Free and Developers have unlimited MAUs, two applications, two admins and one-day logs. Business includes 25,000 MAUs, five applications, five admins and 60-day logs; excess MAUs are charged in the next billing cycle. Enterprise has custom capacity, 180-day logs, regional private cloud, tailored SLA and account management. Paid plans add metered messages and extra resources. Hosted monthly billing is charged on the first of the month with immediate proration when subscribing mid-month; taxes are additional. Enterprise quotes govern payment and deployment terms. Self-hosted Apache-2.0 software is free, with infrastructure and optional support costs borne separately. Confirm whether the advertised SaaS refund is a cash payment or service credit.
Apache-2.0 self-hosted Authgear: Run Authgear software on your own infrastructure with feature parity to cloud. The software license is free; infrastructure and optional support are separate.
SAP Customer Identity and Access Management for B2C Core
$329.00 USD · per 10000 Active User per month · per month
B2C Core is the base consumer offering. Enhanced security and advanced consent are separately charged options requiring Core. B2B contacts is an add-on priced in contact blocks. Production offers have a 3–60 month contract range and auto-renewal; invoice payment is supported. Monthly rates do not establish invoice frequency or a selected minimum term. SAP BTP Pay-As-You-Go and Enterprise Agreement are alternative licensing routes. The two customer-experience packages are separate quote-based bundles.
Pay-As-You-Go for SAP BTP: Alternative licensing route for the CIAM service; confirm service-plan metrics and agreement-specific rates.
SAP BTP Enterprise Agreement: Alternative licensing route for the CIAM service; confirm service-plan metrics and agreement-specific rates.
SAP Sales Execution: Broader B2B customer-experience package including CIAM, Sales Cloud, Engagement Cloud, B2B Self-Service Portal and Customer Data Platform. Quote-based purchase with a 3–36 month contract range and auto-renewal.
SAP Digital Selling and Engagement: Broader consumer package including CIAM for high-volume consumer logins alongside commerce, engagement, loyalty and service products. Quote-based purchase with a 3–36 month contract range and auto-renewal.
Customer-facing and B2B apps needing SSO, passkeys and MFA without a paid feature tier
Small deployments needing unlimited active users with two apps and admins
Organizations requiring private-cloud regional deployment or open-source self-hosting
Customer identity teams managing consumer registration and login
Privacy teams purchasing advanced consent and preference controls
Organizations coordinating customer identity across regions and digital channels
Not for
Shared-cloud deployments requiring EU data residency today
Free or Developers deployments requiring branding removal or own message/email gateways
Life-support or clinical-decision systems using ordinary hosted terms
Buyers requiring unlimited consent policies within B2C Core alone
Source check
89/100
87/100
Key features
Passwordless, passkey, social and enterprise authentication
Adaptive MFA, SAML SSO and RBAC roles/groups on every hosted plan
Custom domains, login experience and native mobile/web SDKs
OIDC single identity across applications and user/password-hash export
Business/Enterprise branding removal and custom message/email gateways
Consumer registration, login, password management and ID verification
Passwordless authentication and federated identity standards
Optional AI/ML account protection and adaptive MFA
Basic consent capture with optional advanced preferences and audit vault
Regional storage selection and site-group single sign-on
Cons
Messages and extra resources increase the total subscription cost
Enterprise contract and deployment scope require a tailored quote
The SaaS money-back guarantee needs cash-versus-credit confirmation
Enhanced security and advanced consent add charges to B2C Core.
Contract choices and auto-renewal require renewal and cancellation terms to be confirmed.
Broader customer-experience bundles require quotes and use package-specific metrics.
Category buying score
82
83Higher category-fit score
Rank
#5
#4
Context
Security & Privacy / Customer Identity and Access Management Software
Security & Privacy / Customer Identity and Access Management Software
Customer authentication experience
83Hosted login supports passwordless, passkey, social and enterprise authentication, while SAML SSO and adaptive MFA are listed across hosted plans; the Free plan's shared SMS/WhatsApp OTP allowance is a separate delivery boundary to check for message-based journeys.
87Registration, login, password management, ID verification, passkeys, phone login, magic links, and one-time passwords cover the stated customer access workflows across web, mobile, and kiosks; buyers should validate the flow against their own channel and recovery requirements.
Customer auth policy security
85Adaptive MFA, passkeys, SAML SSO and RBAC are listed across hosted plans, with tenant-specific security controls described in the product facts; buyers should confirm the exact Enterprise-only security and deployment scope in a quote.
