Give your team one familiar sign-in path through Microsoft Entra ID using SAML. The add-on is priced once per workspace, regardless of team size.
A Business subscription is required. Access is currently available by invitation during the controlled rollout.
Optional Business add-on
Microsoft Entra SSO
Add SAML sign-in through Microsoft Entra ID to a Business workspace. Billed separately from the Business plan.
$139 USD
per month per workspace
$1,668 USD
per year per workspace
Flat workspace fee with no per-user charges. Annual billing has no discount. SCIM provisioning is not included. Available by invitation during the controlled rollout.
Enterprise SAML connections carry a separate recurring provider and support cost for Keito. We show that cost directly instead of raising Business pricing for every customer or hiding it behind a sales quote.
The result is one published workspace fee, no seat calculation, and no negotiated per-user price.
Monthly and annual Business plan and Microsoft Entra SSO add-on costs
Charge
Monthly billing
Annual billing
Business plan
$199 USD/month
$1,910 USD/year
Entra SSO add-on
$139 USD/month
$1,668 USD/year
Combined workspace cost
$338 USD/month
$3,578 USD/year
Business plan
Monthly
$199 USD/month
Annual
$1,910 USD/year
Entra SSO add-on
Monthly
$139 USD/month
Annual
$1,668 USD/year
Combined workspace cost
Monthly
$338 USD/month
Annual
$3,578 USD/year
Business annual billing includes its standard plan discount. The Entra add-on annual price is exactly twelve monthly fees, with no additional discount. The subscriptions are billed separately.
Know the boundary before you buy.
This is sign-in and enforcement through Microsoft Entra. User lifecycle management remains in Keito.
Included
Microsoft Entra SAML sign-in from Keito's normal sign-in page
Owner and Administrator self-service configuration
Administrator testing before workspace-wide enforcement
Not included
SCIM provisioning, deprovisioning, or directory synchronization
A separate Microsoft Entra OIDC connection
Automatic Keito membership creation or removal
Existing users keep their Keito identity.
A teammate moving from Google or email-code sign-in to Entra keeps the same Keito user, workspace role, and records when Entra returns the same verified email. Test each identity during the pilot before requiring SSO for everyone.
Ready to run a small Entra pilot?
Contact Keito to enable the add-on, then use the configuration guide for the complete self-service setup.