The European identity company.
Sign-in, SSO and user management for your app and your MCP server. Built and run in Europe by a Finnish company. Your users’ identity data is stored in Finland and is not subject to US jurisdiction. See the proof
Built for coding agents. Point yours at our MCP server and let it run the setup.
- EU-owned, EU-operated, EU-hosted
- Every feature in every plan, and a three-month trial
- OAuth 2.1, OpenID Connect, SAML 2.0 and SCIM 2.0
No credit card required.
Who we hand Jane’s data to
- Authalla OyRuns the sign-inFinland
- Hetzner Online GmbHServers and database, in HelsinkiGermany
- BrevoSends the sign-in emailsFrance
Sign up from your coding agent
Add the snippet to your agent and open the sign-in link it gives you. The first time, we ask for your organization name, and that’s the whole signup. Your tenant is live straight away and ready to configure.
Connect your AI assistant
With the Authalla MCP server, Claude Code, Codex, VS Code or Zed can create your tenant, apps and theme for you.
$ claude mcp add --transport http authalla https://api.authalla.com/mcpA sign-in your users get through, and the tools behind it
Some providers put passkeys or branding removal on a paid tier. With Authalla, all of this is in every plan, and in the trial:
- Sign-up is sign-in — the first time someone arrives they get an email code or a one-click passkey, and there is no separate registration step
- No password to create or remember, so nobody gives up at a complexity rule or a reset email
- A dashboard for configuring tenants, apps and users
- Sign-in charts of successful and failed sign-ins, by tenant, app and sign-in method
- Audit logs of sign-ins, failed sign-ins, admin changes and SCIM provisioning
How Authalla fits into your product
Your app sends users to a sign-in page we host and gets standard OpenID Connect tokens back. Each environment gets its own tenant, with its own users and sign-in address, on whatever domains your product runs.
- Can I use Authalla in development, staging and production?
- Yes. Create a tenant for each environment: Production, Staging and Development. Each has its own users, apps and sign-in address, so test sign-ups never reach your production users. More on Can I use Authalla in development, staging and production?
- Does it work if development runs on a different domain, like acme.dev?
- Yes, exactly as it does on subdomains. The environments' domains don't need to have anything in common, because nothing in the sign-in depends on your app and Authalla sharing a domain or cookies. More on Does it work if development runs on a different domain, like acme.dev?
- Can the sign-in page be on my own domain?
- Yes. Point a subdomain such as
auth.acme.comat Authalla with two DNS records, and Authalla issues and renews its certificate. Custom domains are in every plan. More on Can the sign-in page be on my own domain? - Which languages and frameworks does it work with?
- Any that has an OpenID Connect client library, which is nearly all of them: Node.js, Python, Go, Java, .NET, PHP, Ruby, and mobile apps through their platform's OAuth libraries. Authalla speaks standard OAuth 2.1 and OpenID Connect, with published discovery and keys, so there is no proprietary SDK. More on Which languages and frameworks does it work with?
- Can my business customers sign in through their own identity provider?
- Yes. Add each business customer as an organization and connect its identity provider, such as Microsoft Entra ID, Okta or Google Workspace, over OIDC or SAML. Their staff sign in through it when they type an email address on the customer's domain. More on Can my business customers sign in through their own identity provider?
- How do I try it?
- From your coding agent. Add Authalla's MCP server to Claude Code, Codex, VS Code or Zed, then open the sign-in link it gives you and name your account: that is the whole sign-up. Ask it to add sign-in to your app, and it creates the tenant and the app and writes the code for your stack. More on How do I try it?
Four reasons to pick Authalla
- 100% within the EU
- Every mainstream auth platform is US-owned, so your users’ identity data is within reach of US law whichever region it’s stored in. Authalla is EU-owned, EU-operated and EU-hosted, and has no US parent company. How we prove that
- Sign-in for your MCP server, on every plan
- Your users can connect AI agents such as Claude and ChatGPT to your MCP server. They sign in with Authalla, approve what each agent may do, and can revoke it later. Your server checks one standard access token. Build an MCP server
- Every feature, every plan
- Enterprise SSO, SCIM, white-label, custom domains and audit logs are in every plan, with no per-connection fees. Try the whole product free for three months, then it is €99 or €199 a month. See it priced against six other vendors
- Set up by your agent, supported by the founders
- Connect our MCP server, describe what you want, and your coding agent sets up the tenant, apps, domains and branding. When you need a person, you talk to one of the two of us who built it. Our phone number is at the bottom of this page.
Your brand on the login page, on every plan
Your own domain, your own email sender and your own colours and logo, with no "Powered by" badge. WorkOS charges $99/month for a custom domain and Clerk keeps its branding on the free tier. Authalla includes all of it in every plan.
Plain OAuth and OpenID Connect
Your app talks to Authalla the way it would talk to any OpenID Connect provider. If you have wired up sign-in before, nothing here will surprise you:
- Standards-based
- OAuth 2.1 and OpenID Connect, with published discovery and JWKS
- Hosted sign-in
- we run the sign-up, login and session pages; your app redirects to them and gets tokens back
- Management API
- for tenants, apps and settings, so your setup can live in code
- Passkeys first
- with magic links and email codes as the fallback when a device can't use one
- Social login
- Google, GitHub, Microsoft, Facebook, X and LinkedIn
- Docs your agent can read
- the whole site is also published as one llms-full.txt file, and any OpenID Connect client library works
Everything that is included
All of it, on every plan and during the trial. There is no tier that unlocks a feature.
