Homeホーム / Insights / Security解説記事 / 運用・セキュリティ
What does SSO actually cost?SSOはいくらかかりますか
Across the five platforms, the cheapest published route to SSO is HubSpot's Sales Hub / Service Hub Professional at $90 per seat per month on annual billing. That $90 is not what leaves the account at signature. A mandatory onboarding fee of $1,500 applies on top, so even a single seat costs $90×12＝$1,080＋$1,500＝$2,580 in the first year, and $1,080 from the second year onward. Budget on $90 a month and the first year comes in roughly 2.4 times higher ($2,580÷$1,080＝2.39). The remaining three publish no price at all.
Meet two of these four tests and SSO is worth pricing
The four tests are user count, frequency of departures and role changes, requests for access records from clients or auditors, and whether anyone owns IT administration (thresholds are in the flow below). Two or more, and a quote is worth requesting; one or none, and the measures in the second half will cover it. Without an owner, deployment stalls even when everything else is in place.
Five terms to settle before requesting a quote
SSO (single sign-on)
A mechanism for signing in to each service with the company account. It consolidates the entry point and nothing more: a leaver's account remains on the SaaS side, and the per-seat charge keeps running.
SAML
One of the protocols behind SSO. "SSO supported" does not guarantee SAML — what Squarespace documents is OpenID Connect.
IdP
The system that manages employee logins centrally: Google Workspace, Microsoft Entra ID (formerly Azure AD), Okta and others. Running Google Workspace or Microsoft 365 means you already have one. SSO is a matter of connecting an IdP to a SaaS platform, so settle this first.
2FA / MFA (two-factor and multi-factor authentication)
Identity confirmation through an authenticator app or SMS in addition to a password. It is separate from SSO: SSO governs where people sign in, 2FA governs whether it is really them. Introducing SSO does not bring 2FA with it.
SCIM (automated provisioning and deprovisioning)
Deleting a user on the HR side removes the SaaS account automatically. Cutting off a leaver's access automatically requires this in addition to SAML SSO.
Only two of the five publish a price
These five are not substitutes for one another. The table shows where the one you already run happens to sit.
| Platform | Lowest plan with SSO | Published unit price | What actually leaves the account (year one) | How to read the figure |
|---|---|---|---|---|
| HubSpot | Professional on each Hub (cheapest are Sales Hub / Service Hub, both $90 per seat per month, annual billing) | $90/seat/month (annual) ／ $100/seat/month (monthly) | 1 seat: $90×12＝$1,080 ＋ mandatory onboarding $1,500 ＝ $2,580／5 seats: $5,400＋$1,500＝$6,900 | The only one of the five where the first-year total can be calculated without a sales call. The $1,500 is charged once regardless of seat count, so the first-year burden per seat falls as seats are added (1 seat $2,580 → 5 seats $1,380 per seat) |
| Shopify | Plus | from $2,300/month (per organisation; no annual price published) | $2,300×12＝$27,600 | Not proportional to seats. Against HubSpot's $90 per seat, $2,300÷$90＝25.6, so a flat organisation fee becomes the cheaper structure from the 26th seat (these are different products — read it as a difference in billing model, not a switching comparison) |
| monday.com | Enterprise | Not published (quote only) | Cannot be calculated. Pro, the tier immediately below, is $19/seat/month (annual)＝$228 per seat per year | Ask how many multiples of the Pro price the Enterprise quote comes to, and it becomes comparable before any figure arrives. SAML SSO and SCIM are both Enterprise-only; Google login requires Pro or above and is unavailable on Basic and Standard. The seat minimum for Work Management plans could not be confirmed officially |
| Asana | Enterprise (Enterprise+ / Legacy Enterprise also qualify) | Not published (quote only) | Cannot be calculated. Advanced, the tier immediately below, is $24.99/seat/month (annual)＝$299.88 per seat per year | As above. The annual cost of Advanced is the floor to work from. An existing Legacy Enterprise contract already qualifies at no additional cost |
| Squarespace | Premium (Enterprise also qualifies) | Not published (quote only) | Cannot be calculated | OpenID Connect rather than SAML (Okta / Microsoft Entra ID / ClassLink / Google). Existing IdP configuration will not necessarily carry over, so confirm the protocol before the price |
Units: US dollars, excluding tax. Per-seat prices for HubSpot, monday.com and Asana are annual-billing rates (monthly billing is higher at every vendor). Shopify publishes no annual price alongside the $2,300/month figure for Plus. URLs are mapped figure by figure in the Sources section below. Verified August 2026.
