Free and Developers have unlimited MAUs, two applications, two admins and one-day logs. Business includes 25,000 MAUs, five applications, five admins and 60-day logs; excess MAUs are charged in the next billing cycle. Enterprise has custom capacity, 180-day logs, regional private cloud, tailored SLA and account management. Paid plans add metered messages and extra resources. Hosted monthly billing is charged on the first of the month with immediate proration when subscribing mid-month; taxes are additional. Enterprise quotes govern payment and deployment terms. Self-hosted Apache-2.0 software is free, with infrastructure and optional support costs borne separately. Confirm whether the advertised SaaS refund is a cash payment or service credit.
Apache-2.0 self-hosted Authgear: Run Authgear software on your own infrastructure with feature parity to cloud. The software license is free; infrastructure and optional support are separate.
Direct PAYG totals depend on monthly active users, enterprise connections and M2M tokens. The base allowance includes 7,500 MAU and five SSO/SCIM connections. Enterprise adds advanced authorization, security, deployment and support capabilities through a custom quote. AWS Marketplace offers separate 12-month Starter and Growth capacity contracts, priced in USD. Direct fees exclude taxes; usage beyond agreed limits can incur extra charges. Payment schedules and applicable renewal conditions depend on the online subscription or executed Order.
Frontegg on AWS Marketplace: Vendor-owned Frontegg procurement through AWS Marketplace with Starter and Growth contract dimensions. These capacity contracts are separate from the direct PAYG and Enterprise offer states.
Enterprise applications needing granular authorization and private deployment options
Not for
Shared-cloud deployments requiring EU data residency today
Free or Developers deployments requiring branding removal or own message/email gateways
Life-support or clinical-decision systems using ordinary hosted terms
Teams requiring consent management or custom roles within PAYG
Applications requiring multiple environments within PAYG
Source check
89/100
89/100
Key features
Passwordless, passkey, social and enterprise authentication
Adaptive MFA, SAML SSO and RBAC roles/groups on every hosted plan
Custom domains, login experience and native mobile/web SDKs
OIDC single identity across applications and user/password-hash export
Business/Enterprise branding removal and custom message/email gateways
Customizable hosted login with password, passwordless, social and passkey authentication
SSO/SCIM enterprise connections and MFA
Embedded customer admin portal, tenant management and user groups
M2M credentials and tokens with restriction policies
Enterprise custom roles, permissions, ReBAC and tenant-specific security policies
Cons
Messages and extra resources increase the total subscription cost
Enterprise contract and deployment scope require a tailored quote
The SaaS money-back guarantee needs cash-versus-credit confirmation
Enterprise needs a tailored quote and add-on scope confirmation
Usage above agreed allowances may incur extra charges
Direct subscriptions carry renewal notice and conditional refund terms
Category buying score
82Higher category-fit score
79
Rank
#5
#6
Context
Security & Privacy / Customer Identity and Access Management Software
Security & Privacy / Customer Identity and Access Management Software
Customer authentication experience
83Hosted login supports passwordless, passkey, social and enterprise authentication, while SAML SSO and adaptive MFA are listed across hosted plans; the Free plan's shared SMS/WhatsApp OTP allowance is a separate delivery boundary to check for message-based journeys.
84Customizable hosted login and listed password, passwordless, social and passkey methods support common customer access journeys, with SSO/SCIM and MFA also listed; the buyer should verify the exact required configuration and contract scope.
Customer auth policy security
85Adaptive MFA, passkeys, SAML SSO and RBAC are listed across hosted plans, with tenant-specific security controls described in the product facts; buyers should confirm the exact Enterprise-only security and deployment scope in a quote.
77MFA and restrictions for machine-to-machine tokens are listed, while advanced security capabilities are part of Enterprise; teams should confirm which controls their direct plan includes before designing access policies.
Customer profile and identity control
84Tenant administration, RBAC, user groups, OIDC identity across applications and user/password-hash export support customer identity control; Free and Developers remain limited in application and admin counts, while Enterprise adds private deployment options.
