This article is written by the team that builds Casdoor, so we are not neutral, and we say where we think Casdoor fits and where it doesn't. Facts about other products come from their own websites as of November 1, 2026 (listed under Sources) and may have changed. Spotted something out of date? Tell us.
Okta does not have "a price". It has two product lines with different pricing models, and most of the confusion about Okta's cost comes from mixing them up:
- Workforce Identity — for employees. Priced per user per month, billed annually.
- Customer Identity — for your customers. Priced as a platform base plus usage, not per user.
This article walks through both, using Okta's published price list as of November 2026. Most real contracts are quoted, so treat these as the floor, not the final number.
Workforce Identity
The published plans, per user per month, billed annually, with a $1,500 annual minimum:
| Plan | Price | What Okta lists |
|---|---|---|
| Starter | $6 | SSO, MFA, Universal Directory, 5 workflows |
| Core Essentials | $14 | Shown in the comparison table |
| Essentials | $17 | Starter plus adaptive MFA, privileged access for 2 admins, lifecycle management, access governance, 50 workflows |
| Professional | Quote only | Essentials plus device access, identity security posture management, identity threat protection, sandbox, unlimited workflows |
| Enterprise | Quote only | Professional plus API access management, access gateway, machine-to-machine tokens |
Two things surprise buyers:
- The minimum. At $6 per user per month, a 100-person company would pay $600 a month — but the $1,500 annual minimum means small deployments pay more per seat than the list price suggests.
- The jump to Professional. The plans that include device access and identity threat protection are quote-only, so the published numbers do not tell you what a realistic enterprise deployment costs.
Customer Identity
Customer Identity is a different model. Okta publishes an Enterprise base platform at $3,000 per month, not per user, which includes unlimited OIDC and outbound SAML applications, Okta APIs and enterprise SLAs.
The suites that most B2C and B2B companies actually need — B2C Suite and B2B Suite — are quote only, and usage-based add-ons (including monthly active users) are priced separately.
That structure has a consequence worth understanding: at small scale, Customer Identity is dominated by the platform fee; at large scale, it is dominated by the usage add-ons. The crossover is exactly where the negotiation happens.
How to estimate your bill
For Workforce:
- Count the users who need Okta seats (not customers).
- Pick the plan by feature, not by price — MFA and lifecycle management land in different tiers.
- Multiply by 12 and compare with the $1,500 minimum.
- Add the quote-only upgrades you actually need (device access, API access management) before assuming the list price.
For Customer Identity:
- Start with the $3,000 monthly base.
- Add the B2C or B2B suite if you need workflows, federation or governance — ask for the quote.
- Model the MAU add-ons at your projected 12-month and 36-month volumes.
- Ask what happens at renewal when the MAU count grows.
Where the flat-price alternative fits
Casdoor's pricing is the opposite shape: self-hosted is free (Apache-2.0), and the managed cloud is a flat $9, $25 or $59 per month depending on the plan, with unlimited MAU and no per-connection fees. There is no user minimum and no platform fee.
That does not make it cheaper in every scenario — a self-hosted deployment has operating costs, and Okta brings a large integration catalogue and enterprise support. But for teams comparing a per-user Workforce quote or a $3,000 monthly Customer Identity base against their actual usage, the flat model is the number to beat. See the Casdoor vs Okta comparison for the feature side.
Questions to ask Okta before signing
- What is the renewal uplift policy, and how is it applied to MAU growth?
- Which of the features we need are quote-only, and what do they add to the total?
- Is MFA included at our tier, or is it an add-on?
- What is the price for a second environment (staging, sandbox)?
- What happens if we exceed the contracted user count mid-term?
The answers matter more than the list price, because the list price covers a narrow slice of a real deployment.
Related reading: Okta alternatives and authentication pricing compared.