- Passkeys
- Multi-factor sign-in with a fingerprint, face or PIN, and no password to steal. Why that matters
- Sign-in for your MCP server
- Let your users connect Claude, ChatGPT and other AI agents, and approve what each one can do.
- Enterprise SSO
- Business customers sign in with Entra ID, Okta or any SAML or OIDC provider.
- SCIM provisioning
- Your customers’ IT teams manage their people from their own directory.
- Social logins
- Google, Microsoft, GitHub and more, one click away.
- Sign-in hook
- Add roles, plans or your own data to every sign-in.
- Multi-tenancy by design
- A separate tenant for every customer, with its own domain and look.
- Audit logs
- A record of every sign-in and admin change.
- Full white-labeling
- Your domain, your emails, your brand.
- No “Powered by” badges
- Not even during the trial.
- Standards-based
- OAuth 2.1 and OpenID Connect, so the libraries you already use just work.
- API access on every plan
- The trial included.
- Session control
- See every user’s sessions and sign them out of any device.
- Admin impersonation
- See what a user sees to fix their problem, with every session logged.
- Management API
- Run your tenants and settings as code.
Seven vendors priced for the same scenario
10,000 monthly active users · passkeys · your own domain · no vendor branding · 3 enterprise SSO connections
| Vendor | Per month | How it adds up |
|---|---|---|
| Stytch | $0 | Free up to 10,000 MAU including 5 SSO/SCIM connections. Removing Stytch branding is a $99 one-off.Stytch vs Authalla, in full |
| ZITADEL | $100 | Pro, $100/month for 25,000 daily active users summed over the month — a different metric from MAU, so this is not directly comparable. Overage rates are not published.ZITADEL vs Authalla, in full |
| Authalla | €99 | Growth. Everything above is included, and so is everything else we make. |
| Clerk | $175 | Pro at $25/month for passkeys and branding removal, plus $75/month for each enterprise SSO connection beyond the first.Clerk vs Authalla, in full |
| Hanko | $176 | Pro at $29/month plus $49/month per SAML connection. No SCIM found.Hanko vs Authalla, in full |
| WorkOS | $474 | Authentication is free to 1M users, then $125/month per SSO connection and $99/month for a custom domain.WorkOS vs Authalla, in full |
| Auth0 | $2,100 | B2C paid plans exclude enterprise connections entirely, so this scenario needs the B2B plan: $2,100/month at 10,000 MAU with 3 connections included.Auth0 vs Authalla, in full |
We are not the cheapest, and we are not going to pretend otherwise — in this scenario Stytch is free and ZITADEL comes in under us. What we do claim is this: nothing is gated, there are no per-connection fees, and we do not bill you on a metric we invented. The number on the page is the number.
Price is one line of the argument. Ownership, where your users’ data sits, whether a password exists in the product at all and what each vendor gates behind a fee are on the head-to-head comparisons, one per vendor. How this scenario was built, and what each bill is made of, is in What auth actually costs at 10,000 users.
Each figure is from that vendor’s own public pricing page, checked 20 September 2026, and is our reading of it for this one scenario. Prices and packaging change — follow the links and check. Amounts are shown in each vendor’s own currency and are not converted.
Security shouldn’t be an upsell
Your first enterprise customer asks for SSO. Their security questionnaire asks about SCIM. On Authalla both are already in your plan, so winning the deal doesn’t change your auth bill. You pay for monthly active users, and that’s the whole bill.
Every account starts with a three-month free trial of the whole product, then moves to a plan.
Trial
€0for 3 months
The whole product, no user limit. Then pick a plan.
Email support from the founders — best effort.
Growth
€99/month
Up to 10,000 monthly active users
Direct line to the people who built it — email and phone.
Scale
€199/month
Up to 20,000 monthly active users
Direct line to the people who built it — email and phone.
Enterprise
Custom
Over 20,000 monthly active users
Direct line to the people who built it — email and phone.
- No per-connection fees
- Enterprise SSO and SCIM for every business customer you sign. Your tenth enterprise customer costs what your first did: nothing extra.
- No add-ons
- Your own domain, your own branding, passkeys and the Management API are in the plan from day one, not lines on the invoice.
- One number to forecast
- You pay by monthly active users, a figure your analytics already shows. The number on this page is the number on the invoice.
- The builders on the phone
- Every paid plan gets a direct line, email and phone, to the two founders who built it. No ticket queue in between.
Every product feature is in every plan and in the trial. Support is the only difference between tiers, and all of it runs EU-owned, EU-operated and EU-hosted.
Weighing us against someone specific? The head-to-head comparisons are sourced and dated.
We are Authalla
Between us we have decades of work in authentication, as consultants and as customers of these platforms, on everything from small deployments to business-critical systems with millions of users.
For most people, identity and access management is about the most boring thing they can think of. Fair enough. Sign-in is there so the rest of your product can get on with its job, and when it works, nobody thinks about it at all. That is what we are aiming for.
Henri Kinnunen
Co-Founder
Leevi Kokko
Co-Founder
Ready to ship auth?
Tell us about your stack and we'll help you wire Authalla into your app. Or just drop a line if you want to talk auth.
- Telephone
- +358 40 518 2981 (Leevi)
- Telephone
- +358 50 342 4270 (Henri)
- hello@authalla.com