Home / Insights / Operations and security

What does SSO cost beyond the advertised plan price?

Verified 10 October 2026 · SaaS COMPASS · Updated 11 October 2026

Summary

SSO usually comes with a higher product plan. Budget the upgrade from your current contract, identity-provider costs and setup work. For a new HubSpot Sales Hub Professional purchase, one $90 annual-billing Sales Seat plus required $1,500 onboarding gives a $2,580 first-year example. Shopify Plus starts at $2,300 a month on a three-year term, or $2,500 on a one-year term. These products serve different purposes; their prices do not identify the cheapest SSO for your company.

Estimate the increase over your current contract

Start with your current subscription. If SSO is included, enabling it may require configuration without a plan upgrade. If it is unavailable, compare the quoted eligible plan with your existing renewal price using the same users, currency, billing period and usage. A lower plan's published price is a comparison point, not a guaranteed minimum for an Enterprise quote.

Keep three figures separate: the first year's total budget, the increase over staying on the current plan, and the amount due at signature. An annual total does not tell you when an invoice is payable. Ask for the payment schedule and the full contractual commitment.

Which plan includes SSO?

This table locates the feature in five services. It does not rank alternatives to the same business task.

ServiceEligible planPricing and contract points
HubSpotProfessional or Enterprise in the Hubs and Smart CRM listed in its SSO helpSales Hub Professional starts at $90 per Sales Seat/month with annual payment, or $100 with monthly payment and an annual commitment. Required one-time onboarding: $1,500. Confirm the purchased seat types.
ShopifyPlusStandard setups start at $2,300/month on a three-year term or $2,500/month on a one-year term. More complex or higher-volume businesses can have a variable platform fee.
monday.comEnterprise for SAML SSOAsk for a quote for your product and required seats. Google sign-in is available on Pro and Enterprise, but check whether it satisfies your required login policy.
AsanaEnterprise; Enterprise+ also availableContact sales for pricing. The Enterprise plan lists both SAML and user provisioning through SCIM.
SquarespacePremium or EnterpriseConfirm the package price with sales. Its Okta guide describes OpenID Connect and SCIM. This feature excludes other plan levels and Acuity Scheduling Enterprise accounts.

On a small screen, scroll the table horizontally.

Dollar amounts above are published US-dollar examples checked on 10 October 2026. Obtain a quote for your location, taxes and existing contract. The linked official pages define each feature and price.

First-year examples from published prices

For a new Sales Hub Professional purchase with only Sales Seats at the published annual-payment rate, the example is $90 × paid Sales Seats × 12 + $1,500. One seat gives $2,580; five give $6,900. These are subscription-plus-onboarding examples, before tax, IdP and implementation costs. They are not a charge of $90 for every person who uses SSO: HubSpot distinguishes Sales, Core and free View-only Seats, and eligibility is attached to the subscription. Ask which seats each user actually needs.

For Shopify's standard starting price, a three-year term means $27,600 per twelve months and $82,800 over 36 months. The one-year starting price gives $30,000 over twelve months. Neither calculation includes payment processing, apps, tax or your setup work. The $27,600 figure is not a one-year contract offer. If gaining SSO would mean moving to a different product, include the cost of moving the work as well.

Does SSO automatically remove departing users?

SSO connects login to an identity provider, or IdP. SAML and OpenID Connect are protocols used for that connection. MFA adds authentication factors; configure its policy separately rather than assuming that switching on SSO also enables it.

SCIM handles user provisioning and deprovisioning where supported and configured. It is separate from login, and the application's integration determines whether offboarding suspends, removes or changes a user. Ask how sessions, local-login exceptions, data ownership and paid seats behave. Disabling an IdP user does not by itself establish that the SaaS account, existing sessions or billable seat have been removed.

Shopify's Plus help lists SAML enforcement, SCIM and required two-step authentication, with domain verification required. HubSpot allows exceptions to mandatory SSO and recommends retaining an exempt Super Admin for an IdP outage. Include those exceptions in your access review and recovery procedure.

What the quote and rollout need to cover

  • Price: eligible package, billable seat types and minimums, onboarding, IdP licensing, implementation, tax, renewal terms and payment dates.
  • Access: supported IdP and protocol, mandatory SSO, exceptions, MFA policy, contractors and administrators.
  • Offboarding: SCIM scope, session revocation, data reassignment and the separate step that releases a billable seat.
  • Evidence and recovery: audit events, retention and export, an owner for the rollout, outage access and a tested recovery procedure.

There is no universal ten-user threshold for buying SSO. Decide from your access requirements, customer or audit obligations and offboarding workload. While evaluating, keep an account inventory, review permissions, use the available MFA controls and test the departure procedure. Those tasks remain necessary after SSO is installed.

Sources and remaining quote questions

Checked 10 October 2026. This review does not establish your Enterprise package price, existing-contract upgrade charge or IdP licence cost. Get those amounts and the cancellation terms in the written quote before approving the budget.

← Back to the comparison

What changed on this page

  • correction11 October 2026 Article wording — Headings and reader examples
    Repeated question headings and abstract comparison wording → SSO budgeting separates plan upgrades, rollout and moving existing work.
    Wording revised; the recorded factual verification date is retained.
  • editorial basis10 October 2026 SSO cost — Contract term and access scope
    Universal ten-user threshold; Shopify term unspecified; all HubSpot users priced as Sales Seats → Upgrade budget, explicit Shopify terms, seat types and configured offboarding
    Official pages checked 10 October 2026.
  • scope change8 September 2026 Squarespace Premium / Enterprise — what can be said about the price of SSO on Squarespace
    The table stated that the price is not published and that the figure cannot be calculated. → The article now states why the method used for monday.com and Asana — anchor the quote to the published tier immediately below — does not work here: Premium is not on the published plan ladder at all, and it bundles page drafts and the Design Library with SSO.
    Squarespace did not change anything. The three Squarespace facts already in the ledger were rechecked on 8 September 2026 and none of them moved; two new ledger entries were added for the plan ladder and for what Premium bundles.

Every recorded change to this site is in the change log.

HubSpot
Visit→