Per the pricing page the Free Tier supports 1 Enterprise Connection?
I have an application that uses a different Identity platform to log in users on my app, but the users then can do Federated SAML2 SSO login to other applications via Auth0. My app on the Auth0 side will use these features:
Authentication/Enterprise - OpenID Connect; to connect to my first auth provider for users
3 Applications to other apps to SSO into
1 Organization for my users
Actions/Library and Triggers - to add custom attributes to the SAML2 response/request
I will have under way under the 25,000 external users so I don’t expect limits on that quota will be an issue.
My question is, with these listed features and usage, do I still fall under the Free Tier?
Are there any other considerations I might be missing not listed on the pricing page as well?
I understand that you are interested if the features and limits of the Free Plan covers the architecture you are looking to implement.
Taking into account the usage you are expecting from your implementation, your requirements align with the current constraints of the Free plan, though you are operating at the limits for a few features.
Recommended solution
Feature Breakdown on the Free Tier
1 Enterprise Connection (OIDC): The Free tier provides exactly 1 Enterprise Connection (which covers OIDC, SAML, or directory integrations).
3 Applications: The Free plan allows you to easily configure 3 applications for SSO.
1 Organization: You are well under the limit. The Free plan currently caps Organizations at 5.
Actions and Triggers: Modifying SAML requests/responses via Actions is supported.
25,000 MAU: The Free tier supports up to 25,000 Monthly Active Users (MAUs).
Considerations & Pitfalls
While your current architecture is supported for free, there are a few strict platform boundaries you should be aware of before launching into production:
Action Limitations: The Free tier strictly limits you to 5 Actions + Forms. If you need multiple triggers to append custom SAML attributes, you will need to consolidate your code into a single Action.
Custom Domain Requires a Credit Card: You get one custom domain included for free, but Auth0 requires you to enter a valid credit card under your billing settings just to verify DNS/TLS.
No Role-Based Access Control (RBAC): The Free plan does not include RBAC. If you plan to manage user roles and permissions directly within Auth0 for your 3 downstream applications, you will need to upgrade.
Organization Limits Span Environments: The 5-Organization limit applies across your entire tenant. If you create test Organizations in your Dev or Staging environments, they count against your production limit.
Please reach out to us for any other issue or requests, we will gladly look into it for you!