HubSpot warrants a note of its own. SSO is not a specific product; it follows the grade of the Hub under contract. The official documentation lists Professional and Enterprise across the Marketing, Sales, Service, Data and Content Hubs, plus Smart CRM and Revenue Hub. The floor is the cheapest Professional — a single seat of Sales Hub or Service Hub. Marketing Hub Professional at $800 per month includes 3 seats, which is $266.7 per seat ($800÷3), and onboarding there costs $3,000. That is roughly three times Sales Hub: it is the price of Marketing Hub, not the price of SSO.
Some platforms offer "sign in with Google" on a cheaper plan than SAML SSO, but not uniformly. On monday.com it requires Pro or above.
Enforcing 2FA on everyone splits four ways
2FA itself is available on lower-tier plans at all five. What differs is whether it can be enforced.
Only two platforms — Asana and Shopify — require a higher tier before enforcement is possible. On monday.com, "2FA is available on all plans, and admins are the only ones who can enable it for the account." On HubSpot it is already mandatory from Starter upward for every user who signs in with a password. On Squarespace, buying a higher tier does not let an administrator enforce it on other contributors: "There isn't a way to enable it for them." The assumption that enforcement costs money holds for only two of the five.
Audit logs come down to retention, not availability
HubSpot shows the most recent 30 days on screen. Login history and security actions are both held to 30 days; a full year is reachable only through an export. Squarespace retains 90 days, and monday.com has no retention limit, though the log is Enterprise-only. Incidents usually surface more than a month after the fact, so treat the 30 days as one opportunity to export and check.
If you skip SSO, three measures cover it
The floor of $90 per seat and $2,580 in year one becomes $12,300 for ten people ($90×10×12＋$1,500). For a company of ten or fewer with one or two joiners or leavers a year, the following three measures do more than that spend would.
- Hold administrator accounts to two. This costs nothing. With no audit records, an incident with five administrators has five possible explanations; with two it has two. A single administrator leaves permissions frozen during an absence, so two is the floor.
- Enforce 2FA. On monday.com it is a switch in the admin settings; on paid HubSpot accounts it is already mandatory. Written instructions are needed only for the lower tiers of Asana and Shopify, and for Squarespace.
- Write a one-page offboarding deletion list. List the SaaS platforms in use and work down the sheet whenever someone leaves. Up to about five it holds; past ten, accounts get missed. That "ten" is the signal to start requesting quotes.
A password manager alongside this reduces the circulation and reuse of shared passwords. What it cannot prevent is equally clear. (a) A leaver's account stays on each service, and the per-seat charge continues until someone deletes it by hand. (b) Audit logs are restricted to higher tiers, so there is no record of who viewed what. The point at which those two become unacceptable is the point to request a quote.
So what should you do?
Fewer than 10 users and no more than 2 joiners or leavers a year — skip SSO. Hold administrators to two and write one deletion list. It costs nothing.
10 or more users, or 3 or more joiners and leavers a year — request a quote. Ask not for the monthly rate but for the first-year total including setup fees, the seat minimum, the minimum contract term, SCIM availability and audit-log retention. Leave out setup fees and seat minimums and the total will be wrong.
Already on a paid HubSpot plan — 2FA needs no action, and SSO alone can be evaluated on Professional ($90 per seat per month plus $1,500 up front).
Undecided — settle your IdP first. Google Workspace, Microsoft 365, or something else. Until that is fixed, no quote can be compared against another.
