Home / Insights / Operations and security
What does SSO cost beyond the advertised plan price?
Summary
SSO usually comes with a higher product plan. Budget the upgrade from your current contract, identity-provider costs and setup work. For a new HubSpot Sales Hub Professional purchase, one $90 annual-billing Sales Seat plus required $1,500 onboarding gives a $2,580 first-year example. Shopify Plus starts at $2,300 a month on a three-year term, or $2,500 on a one-year term. These products serve different purposes; their prices do not identify the cheapest SSO for your company.
Estimate the increase over your current contract
Start with your current subscription. If SSO is included, enabling it may require configuration without a plan upgrade. If it is unavailable, compare the quoted eligible plan with your existing renewal price using the same users, currency, billing period and usage. A lower plan's published price is a comparison point, not a guaranteed minimum for an Enterprise quote.
Keep three figures separate: the first year's total budget, the increase over staying on the current plan, and the amount due at signature. An annual total does not tell you when an invoice is payable. Ask for the payment schedule and the full contractual commitment.
Which plan includes SSO?
This table locates the feature in five services. It does not rank alternatives to the same business task.
| Service | Eligible plan | Pricing and contract points |
|---|---|---|
| HubSpot | Professional or Enterprise in the Hubs and Smart CRM listed in its SSO help | Sales Hub Professional starts at $90 per Sales Seat/month with annual payment, or $100 with monthly payment and an annual commitment. Required one-time onboarding: $1,500. Confirm the purchased seat types. |
| Shopify | Plus | Standard setups start at $2,300/month on a three-year term or $2,500/month on a one-year term. More complex or higher-volume businesses can have a variable platform fee. |
| monday.com | Enterprise for SAML SSO | Ask for a quote for your product and required seats. Google sign-in is available on Pro and Enterprise, but check whether it satisfies your required login policy. |
| Asana | Enterprise; Enterprise+ also available | Contact sales for pricing. The Enterprise plan lists both SAML and user provisioning through SCIM. |
| Squarespace | Premium or Enterprise | Confirm the package price with sales. Its Okta guide describes OpenID Connect and SCIM. This feature excludes other plan levels and Acuity Scheduling Enterprise accounts. |
On a small screen, scroll the table horizontally.
Dollar amounts above are published US-dollar examples checked on 10 October 2026. Obtain a quote for your location, taxes and existing contract. The linked official pages define each feature and price.
First-year examples from published prices
For a new Sales Hub Professional purchase with only Sales Seats at the published annual-payment rate, the example is $90 × paid Sales Seats × 12 + $1,500. One seat gives $2,580; five give $6,900. These are subscription-plus-onboarding examples, before tax, IdP and implementation costs. They are not a charge of $90 for every person who uses SSO: HubSpot distinguishes Sales, Core and free View-only Seats, and eligibility is attached to the subscription. Ask which seats each user actually needs.
For Shopify's standard starting price, a three-year term means $27,600 per twelve months and $82,800 over 36 months. The one-year starting price gives $30,000 over twelve months. Neither calculation includes payment processing, apps, tax or your setup work. The $27,600 figure is not a one-year contract offer. If gaining SSO would mean moving to a different product, include the cost of moving the work as well.
Does SSO automatically remove departing users?
SSO connects login to an identity provider, or IdP. SAML and OpenID Connect are protocols used for that connection. MFA adds authentication factors; configure its policy separately rather than assuming that switching on SSO also enables it.
SCIM handles user provisioning and deprovisioning where supported and configured. It is separate from login, and the application's integration determines whether offboarding suspends, removes or changes a user. Ask how sessions, local-login exceptions, data ownership and paid seats behave. Disabling an IdP user does not by itself establish that the SaaS account, existing sessions or billable seat have been removed.
Shopify's Plus help lists SAML enforcement, SCIM and required two-step authentication, with domain verification required. HubSpot allows exceptions to mandatory SSO and recommends retaining an exempt Super Admin for an IdP outage. Include those exceptions in your access review and recovery procedure.
What the quote and rollout need to cover
- Price: eligible package, billable seat types and minimums, onboarding, IdP licensing, implementation, tax, renewal terms and payment dates.
- Access: supported IdP and protocol, mandatory SSO, exceptions, MFA policy, contractors and administrators.
- Offboarding: SCIM scope, session revocation, data reassignment and the separate step that releases a billable seat.
- Evidence and recovery: audit events, retention and export, an owner for the rollout, outage access and a tested recovery procedure.
There is no universal ten-user threshold for buying SSO. Decide from your access requirements, customer or audit obligations and offboarding workload. While evaluating, keep an account inventory, review permissions, use the available MFA controls and test the departure procedure. Those tasks remain necessary after SSO is installed.
Sources and remaining quote questions
- HubSpot SSO eligibility, enforcement and recovery exception; Sales Hub prices and onboarding; seat definitions.
- Shopify Plus price and contract term; Plus security features.
- monday.com SAML plan and Google sign-in conditions.
- Asana Enterprise SAML, SCIM and quote pricing.
- Squarespace Premium/Enterprise Okta SSO and exclusions.
Checked 10 October 2026. This review does not establish your Enterprise package price, existing-contract upgrade charge or IdP licence cost. Get those amounts and the cancellation terms in the written quote before approving the budget.
What changed on this page
- correction11 October 2026 Article wording — Headings and reader examples
Repeated question headings and abstract comparison wording → SSO budgeting separates plan upgrades, rollout and moving existing work.
Wording revised; the recorded factual verification date is retained. - editorial basis10 October 2026 SSO cost — Contract term and access scope
Universal ten-user threshold; Shopify term unspecified; all HubSpot users priced as Sales Seats → Upgrade budget, explicit Shopify terms, seat types and configured offboarding
Official pages checked 10 October 2026. - scope change8 September 2026 Squarespace Premium / Enterprise — what can be said about the price of SSO on Squarespace
The table stated that the price is not published and that the figure cannot be calculated. → The article now states why the method used for monday.com and Asana — anchor the quote to the published tier immediately below — does not work here: Premium is not on the published plan ladder at all, and it bundles page drafts and the Design Library with SSO.
Squarespace did not change anything. The three Squarespace facts already in the ledger were rechecked on 8 September 2026 and none of them moved; two new ledger entries were added for the plan ladder and for what Premium bundles.
Every recorded change to this site is in the change log.
More in Operations and security
All of operations and security →Can you retrieve all your data after canceling a SaaS subscription?
Finish and check exports before access ends. Retention, reactivation and retrieval-request deadlines are different.
Read → Operations and securityWill your automation run count be enough?
Count notifications, mapped fields and busy days; check what carries into the next quota.
Read → Operations and securityWhich support channels can you use, and is Japanese supported?
Check the channel, plan and language separately; 24/7 availability does not promise a resolution time.
Read →