B2B SaaS with SSO and SOC 2: what to build it with and what it costs
A multi-tenant product for companies: organisations, SAML single sign-on, audit logs and a SOC 2 report.
Sample PRD
- Organisations and roles
- SAML SSO
- Audit logs
- Per-seat billing
- Data residency options
What it needs
- Organisations / B2B teams: each customer company is a tenant
- SAML / enterprise SSO: enterprise customers sign in through Okta or Entra ID
- SOC 2 report available: security reviews ask for SOC 2
- Subscriptions: per-seat plans
- Postgres: tenant data with row-level isolation
- Can run or store data in the EU (nice to have): EU customers want data in the EU
MVP: about 100 users, $0/mo
Someone with an idea or a solo founder. Built with an AI app builder: describe it and it builds and hosts it.
| What | Pick | Monthly |
|---|---|---|
| AI coding agent | Base44 Starter | $16 |
| Mailgun Free | $0 | |
| Payments | Stripe Standard (US cards) | $17.50 |
| Analytics & errors | PostHog Free | $0 |
Growth: about 10,000 users, $135.94/mo
A funded team or one with traction. Built with an AI coding agent for each of about 3 developers.
- Error tracking: know when something breaks
- Daily backups: daily backups once real people depend on it
| What | Pick | Monthly |
|---|---|---|
| AI coding agent | Augment Code Standard | $20 |
| Hosting | Fly.io Machine, shared-cpu-1x with 256MB RAM | $6.19 |
| Database | Neon Scale | $1.75 |
| Sign-in | WorkOS AuthKit + 1 SSO connection | $125 |
| Amazon SES A la carte | $3 | |
| Payments | Stripe Standard (US cards) | $1,750 |
| Analytics & errors | PostHog Pay as you go | $0 |
Scale: about 100,000 users, $260.94/mo
An established product. Built with an AI coding agent with team billing and admin for about 10 developers.
- Error tracking: know when something breaks
- Daily backups: daily backups
- Point-in-time recovery: restore to any minute after a bad deploy
- Multi-factor authentication: two-factor sign-in for accounts worth stealing
| What | Pick | Monthly |
|---|---|---|
| AI coding agent | Augment Code Standard | $20 |
| Hosting | Fly.io Machine, shared-cpu-1x with 256MB RAM | $42.19 |
| Database | DigitalOcean Managed PostgreSQL Single node (1 vCPU, 2 GiB RAM, 30 GiB disk) | $34.75 |
| Sign-in | WorkOS AuthKit + 1 SSO connection | $125 |
| Amazon SES A la carte | $30 | |
| Payments | Stripe Standard (US cards) | $17,500 |
| Analytics & errors | Sentry Team | $29 |
First cost jump: DigitalOcean Managed PostgreSQL: Single node (1 vCPU, 2 GiB RAM, 30 GiB disk) limits reached, upgrade to Single node (2 vCPU, 4 GiB RAM, 60 GiB disk)
What drives the cost
- SSO is usually priced per connection or on enterprise tiers
- Compliance tooling and audits (not priced here)
- Sign-in per active user as seats grow
Lock-in
SSO connections are configured by each customer; moving sign-in providers means every customer reconfigures.
Use this in Claude (with Kong Reviews connected at https://kongreviews.com/mcp)