Sources (all verified August 2026)
| Figure or statement in the article | URL |
|---|---|
| Sales Hub Professional $90/seat/month (annual), $100/seat/month (monthly), mandatory onboarding $1,500 | https://www.hubspot.com/pricing/sales |
| Service Hub Professional $90/seat/month (annual), mandatory onboarding $1,500 | https://www.hubspot.com/pricing/service |
| Marketing Hub Professional $800/month, 3 seats included, onboarding $3,000 | https://www.hubspot.com/pricing/marketing |
| HubSpot SSO coverage (Marketing/Sales/Service/Data/Content Hub ＋ Smart CRM ＋ Revenue Hub, Professional and Enterprise) | https://knowledge.hubspot.com/account-security/set-up-single-sign-on-sso |
| HubSpot 2FA mandatory on Starter, Professional and Enterprise | https://knowledge.hubspot.com/account-security/set-up-two-factor-authentication-for-your-hubspot-login |
| HubSpot 30 days on screen, security actions exportable for 1 year | https://knowledge.hubspot.com/account-management/view-and-export-account-activity-history |
| Shopify Plus from $2,300/month | https://www.shopify.com/pricing |
| Shopify SAML authentication, SAML enforcement levels, 2FA enforcement and organisation user activity logs limited to Plus | https://help.shopify.com/en/manual/your-account/users/security/advanced-security-features |
| monday.com Basic $9 ／ Standard $12 ／ Pro $19 (annual, per seat per month); Enterprise not published | https://monday.com/pricing |
| monday.com SAML SSO Enterprise-only, Google login on Pro/Enterprise, SCIM Enterprise-only | https://support.monday.com/hc/en-us/articles/360000460605-SAML-Single-Sign-on |
| monday.com 2FA on all plans, enabled by admins only, SMS unavailable on free and trial | https://support.monday.com/hc/en-us/articles/360000787745-Two-Factor-Authentication |
| monday.com audit log Enterprise-only, no retention limit | https://support.monday.com/hc/en-us/articles/360001259429-The-Audit-Log |
| Asana Starter $10.99 ／ Advanced $24.99 (annual, per seat per month); Enterprise on request | https://asana.com/pricing |
| Asana SAML SSO on Enterprise / Enterprise+ / Legacy Enterprise | https://help.asana.com/s/article/authentication-and-access-management-options-for-paid-plans |
| Asana mandatory 2FA on Enterprise / Enterprise+ / Legacy Enterprise | https://help.asana.com/s/article/mandatory-two-factor-authentication |
| Squarespace SSO on Premium / Enterprise via OpenID Connect | https://support.squarespace.com/hc/en-us/articles/360048211611-Logging-in-with-single-sign-on-through-Okta-Premium-Enterprise |
| Squarespace Premium priced by sales enquiry only; IdPs are Okta / Microsoft Entra ID / ClassLink / Google | https://support.squarespace.com/hc/en-us/articles/45432263931533-Squarespace-Premium |
| Squarespace no means of enforcing 2FA on other contributors | https://support.squarespace.com/hc/en-us/articles/360000044827-Protect-your-account-with-two-factor-authentication |
| Squarespace account activity history 90 days | https://support.squarespace.com/hc/en-us/articles/39499008751245-Manage-your-account-activity |
Calculations: $90×12＝$1,080／$1,080＋$1,500＝$2,580／$90×5×12＋$1,500＝$6,900 ($1,380 per seat)／$90×10×12＋$1,500＝$12,300／$2,300×12＝$27,600／$2,300÷$90＝25.6／$19×12＝$228／$24.99×12＝$299.88／$800÷3＝$266.7
What could not be confirmed officially
- Seat minimums on monday.com Work Management paid plans (Basic / Standard / Pro / Enterprise): the "3 Seats" display was confirmed on the pricing page for the CRM and Service products, while the Work Management side defaulted to 10 seats. Whether a 3-seat floor applies to Work Management could not be confirmed in official documentation.
- Contract term conditions for Shopify Plus (one year or three years, and whether a variable platform fee applies): no statement was found on shopify.com/pricing.
- Annual pricing for Shopify Plus: the official wording is "from $2,300/mo" only, with no annual discount stated.
- Prices for monday.com Enterprise, Asana Enterprise / Enterprise+, and Squarespace Premium / Enterprise: none carry a figure on the official sites; all direct to a sales enquiry.
- The tier required for SCIM on Asana: the authentication options page states tier conditions for SAML explicitly, but the tier condition for SCIM alone was not confirmed on that page.
Terms and prices change, so confirm on each vendor's official page before signing.
