SSOJet
Capability scores
Methodology →- Authentication
- 4.5
- SSO & Federation
- 4.5
- Authorization
- 3.0
- Lifecycle & Provisioning
- 4.0
- MFA & Passwordless
- 4.0
- Governance & Audit
- 2.5
- Developer Experience
- 3.5
- Deployment Flexibility
- 4.0
- Pricing Transparency
- 4.5
- Support & Ecosystem
- 3.0
Scored 0–5 against a published rubric. Independent analysis, no vendor sponsorship.
Overview
SSOJet is an enterprise-SSO and user-management layer for B2B SaaS, built for the moment a startup closes an enterprise deal requiring SAML and SCIM. It occupies the same space as WorkOS and the B2B side of Frontegg, and states it was founded in 2024 in San Francisco.
Two things define it as a purchase, and they pull in opposite directions: the pricing is unusually well published for this category, and the company record is unusually thin.
What it is good at
Price clarity and a free tier that is actually usable. SAML 2.0, OIDC, OAuth 2.0 and SCIM 2.0 with provisioning, deprovisioning and group sync are supported, with organisation and tenant modelling that fits the B2B shape. Passkeys, magic links, email OTP, social login and MFA are included at no cost with unlimited monthly active users and organisations, so you only pay when an enterprise customer needs a real connection.
The per-connection model at 39.50 dollars annually is legible in a way per-MAU curves are not, and the startup, open-source and nonprofit discounts are published rather than negotiated.
Where it falls short
The public record is the issue, not the product. SSOJet publishes no leadership team, no headcount, no legal entity name and no state of incorporation. It operates no trust center, and its security page returns a 404. SOC 2, ISO 27001 and HIPAA appear only as Enterprise-plan attributes rather than as attestations it holds, and no certificate or audit evidence is published anywhere. For a vendor sold specifically to help you pass enterprise security reviews, that is a substantive procurement consideration, and buyers should ask for documentation directly.
The 100-plus integrations figure counts application setup guides, not identity-provider connectors, and no counted IdP list is published. SDK coverage is JavaScript and TypeScript only, with nine GitHub stars across the whole organisation. No funding, customers, penetration test or disclosure policy is published. It carries no CVEs, but for a company this young that reflects limited research attention rather than demonstrated hardening.
Pricing
Free tier with unlimited users, MAUs and organisations, excluding enterprise SSO and SCIM. Business from 79 dollars monthly billed annually, or 99 monthly. Connections 39.50 dollars each annually, with SSO and SCIM counting separately. Enterprise custom. Compare with our TCO calculator.
Best for, and who should look elsewhere
Choose SSOJet when a JavaScript or TypeScript B2B SaaS team needs enterprise SSO and SCIM quickly, cost predictability matters, and your customers' security reviews will not demand a vendor attestation. Choose WorkOS for an established standalone layer with a published compliance posture, Frontegg or PropelAuth for a fuller B2B feature set, or Scalekit as the closest direct competitor.
Bottom line
A well-priced, focused way for JavaScript B2B teams to ship enterprise SSO fast, held back by a public company record too thin to satisfy the enterprise security reviews it is sold to help you pass.
SSOJet: frequently asked questions
- How much does SSOJet cost?
- SSOJet publishes real prices, which is a genuine strength in this category. The free tier costs nothing, never expires and needs no credit card, covering unlimited users, unlimited monthly active users and unlimited organizations, with passkeys, Google, Microsoft and Slack social login, magic links, email OTP and per-organization RBAC. Enterprise SSO connections and SCIM are explicitly excluded from free. The Business plan starts at 79 dollars per month billed annually, or 99 dollars billed monthly, and adds branded login, just-in-time provisioning, IP and country allowlists, session management, audit logs and 24-hour support response. Enterprise is custom priced with private cloud deployment, unmetered connections, a 99.99 percent SLA, one-hour support response, a dedicated customer success manager and data residency across a claimed 11 regions, which SSOJet does not enumerate.
- What counts as a connection in SSOJet's pricing?
- This is the detail that determines your actual bill. Connections cost 39.50 dollars each on annual billing and scale from 2 to 200 or more. Critically, SSOJet states that SSO and SCIM each count as one connection, so a single enterprise customer who needs both federated login and directory provisioning consumes two connections, not one. Budget on the number of customer connections you expect to light up rather than on customer count. Discounts exist: 50 percent off for twelve months for pre-Series A startups under three years old, 50 percent off for open-source projects, and custom terms for nonprofits. No minimum commitment or free-trial length is stated.
- Who founded SSOJet and who runs it?
