Top 5 managed identity providers with a dedicated instance and no per-user fees

Almost every auth SaaS works the same way: your users live in a tenant on shared infrastructure, and the bill grows with monthly active users. That is a great deal at 1,000 users and a painful one at 200,000, and enterprise features such as SSO connections are usually billed per connection on top.

There is another model. Some providers run a dedicated instance of the identity server for each customer, with its own database, and charge a flat price for it, however many users sign in. You get predictable costs, full admin access to the server, and an easy exit, because the software is the same thing you could run yourself.

These are the five we'd look at.

Comparison

1. Casdoor Cloud

Casdoor Cloud runs a dedicated Casdoor instance and database for each customer, upgraded and backed up by the team that builds Casdoor.

• Price: Basic $29, Premium $79 and Enterprise $249 per month, or $24.17/month billed yearly. There are no per-user, per-MAU or per-connection fees, and SSO connections, MFA and organizations are included in every plan.
• What you get: full admin access to your own Casdoor, with OIDC, OAuth 2.0, SAML, CAS, LDAP, RADIUS and SCIM, Casbin authorization and OAuth for MCP servers. Premium adds a custom domain and a choice of 23 regions.
• Trial: new accounts get $20 of credit, enough to run a Basic instance pay-as-you-go for a while before committing.
• Exit: export your data and run the same open-source Casdoor yourself.

Why it's first: it is the lowest entry price for a dedicated instance, with the widest protocol support in this list.

Trade-offs: Casdoor Cloud does not yet have SOC 2 or ISO 27001 reports, and Basic instances run in Singapore or Japan only.

2. Skycloak

Skycloak hosts dedicated Keycloak clusters with unlimited users. Plans are Developer at $29, Launch at $149 and Business at $599 per month, with 20% off for annual billing and a 21-day trial without a card.

Pick it if: you want to stay on Keycloak and want the cheapest managed option for it.

3. Phase Two

Phase Two is managed Keycloak with its own open-source extensions for organizations and B2B. Starter is $149 per month, sized for about 5,000 active users; Premium and Enterprise add capacity, SLAs and support. Limits are soft, so you aren't cut off or charged extra if you go over.

Pick it if: you need Keycloak plus B2B organization features and a higher-touch vendor.

4. Cloud-IAM

Cloud-IAM is a European managed Keycloak provider with dedicated deployments from €225 per month (Starter), up to €1,440 for Premium, with SLAs from 99% to 99.95%. A free tier gives you one realm for up to 100 users on shared infrastructure.

Pick it if: you want an EU-based provider and contractual SLAs.

5. FusionAuth Cloud

FusionAuth hosts its own (proprietary) auth server on dedicated infrastructure. Starter, with basic hosting, begins at $162 per month billed yearly; Essentials and Enterprise, with business or high-availability hosting, start at $2,970 per month.

Pick it if: you like FusionAuth's product and have budget for the higher tiers.

When per-MAU pricing is the better deal

To be fair to the other model: if you have a few thousand users and need nothing beyond login, a shared-tenant service with a free tier (Auth0 covers 25,000 MAU, Clerk 50,000 retained users per app) costs nothing. The flat, dedicated model wins when:

• you have tens of thousands of users or more,
• you need enterprise SSO, SCIM or MFA that per-MAU services sell as add-ons,
• you need admin access to the server itself, or
• you want the option to self-host the same software later.

If that's you, start a Casdoor Cloud trial.