5社のうち価格が公開されている最安の経路は、HubSpot の Sales Hub / Service Hub Professional、1席あたり月$90（年払）でした。ただし契約時に出ていくのは$90ではありません。必須の初回オンボーディング費$1,500が別にかかり、1席でも初年度は $90×12＝$1,080＋$1,500＝$2,580。2年目以降は$1,080です。月$90を予算にすると初年度で約2.4倍外します（$2,580÷$1,080＝2.39）。残る3社は価格非公開です。
自社にSSOが要るかは、4つのうち2つで決まります
基準は、利用者数・退職や異動の頻度・取引先や監査からの証跡要求・情報システム担当の有無の4つです（しきい値は下のフロー）。2つ以上なら見積もりを取る価値があり、1つ以下なら後半の手当てで足ります。担当者が欠けると、他が揃っても導入作業が止まります。
見積もりの前に、言葉を5つ揃えます
SSO（シングルサインオン）
会社のアカウントで各サービスにログインできる仕組み。入口が1か所に寄るだけで、退職者のアカウントはSaaS側に残り、席課金も止まりません。
SAML
SSOの通信規格の1つ。「SSO対応」でもSAMLとは限らず、Squarespace が案内しているのは OpenID Connect です。
IdP
社員のログインをまとめて管理する側。Google Workspace、Microsoft Entra ID（旧Azure AD）、Okta など。Google Workspace か Microsoft 365 を使っていれば、すでに持っています。SSOは「IdPとSaaSをつなぐ」ことなので、先にこれを確定させてください。
2FA／MFA（2要素認証・多要素認証）
パスワードに加えて認証アプリやSMSで本人確認する仕組み。SSOとは別物で、SSOは「どこでログインするか」、2FAは「本人かどうか」。SSOを入れても2FAは付きません。
SCIM（自動プロビジョニング／デプロビジョニング）
人事側でユーザーを消すとSaaS側のアカウントも自動で消える仕組み。退職者を自動で止めるには、SAML SSOとは別にこれが要ります。
価格が公開されているのは5社中2社です
この5つは代替関係にありません。「使っているものがどこに当たるか」の表です。
| サービス | SSOが使える最低プラン | 公開されている単価 | 契約時に実際に出ていく額（初年度） | この数字の読み方 |
|---|---|---|---|---|
| HubSpot | 各Hubの Professional（最安は Sales Hub / Service Hub、ともに1席$90/月・年払） | $90/席/月（年払）／$100/席/月（月払） | 1席：$90×12＝$1,080 ＋ 必須オンボーディング$1,500 ＝ $2,580／5席：$5,400＋$1,500＝$6,900 | 5社で唯一、初年度の総額まで自分で計算できます。$1,500は席数に関係なく1回だけなので、席数が増えるほど1席あたりの初年度負担は下がります（1席$2,580 → 5席$1,380/席） |
| Shopify | Plus | from $2,300/月（組織単位・年払価格の記載なし） | $2,300×12＝$27,600 | 席数に比例しません。HubSpotの$90/席と比べると $2,300÷$90＝25.6 なので、26席目から組織一律のほうが安くなる構造です（別製品なので乗り換え比較ではなく、課金構造の型の違いとして読んでください） |
| monday.com | Enterprise | 非公開（要見積） | 算出不能。直下の Pro が$19/席/月（年払）＝1席あたり年$228 | 金額より先に「Proの何倍か」を聞くと比較できます。SAML SSO と SCIM はどちらも Enterprise 限定、Googleログインは Pro 以上で、Basic・Standard では使えません。Work Management プランの最低席数は公式に確認できませんでした |
| Asana | Enterprise（Enterprise+ / Legacy Enterprise も可） | 非公開（要見積） | 算出不能。直下の Advanced が$24.99/席/月（年払）＝1席あたり年$299.88 | 同上。Advanced の年額が下限の目安です。旧プランの Legacy Enterprise を契約中なら、追加費用なしで対象に入っています |
| Squarespace | Premium（Enterprise も可） | 非公開（要見積） | 算出不能 | SAMLではなく OpenID Connect です（Okta / Microsoft Entra ID / ClassLink / Google）。既存のIdP設定を流用できるとは限らないので、金額より先に規格を確認してください |
単位：すべて米ドル・税別。HubSpot・monday.com・Asana の席単価は年払時の価格（月払は各社で高くなります）。Shopify Plus の$2,300/月には年払価格の記載が公式にありません。URLは末尾の「出典」節に数字ごとに対応。2026年8月確認。
HubSpotだけ補足します。SSOは特定の商品ではなく、契約中のHubのグレードで決まります。公式は Marketing / Sales / Service / Data / Content の各Hubに加え、Smart CRM と Revenue Hub の Professional・Enterprise を列挙しています。最低金額は最も安い Professional、Sales Hub / Service Hub の1席分です。Marketing Hub Professional の月$800は3席込みで1席$266.7（$800÷3）、オンボーディングも$3,000かかります。Sales Hub の約3倍で、Marketing Hub の価格であってSSOの価格ではありません。