- SSOJet does not publish this, which is the most notable thing about the company. There is no leadership page, no executive team listing, no headcount and no named CEO anywhere on ssojet.com. The only founder attribution on its own site is a blog author bio describing Devraj Patel as Founder and Identity Architect, claiming over 15 years in software engineering with expertise in SAML, OIDC, OAuth and SCIM, but giving no prior employers, education or dates. A LinkedIn profile lists Daven Patel at SSOJet. We could not corroborate leadership identity or background through any independent source or corporate registry. For a vendor whose entire value proposition is helping you pass enterprise security reviews, the absence of a named team is a fair thing to raise in your own diligence.
- Is SSOJet SOC 2 or ISO 27001 certified?
- No published attestation exists, and this needs care because SSOJet's pricing page does mention these standards. SOC 2, ISO 27001, HIPAA and BAA appear only as Enterprise-plan attributes, which reads as what a private-cloud deployment can be configured to support rather than as certifications SSOJet itself holds. We found no certificate, no attestation letter, no audit date, no auditor name and no gated request form. There is no trust center: trust.ssojet.com does not resolve, and ssojet.com/security returns a 404. SSOJet has published blog and white-paper content about SOC 2 and ISO 27001 as topics, which is not the same as holding them. Ask for an attestation directly before assuming one exists.
- What is SSOJet's legal entity and where is it incorporated?
- Not disclosed. The terms of service, last updated 12 March 2026, name only SSOJet with no corporate form, no Inc or LLC, and no state of incorporation, while specifying California governing law. The address given is 650 California Street, San Francisco, a large multi-tenant office building, which does not evidence a physical office of any particular size. We located no registry filing. The company page states it was founded in 2024 in San Francisco, with schema markup giving 15 January 2024; some data aggregators say 2025, and we use the primary source. No funding round has been publicly announced, and there is no investor page or press release, which is consistent with a bootstrapped company.
- Does SSOJet really have 100+ integrations?
- Not in the sense most buyers assume. SSOJet's integrations page claims 100 or more, but inspecting the list shows the entries are overwhelmingly service-provider and SaaS applications such as Adobe Sign, BambooHR, Box, Datadog, Dropbox, GitHub Enterprise, Jenkins, Office 365 and PagerDuty. Those are SSO setup guides for applications your customers use, not identity-provider connectors. SSOJet does not publish a discrete, counted list of supported identity providers such as Okta, Entra ID, OneLogin, Ping or JumpCloud on any primary page. A widely cited list of named IdPs comes from a SSOJet blog post about the identity provider landscape generally, which is market commentary rather than a statement of its own connector coverage. Confirm your specific IdPs during evaluation.
- Which languages and frameworks does SSOJet support?
- JavaScript and TypeScript only, which is a real constraint. Published SDKs are @ssojet/server-js, @ssojet/hono and ssojet-auth-js, targeting Node.js, Cloudflare Workers, Deno and Vercel, with an Express quickstart in the docs. There is no Python, Go, Java, Ruby, PHP or .NET SDK; an ASP.NET integration guide exists but is not an SDK. The public GitHub organisation carries ten repositories with nine stars in total across all of them, which is a fair proxy for how young the developer ecosystem is. If your backend is not JavaScript, this is the first thing to check.
- What are the best SSOJet alternatives?
- WorkOS is the most established standalone enterprise-readiness layer and the most direct comparison. Frontegg and PropelAuth cover B2B login with a fuller surrounding feature set. Scalekit competes directly on the same SSO-and-SCIM-as-a-service premise. Stytch and Descope suit teams wanting broader authentication alongside B2B federation, and Auth0 Organizations is the option if you are already on Auth0. SSOJet's argument against all of them is price transparency and a free tier with unlimited MAUs; their argument against SSOJet is published attestations, named teams, funding records and multi-language SDKs.
SSOJet comparisons
More CIAM Platform vendors
All CIAM Platform →Related on Start with Identity
- VendorAkamai Identity Cloud
niche
- VendorAmazon Cognito
strong
- VendorAuth0
top_tier
- Comparisonauth0-vs-ssojet
Auth0 is a full customer identity platform. SSOJet is a narrow enterprise-SSO and SCIM layer for B2B SaaS. Scope and track record decide this one, not features.
- Comparisondescope-vs-ssojet
Descope designs passkey-first login flows visually. SSOJet ships the SAML and SCIM plumbing enterprise buyers ask for. Different halves of identity, at differen
- Comparisonfrontegg-vs-ssojet
Frontegg is a full B2B identity platform with tenants, roles, and self-serve admin. SSOJet is the SSO and SCIM slice alone. Decide how much of the stack you wan
By SWI Community Team · Last evaluated 2026-09-20
Independent, community-driven analysis. No vendor sponsorship. Compiled from public research and community input and verified on a best-effort basis, so details may be incomplete or out of date. Scores are opinions, not advice. Trademarks belong to their owners; mention does not imply affiliation or endorsement. See the full disclaimer, or send corrections to community@startwithidentity.com.