85Risk-based authentication can trigger adaptive multi-factor checks for suspicious activity, and the enhanced-security option adds AI/ML protection and a dashboard; buyers needing those additions must include the separately priced option in their offer.
Customer profile and identity control
84Tenant administration, RBAC, user groups, OIDC identity across applications and user/password-hash export support customer identity control; Free and Developers remain limited in application and admin counts, while Enterprise adds private deployment options.
82Self-service profile management, preference controls, and delegated administration support customer data updates, while the supplied facts do not establish account-linking or identity-data-quality controls; buyers should verify those needs in their target implementation.
Consent and privacy readiness
73The product supports consent screens and Enterprise consent management, but consent management is not included in the Free PAYG scope; EU residency on shared Authgear Cloud is not currently available, so buyers with that requirement need self-hosting or Enterprise private deployment.
76B2C Core captures consent for one terms-of-service document and one privacy policy, while unlimited policies, preference management, and a seven-year audit vault require the separate consent option; buyers with broader consent operations should confirm its scope and price.
Scale and developer fit
79Native web and mobile SDKs, self-hosting and unlimited MAUs on Free and Developers support different implementation approaches, while Free and Developers limit apps, admins and log retention; Business raises those limits and Enterprise provides custom regional deployment.
82REST APIs, webhooks, regional storage selection, site-group single sign-on, and described bidirectional integrations support implementation across the stated systems; buyers should validate performance and synchronization behavior on their own workload because those operating measures are not established here.
These are the stored dimension rationales returned with each score. They explain the buyer conditions behind the gap without speculating about hidden model reasoning.
Customer authentication experience
4 pts
Authgear · 83/100
Hosted login supports passwordless, passkey, social and enterprise authentication, while SAML SSO and adaptive MFA are listed across hosted plans; the Free plan's shared SMS/WhatsApp OTP allowance is a separate delivery boundary to check for message-based journeys.
SAP Customer Identity and Access Management · 87/100
Registration, login, password management, ID verification, passkeys, phone login, magic links, and one-time passwords cover the stated customer access workflows across web, mobile, and kiosks; buyers should validate the flow against their own channel and recovery requirements.
Consent and privacy readiness
3 pts
Authgear · 73/100
The product supports consent screens and Enterprise consent management, but consent management is not included in the Free PAYG scope; EU residency on shared Authgear Cloud is not currently available, so buyers with that requirement need self-hosting or Enterprise private deployment.
SAP Customer Identity and Access Management · 76/100
B2C Core captures consent for one terms-of-service document and one privacy policy, while unlimited policies, preference management, and a seven-year audit vault require the separate consent option; buyers with broader consent operations should confirm its scope and price.
Scale and developer fit
3 pts
Authgear · 79/100
Native web and mobile SDKs, self-hosting and unlimited MAUs on Free and Developers support different implementation approaches, while Free and Developers limit apps, admins and log retention; Business raises those limits and Enterprise provides custom regional deployment.
SAP Customer Identity and Access Management · 82/100
REST APIs, webhooks, regional storage selection, site-group single sign-on, and described bidirectional integrations support implementation across the stated systems; buyers should validate performance and synchronization behavior on their own workload because those operating measures are not established here.
Research basis
Research basis
This page uses stored product facts, official evidence, and category scoring rationales. It is not an account-based hands-on test, and third-party user ratings are not folded into the category buying score.
Authgear
Fact confidence: 89% · Fact checked: 2026-10-06
SAP Customer Identity and Access Management
Fact confidence: 87% · Fact checked: 2026-10-06
More tools
Customer Identity and Access Management Software
Add more tools from the same subcategory to this comparison. The page keeps up to 6 tools.
Amazon Cognito is AWS's customer identity and access management service for user registration, authentication, federation, user pools, branded sign-in, and application access control.
Microsoft Entra External ID is Microsoft's CIAM product for customer and external identity registration, authentication, authorization, access, and application sign-in experiences.
SAP Customer Identity and Access Management is SAP's cloud CIAM product for customer identity, authentication, adaptive access, profile data, consent, and privacy management.
Authgear is an authentication and identity product for customer, extended-workforce, and B2B application identities, with login, MFA, SSO, roles, profiles, and identity flows.
Frontegg is a customer identity platform for B2B and B2C authentication, user and tenant management, enterprise connections, authorization, and embedded identity experiences.
FusionAuth is an authentication and user management product for customer-facing applications, providing registration, login, SSO, MFA, identity storage, and authorization.
78
More comparisons
More same-subcategory comparisons for Authgear
Compare the first tool against top-ranked and nearby tools in the same subcategory.