84Tenant and user management, groups and an embedded customer admin portal support account administration, while custom roles, ReBAC and tenant hierarchies are Enterprise capabilities that require matching the quote to the intended control model.
Consent and privacy readiness
73The product supports consent screens and Enterprise consent management, but consent management is not included in the Free PAYG scope; EU residency on shared Authgear Cloud is not currently available, so buyers with that requirement need self-hosting or Enterprise private deployment.
68Consent management is listed for Enterprise rather than Pay as you go, making the quote boundary material for applications that must capture customer consent; the supplied facts do not establish wider regulatory coverage.
Scale and developer fit
79Native web and mobile SDKs, self-hosting and unlimited MAUs on Free and Developers support different implementation approaches, while Free and Developers limit apps, admins and log retention; Business raises those limits and Enterprise provides custom regional deployment.
78The Pay as you go offer includes 7,500 monthly active users, five enterprise connections and one environment before usage or plan changes, while Enterprise offers unlimited environments; buyers should forecast connection and identity usage against the chosen contract.
These are the stored dimension rationales returned with each score. They explain the buyer conditions behind the gap without speculating about hidden model reasoning.
Customer auth policy security
8 pts
Authgear · 85/100
Adaptive MFA, passkeys, SAML SSO and RBAC are listed across hosted plans, with tenant-specific security controls described in the product facts; buyers should confirm the exact Enterprise-only security and deployment scope in a quote.
Frontegg · 77/100
MFA and restrictions for machine-to-machine tokens are listed, while advanced security capabilities are part of Enterprise; teams should confirm which controls their direct plan includes before designing access policies.
Consent and privacy readiness
5 pts
Authgear · 73/100
The product supports consent screens and Enterprise consent management, but consent management is not included in the Free PAYG scope; EU residency on shared Authgear Cloud is not currently available, so buyers with that requirement need self-hosting or Enterprise private deployment.
Frontegg · 68/100
Consent management is listed for Enterprise rather than Pay as you go, making the quote boundary material for applications that must capture customer consent; the supplied facts do not establish wider regulatory coverage.
Customer authentication experience
1 pts
Authgear · 83/100
Hosted login supports passwordless, passkey, social and enterprise authentication, while SAML SSO and adaptive MFA are listed across hosted plans; the Free plan's shared SMS/WhatsApp OTP allowance is a separate delivery boundary to check for message-based journeys.
Frontegg · 84/100
Customizable hosted login and listed password, passwordless, social and passkey methods support common customer access journeys, with SSO/SCIM and MFA also listed; the buyer should verify the exact required configuration and contract scope.
Research basis
Research basis
This page uses stored product facts, official evidence, and category scoring rationales. It is not an account-based hands-on test, and third-party user ratings are not folded into the category buying score.
Authgear
Fact confidence: 89% · Fact checked: 2026-10-06
Frontegg
Fact confidence: 89% · Fact checked: 2026-10-06
More tools
Customer Identity and Access Management Software
Add more tools from the same subcategory to this comparison. The page keeps up to 6 tools.
Amazon Cognito is AWS's customer identity and access management service for user registration, authentication, federation, user pools, branded sign-in, and application access control.
Microsoft Entra External ID is Microsoft's CIAM product for customer and external identity registration, authentication, authorization, access, and application sign-in experiences.
SAP Customer Identity and Access Management is SAP's cloud CIAM product for customer identity, authentication, adaptive access, profile data, consent, and privacy management.
Authgear is an authentication and identity product for customer, extended-workforce, and B2B application identities, with login, MFA, SSO, roles, profiles, and identity flows.
Frontegg is a customer identity platform for B2B and B2C authentication, user and tenant management, enterprise connections, authorization, and embedded identity experiences.
FusionAuth is an authentication and user management product for customer-facing applications, providing registration, login, SSO, MFA, identity storage, and authorization.
78
More comparisons
More same-subcategory comparisons for Authgear
Compare the first tool against top-ranked and nearby tools in the same subcategory.