「Googleアカウントでログイン」をSAML SSOより安いプランで出すサービスもありますが、横並びではありません。monday.com は Pro 以上です。
管理者が全員に2FAを強制できるかは4通りに割れます
2FAそのものは5社とも下位プランで使えます。分かれるのは強制できるかです。
上位プランを買わないと強制できないのは Asana と Shopify の2社だけです。monday.com は2FAをすべてのプランで利用でき、有効化できるのは管理者だけです（原文：2FA is available on all plans, and admins are the only ones who can enable it for the account.）。HubSpot は Starter 以上なら、パスワードでログインする全ユーザーに既に必須です。Squarespace は上位プランを買っても、管理者が他の共同編集者に強制できません（原文：There isn't a way to enable it for them.）。「強制には金がかかる」は5社中2社にしか当てはまりません。
監査ログは、使えるかより何日分残るかで決まります
HubSpot は画面で見えるのが直近30日分です。ログイン履歴もセキュリティ操作も30日で、1年分をさかのぼれるのは書き出した場合だけです。Squarespace は90日、monday.com は Enterprise 限定ですが保持期限がありません。事故の発覚は1か月以上あとが多く、30日は実質1回分の猶予しかない、と考えたほうがよさそうです。
SSOを見送るなら、手当ては3つです
1席$90・初年度$2,580という下限は、10名なら$12,300（$90×10×12＋$1,500）です。社員10名以下で年に1〜2人しか入退社がない会社は、これを払うより次の3つが効きます。
- 管理者アカウントを2名までに絞る。 0円です。記録が残らない環境では、管理者が5人なら原因の切り分けが5通り、2人なら2通り。1名だと不在時に権限を変えられないので、2名が下限です。
- 2FAを強制する。 monday.com は管理者設定から有効化するだけ、HubSpot の有料アカウントは既に必須です。手順書の配布が要るのは Asana・Shopify の下位プランと Squarespace だけです。
- 退職時の削除リストを1枚作る。 使っているSaaSを書き出し、退職者が出たら上から消すシートを用意します。5つ程度までは回りますが、10を超えると消し忘れが出ます。その「10」が見積もりの目安です。
パスワード管理ツールを併用すれば、共有パスワードの配布と使い回しは減ります。ただし防げないことは、はっきりしています。(a) 退職者のアカウントは各サービスに残り、手で消さないと席課金が続きます。(b) 監査ログが上位プラン限定なので、誰が何を見たかの記録は残りません。この2つが許容できなくなった時点が、見積もりを取る時点です。
結局、どうすればいいですか
利用者が10名未満で、入退社が年2件以下なら — SSOは見送ってください。管理者を2名に絞り、削除リストを1枚作る。0円です。
利用者が10名以上、または年3件以上の入退社があるなら — 見積もりを取ってください。聞くのは月額ではなく、初期費用込みの初年度総額・最低席数・最低契約期間・SCIMの有無・監査ログの保持日数です。初期費用と最低席数を落とすと総額を外します。
すでに HubSpot の有料プランを使っているなら — 2FAは対応不要で、SSOだけを Professional（1席$90/月＋初回$1,500）で検討できます。
迷ったら — 先に自社のIdPを確定させてください。Google Workspace か Microsoft 365 か、それ以外か。決まらないうちは、どの見積もりも比較できません。
出典（すべて2026年8月確認）
| 本文の数字・記述 | URL |
|---|---|
| Sales Hub Professional $90/席/月（年払）・$100/席/月（月払）・必須オンボーディング$1,500 | https://www.hubspot.com/pricing/sales |
| Service Hub Professional $90/席/月（年払）・必須オンボーディング$1,500 | https://www.hubspot.com/pricing/service |
| Marketing Hub Professional $800/月・3席込み・オンボーディング$3,000 | https://www.hubspot.com/pricing/marketing |
| HubSpot SSOの対象（Marketing/Sales/Service/Data/Content Hub＋Smart CRM＋Revenue Hub の Professional・Enterprise） | https://knowledge.hubspot.com/account-security/set-up-single-sign-on-sso |
| HubSpot 2FAが Starter・Professional・Enterprise で必須 | https://knowledge.hubspot.com/account-security/set-up-two-factor-authentication-for-your-hubspot-login |
| HubSpot 画面上30日／セキュリティ操作の書き出しは1年 | https://knowledge.hubspot.com/account-management/view-and-export-account-activity-history |
