Compare / Auth0
IdRa vs Auth0.
Different jobs, mostly. Here’s where they overlap.
$0IdRa, at any headcount
25,000Monthly active users on Auth0’s free plan
$35Auth0 Essentials, per month, up to 500 active users
The short version.
Choose IdRa if
- Your own staff sign in to the apps they use at work
- You want SSO, MFA, a directory and SCIM with nothing to count and no plan to outgrow
- You host organizations for customers, and want a database for each
- You’re leaving Okta and have scripts written against its API
Choose Auth0 if
- You’re adding sign-up and login to your own product, which is what Auth0 describes and IdRa isn’t for
- You need Active Directory or LDAP, through a connector on your network
- Your auditors need SOC 2 or ISO 27001 reports from your vendor
- You need a service-level agreement or a dedicated private deployment
Side by side.
Every Auth0 cell links to the page it came from. If we couldn’t find a fact on Auth0’s own pages, the row isn’t here. IdRa’s side comes from reading its code.
| Capability | Auth0 | IdRa | IdRa today |
|---|---|---|---|
| Cost | |||
| Published price | Free up to 25,000 monthly active users. Essentials from $35 and Professional from $240 a month, each listed up to 500 active users. Enterprise by contact. Auth0 pricing | Included | Free. No tiers and no per-user charges. |
| Enterprise connections, self-service SSO, SCIM | Free includes 1 enterprise connection, self-service SSO and SCIM. Essentials says to upgrade to B2B to keep using them. Auth0 pricing | Included | All included. SAML and OIDC apps have no count. |
| Sign-on | |||
| SAML | Can serve as the identity provider, the service provider or both. Supported options include Single Logout. SAML docs | Partial | As an identity provider, SP- and IdP-initiated, tested with SimpleSAMLphp. Accepts external SAML providers. No Single Logout. |
| OpenID certification | A certified FAPI OpenID Provider for two FAPI 1 Advanced profiles. Compliance docs | Partial | OpenID conformance suite self-run: 26 of 35 modules passed, 0 failed. Not a formal certification. |
| Active Directory and LDAP | Through an AD/LDAP Connector you install on your network. AD/LDAP docs | Not planned | Skipped deliberately. Needs a separate agent. |
| Organizations | Represent business customers and partners. 5 on Free, 10 on Essentials. Organizations docs Auth0 pricing | Included | Each organization has its own Postgres database, address and signing keys. |
| Authentication and threats | |||
| MFA factors | Push, SMS, voice, one-time passwords, WebAuthn, email, Cisco Duo and recovery codes. Some are only on Professional and Enterprise. MFA docs | Included | Ten authenticators, none held back for a plan. Vendor integrations are tested against fakes. |
| Passkeys | For database connections, on the web and in native apps. Passkeys docs | Included | Sign-in and step-up. No AAGUID allow-lists or attestation yet. |
| Attack protection | Brute-force protection, suspicious IP throttling and bot detection. Basic on Free, enhanced on Professional. Attack protection docs Auth0 pricing | Partial | Lockout, rate limits, threat feeds, a password-spray detector, risk rules and global sign-out, all included. No bot detection or cross-customer data. |
| Breached passwords | Blocks passwords that appear in breach lists from third-party sites. Attack protection docs | Included | Checked whenever a password is set, on every organization. |
| SCIM | Inbound, for selected enterprise identity providers. SCIM docs | Partial | Inbound for users, with PATCH and deprovisioning. Outbound create, update, deactivate, reactivate and group push. |
| Extending it | |||
| Custom code at sign-in | Actions: versioned Node.js functions that run at points such as login, registration and password reset. Actions and Forms share a limit: 5 on Free, 30 on Enterprise. Actions docs Auth0 pricing | On the roadmap | No custom code during sign-in. Event hooks run after the fact, and policy rules can use expressions. |
| Streaming logs | To services such as Datadog, Splunk and Sumo Logic, or a custom webhook. 1 stream on Essentials, 2 on Professional, none on Free. Log streams docs Auth0 pricing | Included | To a Splunk HTTP Event Collector or any HTTPS endpoint. |
| Your own domain | 1 on Free with credit card verification. Included on paid plans. Auth0 pricing | Included | Add it under Customizations → Domains and prove ownership with a DNS TXT record. |
| How it’s delivered | |||
| Where it runs | Public Cloud, or Private Cloud: a dedicated managed service on AWS or Azure. Private Cloud docs | Included | Hosted at idra.team. On your own infrastructure once the repository is public. |
| Independent audits | SOC 2 Type 2 and ISO 27001/27017/27018 audits each year. Compliance docs | Not planned | None today, and no external security review. Undecided. |
| Service-level agreement | Listed on Enterprise. Auth0 pricing | Not planned | None. One replica today. |
Auth0’s prices are the B2C plans on its pricing page. Its B2B plans are priced separately and aren’t compared here. Fetched October 30 and 31, 2026. Details change, so check Auth0’s current documentation.
Common questions.
Is Auth0 free?
It has a free plan: Auth0’s pricing page lists up to 25,000 monthly active users, with limits such as 5 organizations and 1 enterprise connection. Paid plans start at $35 a month. IdRa has no plans and no user count.
Can IdRa replace Auth0 for my product’s login?
No. IdRa is for a company’s own people. It isn’t built for sign-up flows for your product’s customers.
Can I use both?
The standards allow it: Auth0 can act as a SAML identity provider, and IdRa accepts external OIDC and SAML providers. We haven’t tested that pairing.
Create your organization.
Pick an address and confirm your email, then sign in as its first admin. A setup wizard takes you through the rest.
