Amazon Cognito
AWS user pools with Lite, Essentials and Plus tiers billed per MAU. 10,000 MAU free; SAML/OIDC users cost $0.015/MAU.
Cognito keeps auth on your AWS bill. Lite and Essentials include 10,000 monthly active users, then charge $0.0055 and $0.015 per user respectively; Plus costs $0.02 with no free allowance. Check federation costs separately: SAML/OIDC users cost $0.015 each after the first 50, rather than a fee per SSO connection. You choose the user pool's region, including EU regions.
- Headquarters
- 🇺🇸 United States
- Parent jurisdiction
- 🇺🇸 United States (parent: Amazon)
- EU self-serve plan
- Available; check eligible plans and regions
- GDPR DPA
- Yes
- Billing
- payg
- Free tier
- 10,000 MAU per month on Lite and Essentials (direct and social sign-in), 50 federated MAU; no expiry.
- Open source
- No
- Website
- aws.amazon.com
- Source last checked
- 2026-10-06
- Pricing evidence
- Published rates
Pricing
Calculated from the listed vendor rates; exclusions still apply. How to read these estimates.
| Plan | Base fee / month | 1k additional active users | 1k SSO active users |
|---|---|---|---|
| Lite (up to 100k MAU) | $0 | $5.5 | $15 |
| Lite (over 100k MAU) | $495 | $4.6 | $15 |
Allowances, plan limits & calculation details
Rates are shown at their recorded precision. A zero means no charge in this calculation; the vendor may charge for things we leave out. See the notes for usage assumptions and currency conversions.
Lite (up to 100k MAU)
- Base fee / month
- $0
- Included monthly active users (thousands)
- 10
- 1k additional active users
- $5.5
- Included enterprise connections
- 0
- Enterprise connection / month
- $0
- 1k SSO active users
- $15
- Modeled plan limits
- ≤ 100 monthly active users (thousands)
Lite (over 100k MAU)
- Base fee / month
- $495
- Included monthly active users (thousands)
- 100
- 1k additional active users
- $4.6
- Included enterprise connections
- 0
- Enterprise connection / month
- $0
- 1k SSO active users
- $15
Lite tier: 10k MAU free, then $0.0055 per MAU for the next 90k and $0.0046 above 100k (bands modelled as two plans). Essentials (the default for new user pools, adds managed login, passkeys and access-token customisation) is $0.015/MAU after 10k free; Plus (threat protection) is $0.02/MAU with no free tier. There is no per-connection SSO fee, but users who sign in via SAML or OIDC federation cost $0.015/MAU after 50 free, which the calculator's per-connection SSO input cannot show. Advanced security on Lite is $0.05/MAU for the first 50k. M2M token requests $0.00225 each. SMS and email via SNS/SES billed separately. User pools are regional, so EU regions (Frankfurt, Ireland, Paris, etc.) keep data in the EU.
Managed alternatives
At 50K monthly active users, no enterprise SSO connections. Adjust usage and requirements.
Amazon Cognito: $2,640/yr estimated.
- Clerk: $0/yr estimated · $2,640/yr bill differencePublished rates
- Firebase Authentication / Google Identity Platform: $0/yr estimated · $2,640/yr bill differencePublished rates
- Logto: $0/yr estimated · $2,640/yr bill differenceModeled ratesAssumes one access token per MAU per month; frequent token issuance increases cost. Paid feature add-ons are excluded.
- Supabase Auth: $0/yr estimated · $2,640/yr bill differencePublished rates
- WorkOS: $0/yr estimated · $2,640/yr bill differencePublished rates
No cheaper managed estimate matches your filters. Adjust your usage or compare with your actual contract bill.
The price difference leaves out migration costs, operating costs and any features you’d need to replace.
Self-hosted options
Operating cost is not estimated. These options are not counted as savings against managed services.
Compare Amazon Cognito
Found a wrong rate or plan restriction? Report a correction with a current source.