identity Lifecycle Management & HR-Driven Identity for HR Directories
- Workflow Builder
- Pre-Built Templates
- Event-Based Triggers
- Scheduled Tasks
- Custom Notifications
- Data Transformation
SeeCollapse Features
Customer Experience
CIAM (Customer Identity and Access Management)
Customer Identity
Foundations
- Cloud Directory
- Single Directory Integration
- Multiple OIDC clients
- Social Login
- Social Registration
- Customizable Login Page
- Custom Branding
- Password Reset
- OneLogin Protect
- APIs
- SIEM Integrations
SeeCollapse Features
CE Single Sign-On (SSO)
Requires purchase of CI Foundations
- Unlimited SAML and OIDC Authentication
- Mobile Single Sign-on
- Prebuilt integrations to the OneLogin App Catalog
SeeCollapse Features
CE Advanced Directory
Requires purchase of CI Foundations
- Directory and Identity Synchronization
- Unlimited Directory Integrations
- Custom Fields
- Custom Mappings
- Directory Provisioning
- Security Policies
- Custom Connectors
- Trusted IdP
SeeCollapse Features
CE Multi-Factor Authentication (MFA)
Requires purchase of CI Foundations
- Multi-MFA Configuration
- Multiple Device Support
- Multiple authentication factors per policy
- TOTP & Hardware Tokens
- OneLogin Protect
- MFA Registration API
- Authorization APIs
- Third Party Integrations (Google, Duo, Symantec, Yubikey, etc.)
- Password Blacklist
- Email MFA
- Security Questions
- OneLogin SMS
- OneLogin Voice
- WebAuthn Biometric Factors (Windows Hello on PCs, TouchID on Macs)
SeeCollapse Features
CE SmartFactor
Authentication
Requires purchase of CI Foundations
- All MFA features
- Vigilance AI Threat Engine
- Policy-Driven Access Denial
- Smart Flows
- Smart MFA
- Smart Access
- Compromised Credential Check
- Dynamic Password Reset
SeeCollapse Features
CE Identity Lifecycle
Management
Requires purchase of CE Advanced Directory
- Automated User Provisioning
- Automated User Deprovisioning
- Custom Attributes
- Flexible Entitlement Mappings
- Admin Approval Workflows
- Application-Specific Rules
SeeCollapse Features
CE Access
Requires purchase of CI Foundations
- On-premise applications
- Homegrown applications
- Authorization Policies
- Gateway or Agent Deployment
- Real-Time Deployment & Monitoring
- CRUD APIs for Enforcement Points & Apps
SeeCollapse Features
CE Enterprise Sandbox
- Production data clone
- Full performance testing
- Dedicated URL & Environment
SeeCollapse Features
CE Delegated
Administration
- Privileges Enforcement for Apps, Users, and Roles
- Programmatic Assignment of Privileges through Roles
- Custom Granular Privileges
- API for Privileges CRUD Operations
SeeCollapse Features
CE Universal
Connector
Requires purchase of Identity Lifecycle Management
- Custom, Pre-Built Connector
- Directory or App Integration
- Automated Data Synchronization
- API Integration (REST, SOAP)
- SQL Databases
- Text Files (e.g. CSV via STP)
- SaaS and On-Prem Apps
SeeCollapse Features
CE Workflows
Requires purchase of Identity Lifecycle Management
- Workflow Builder
- Pre-Built Templates
- Event-Based Triggers
- Scheduled Tasks
- Custom Notifications
- Data Transformation
SeeCollapse Features
Solutions designed just for your organization
Professional Services
OneLogin's Professional Services are the most effective way to get you up and running quickly. Our expert Implementation Consultants will guide you through the best practice configuration to set up your specific site, connect to directories and applications from our catalog, and maximize the value from your investment.