| Shopify Plus from $2,300/月 | https://www.shopify.com/pricing |
| Shopify SAML認証・SAML強制レベル設定・2FA強制・組織のユーザー活動ログがPlus限定 | https://help.shopify.com/en/manual/your-account/users/security/advanced-security-features |
| monday.com Basic $9／Standard $12／Pro $19（年払・1席/月）・Enterpriseは非公開 | https://monday.com/pricing |
| monday.com SAML SSOはEnterpriseのみ・GoogleログインはPro/Enterprise・SCIMはEnterpriseのみ | https://support.monday.com/hc/en-us/articles/360000460605-SAML-Single-Sign-on |
| monday.com 2FAは全プラン・管理者のみ有効化可・SMSは無料/トライアル不可 | https://support.monday.com/hc/en-us/articles/360000787745-Two-Factor-Authentication |
| monday.com 監査ログはEnterprise・保持期限なし | https://support.monday.com/hc/en-us/articles/360001259429-The-Audit-Log |
| Asana Starter $10.99／Advanced $24.99（年払・1席/月）・Enterpriseは要問い合わせ | https://asana.com/pricing |
| Asana SAML SSOは Enterprise / Enterprise+ / Legacy Enterprise | https://help.asana.com/s/article/authentication-and-access-management-options-for-paid-plans |
| Asana 2FA必須化は Enterprise / Enterprise+ / Legacy Enterprise | https://help.asana.com/s/article/mandatory-two-factor-authentication |
| Squarespace SSOは Premium / Enterprise・OpenID Connect | https://support.squarespace.com/hc/en-us/articles/360048211611-Logging-in-with-single-sign-on-through-Okta-Premium-Enterprise |
| Squarespace Premiumの価格は営業問い合わせのみ・IdPは Okta / Microsoft Entra ID / ClassLink / Google | https://support.squarespace.com/hc/en-us/articles/45432263931533-Squarespace-Premium |
| Squarespace 2FAを他の共同編集者に強制する手段がない | https://support.squarespace.com/hc/en-us/articles/360000044827-Protect-your-account-with-two-factor-authentication |
| Squarespace アカウント活動履歴90日 | https://support.squarespace.com/hc/en-us/articles/39499008751245-Manage-your-account-activity |
計算式：$90×12＝$1,080／$1,080＋$1,500＝$2,580／$90×5×12＋$1,500＝$6,900（1席あたり$1,380）／$90×10×12＋$1,500＝$12,300／$2,300×12＝$27,600／$2,300÷$90＝25.6／$19×12＝$228／$24.99×12＝$299.88／$800÷3＝$266.7
公式に確認できなかったこと
- monday.com の Work Management 有料プラン（Basic / Standard / Pro / Enterprise）の最低席数：料金ページで「3 Seats」の表示を確認できたのは CRM と Service の製品で、Work Management 側は席数の初期表示が10席でした。Work Management に3席の下限があるかは公式に記載を確認できませんでした。
- Shopify Plus の契約期間条件（1年契約か3年契約か、可変プラットフォーム手数料の有無）：shopify.com/pricing に記載を確認できませんでした。
- Shopify Plus の年払価格：公式表記は "from $2,300/mo" のみで、年払割引の記載を確認できませんでした。
- monday.com Enterprise・Asana Enterprise / Enterprise+・Squarespace Premium / Enterprise の価格：いずれも公式サイトに金額の記載がなく、問い合わせのみの案内でした。
- Asana の SCIM が必要とする階層：認証オプションのページでは SAML の階層条件は明示されていましたが、SCIM 単独の階層条件は同ページで確認できませんでした。
提供条件と価格は変更されるため、契約前に各公式ページでご確認ください。