Identity and SSO · cost comparison
Okta Workforce Identity vs self-hosted authentik: what each actually costs
Okta Workforce Identity on the Starter tier against authentik running on the smallest server that fits it. Every figure below is computed from the sizing model and the dated prices at the foot of this page, and includes the part most comparisons leave out: your own time.
At 10 people this one is close enough to go either way. The server costs $8.04 a month against $125 for Okta Workforce Identity, but add 1.5 hours a month of your attention and self-hosting lands at $121 and loses. It only wins if your time is genuinely free.
- Okta Workforce Identity
- $125per month, Starter
- Self-hosted
- $121server, backups and your time
- Server and backups
- $8.04CX23 (cost-optimized), 4 GB RAM
- 36-month difference
- $289 extra to self-host
- Break-even
- 8.4 yearsafter $450 of setup time
The same comparison at every team size
Self-hosting has a floor and almost no slope, while per-seat software has no floor and a steep slope. That is the whole story, and it is why the answer flips somewhere in this table rather than being the same for everyone.
| Team size | Okta Workforce Identity | Self-hosted | Without valuing your time | Server needed | 36-month difference |
|---|---|---|---|---|---|
| solo | $125 | $121 | $8.04 | CX23 (cost-optimized) (4 GB) | -$289 |
| 5 people | $125 | $121 | $8.04 | CX23 (cost-optimized) (4 GB) | -$289 |
| 10 people | $125 | $121 | $8.04 | CX23 (cost-optimized) (4 GB) | -$289 |
| 25 people | $150 | $121 | $8.04 | CX23 (cost-optimized) (4 GB) | +$611 |
| 50 people | $300 | $121 | $8.04 | CX23 (cost-optimized) (4 GB) | +$6,011 |
| 100 people | $600 | $121 | $8.04 | CX23 (cost-optimized) (4 GB) | +$16,811 |
| 250 people | $1,500 | $121 | $8.04 | CX23 (cost-optimized) (4 GB) | +$49,211 |
The balance tips in favour of self-hosting at around 25 people.
Where the self-hosted money actually goes at 10 people
| Line item | Per month | What it is |
|---|---|---|
| Server | $6.70 | CX23 (cost-optimized) at Hetzner Cloud: 2 vCPU, 4 GB RAM, 40 GB disk |
| Backups | $1.34 | Provider snapshots at 20% of the server price. Skipping this is not a saving, it is a bet. |
| Your time | $112 | 1.5 hours a month of updates, upgrades and the occasional broken thing, at $75 an hour |
| Total | $121 | Plus $450 once, for roughly 6 hours of first-time setup |
Okta Workforce Identity at this size costs $125 a month. 10 seats at $6.00 each, raised to $125 a month because Okta Workforce Identity requires a minimum contract of that value. This is the annually-billed rate, which is what the vendor's page displayed; paying monthly costs more.
What authentik needs to run at 10 people
Server plus worker, PostgreSQL and Redis. Friendlier than Keycloak for proxy-style protection of apps that have no native SSO support.
| Resource | Required | How it is derived |
|---|---|---|
| Memory | 2.5 GB | 2 GB for the stack at rest, plus 3 MB per active user, plus 25% headroom |
| Disk | 10.1 GB | 10 GB base, plus 0.01 GB per user |
| vCPU | 2 | The project's own baseline. For this workload memory runs out before the processor does. |
What you give up, stated plainly
- Uptime is now yours. Okta Workforce Identity has an operations team on call. Self-hosted, a failed upgrade at 18:00 on a Friday is your evening.
- Backups only exist if you test restoring them. The $1.34 line above buys snapshots, not a rehearsed recovery.
- authentik is a multi-container stack with a database you have to back up yourself. That is why the maintenance line is 1.5 hours a month rather than zero.
- Feature parity is never exact. authentik covers the core of what teams use Okta Workforce Identity for; the long tail of integrations and enterprise controls is where the gap shows.
We are not going to tell you to self-host this
At 10 people, Okta Workforce Identity wins on cost once your time is priced at $75 an hour. Self-hosting authentik here only makes sense for reasons that are not on the invoice: data residency, avoiding a vendor, or wanting to run the thing yourself. Those are real reasons. Saving money is not one of them at this size.
Where to put authentik
2.5 GB of memory and 10.1 GB of disk is what this needs at 10 people. The cheapest plan that fits, among the providers whose prices we have read ourselves, is the CX23 (cost-optimized) at Hetzner Cloud for $6.70 a month.
Go to Hetzner Cloud Compare hosts
We are not claiming this is the cheapest server on the internet. It is the cheapest one we can honestly quote. Vultr and PikaPods publish prices we could not read programmatically, and may well undercut it. Price them yourself before you commit.
authentik at a glance
| Licence | Other not a standard open-source licence |
|---|---|
| Written in | Python |
| GitHub stars | 25,446, checked 2026-09-12 |
| Latest release | version/2026.8.2 |
| Last commit | 2026-09-12 |
| Ships Docker images | Yes |
| Project | goauthentik.io · goauthentik/authentik |
Get the migration checklist for this tool
A one-page pre-flight list: data export path, sizing, backup plan, and the rollback step most people skip.
Questions people actually ask
How much does Okta Workforce Identity cost?
Okta Workforce Identity Starter costs $125 a month at 10 people: USD 6.00 per seat per month, with a minimum of USD 125.00 per month. That figure was read from the vendor's own pricing page on 2026-09-14.
What does it cost to self-host authentik?
$121 a month at 10 people: $6.70 for the CX23 (cost-optimized) at Hetzner Cloud, $1.34 of backups, and $112 for the 1.5 hours a month it takes to look after.
Is authentik cheaper than Okta Workforce Identity?
Not at 10 people, where self-hosting costs $289 more over three years, but it becomes cheaper from 25 people upwards.
What server does authentik need?
At 10 people, 2.5 GB of memory and 10.1 GB of disk. The cheapest plan that fits, among the providers whose prices we have read, is the CX23 (cost-optimized) at Hetzner Cloud for $6.70 a month.
How much work is authentik to run?
It is rated medium: about 6 hours to set up and 1.5 hours a month afterwards, priced at $75.00 an hour in the figures above.
Every figure on this page, and where it came from
| Input | Value used | Source | Read on |
|---|---|---|---|
| Okta Workforce Identity Starter | USD 6.00 per seat per month, with a minimum of USD 125.00 per month | vendor pricing page | 2026-09-14 |
| Hetzner Cloud CX23 (cost-optimized) | $6.70 per month | provider pricing page | 2026-10-25 |
| Engineer time | $75 per hour | our published assumption | — |
| authentik sizing | 2 GB base, 3 MB per user | project documentation | — |
Prices move. If the vendor has changed theirs since 2026-09-14, the figures above are stale and the source links are the authority, not us. How we handle that.