Which AI app builders put SSO and audit logs behind an enterprise plan?

Most AI app builders keep single sign-on, audit logs or both on their Enterprise plan. As listed on vendor pricing pages and documentation in October 2026, Bolt, v0, Replit, Base44, Glide and Softr put SSO on Enterprise; Lovable starts SSO at its Business plan but keeps audit logs and SCIM on Enterprise; Retool offers audit logs from Business but keeps SSO and SCIM on Enterprise. A few platforms go lower: Airtable lists SAML SSO from Business, Cursor includes SSO on its Teams plan, and Knack and Quickbase put sign-in controls on mid-tier plans. The practical rule is simple. Find the cheapest plan that includes every control your company needs, and treat that as the real price.

Enterprise plans are usually priced by conversation rather than on the page, which is why this matters. A tool listed at $25 or $50 a month can become a sales call and an annual contract the moment someone asks for SSO or a record of who changed what.

The three controls, in one line each

• Single sign-on (SSO): people log in with their company Microsoft or Google account. Switch that account off and access to every connected tool ends. SAML and OIDC are the two common standards.
• SCIM: each app's user list stays in sync with your company directory, so joiners appear and leavers disappear automatically.
• Audit logs: a record of who did what and when, inside the tools and in the workspace where they are built.

Where each vendor puts them (October 2026)

All details below are as listed on each vendor's pricing page or plan documentation in October 2026. "Not listed" means the page we checked did not name it on any plan.

A few notes on reading the table:

• Power Apps works differently. Sign-in, data loss prevention and auditing come from your Microsoft 365 and Entra setup rather than from a Power Apps tier, so the question is what your Microsoft licensing already includes.
• monday.com lists enterprise-grade security and governance on its Enterprise plan; the pricing page we checked did not say which tier includes SSO.
• Windsurf removed SSO from its Teams plan for new subscriptions, according to its pricing page. Plans move in both directions, which is why the date on any table like this matters.

What the plan you need really costs

Here is what a 10-person team, 3 people building and 7 using the tools, would pay at list price for the cheapest plan with SSO, using the prices in the table. Enterprise plans have no listed price, so those rows say so.

Two patterns stand out. First, getting SSO and audit logs together usually means Enterprise. Lovable's Business plan has SSO but not audit logs; Retool's Business plan has audit logs but not SSO. Second, the plan that has SSO is often priced per person, so the cost grows with the whole team, not just the builders.

Why sign-in on the front door is not enough

SSO protects the login. It does not decide what someone sees once inside an app, and it does not help if there is a side door. In July 2025, security firm Wiz found a flaw in Base44 that let anyone with a public app ID register on private apps, bypassing sign-in including SSO. Wiz reported the fix landed in under 24 hours, with no evidence of exploitation.

That is why the table has three columns, not one. A business needs:

1. Controlled entry: SSO, or invite-only access with no public sign-up.
2. Controlled reach: roles inside each app, so a technician cannot open payroll.
3. A record: who did what, so any question has an answer.

Questions to ask before you sign

1. Which plan includes SSO, and what does that plan cost for our team? Ask for a written quote if it is Enterprise.
2. Which plan includes audit logs, and is it the same plan?
3. What does the audit log record? Changes to apps, changes to records, access changes, or all three?
4. How long are audit records kept? Quickbase, for one, lists longer retention on higher plans.
5. Is SCIM included, or do we remove leavers by hand?
6. Are there roles inside each app, or only in the builder workspace?
7. Can anyone sign up to our apps without an invite?
8. If we start on a lower plan, what happens to our apps when we upgrade?
9. Have these controls moved between plans in the past year?

How to decide what you actually need

Not every company needs all three on day one. Work through these questions.

• Do people leave? Then you need a reliable way to end access everywhere at once: SSO, or a platform where removing someone in one place ends it in every tool.
• Will tools hold customer, employee, health or financial records? Then you need roles inside the apps and a record of who saw and changed what.
• Do you answer to anyone? A larger customer's vendor review, a cyber insurance application or an auditor will ask who can reach your data and how you know.
• Will more than one department build? Then you need someone, usually an owner or admin, who can see every tool and every builder.

If you answered yes to two or more, price the plan that includes the controls and compare vendors on that number.

Mistakes to avoid

• Comparing banner prices. The plan on the pricing page headline is rarely the one with the controls a business needs.
• Buying SSO and assuming you are covered. Sign-in is one layer. Ask about roles inside the apps and the record of changes.
• Forgetting app users. On per-person plans, the SSO tier is often charged for everyone who opens an app.
• Skipping the written quote. Enterprise pricing is a negotiation. Get the number and the included features on paper.
• Not checking again. Vendors move features between plans. Recheck at renewal.

How FORGE handles it

FORGE does not hold the controls a business needs behind a higher plan. Every company account includes them from the first day.

• Invite-only entry. Your admin invites each person by email, every invite works once and expires, and there is no public sign-up to slip through.
• Roles that reach inside every tool. Owners, admins, builders and app users each see and do exactly what their role allows.
• A complete record. Every step of every build is recorded with who or what did it, so "who changed this?" always has an answer.
• Clean departures. Removing someone ends their access to every tool at once, and the tools they built stay with the company.
• Checked before it is saved. A panel of top AI models plans each tool, a dedicated AI crew builds it, and every piece is checked for quality and security before it is saved.

The price is the same plain number for everyone: $49 a seat a month for each person who builds, with 3 builds included, a flat $10 a user a month for app users, packs of 10 builds for $150, and nothing extra without your OK. Our team onboards every company and walks your IT lead through access and records during the workflow workshop. See security, pricing, or talk to us.

Questions people ask

Sources

1. Lovable plan documentation
2. Bolt pricing
3. v0 pricing
4. Replit pricing
5. Base44 pricing
6. Glide pricing
7. Softr pricing and plans documentation
8. Bubble pricing
9. Retool pricing
10. Google AppSheet pricing
11. Microsoft Power Apps pricing
12. monday.com pricing
13. Airtable pricing
14. Airtable: configuring SSO
15. Quickbase plans and pricing
16. Knack pricing
17. Cursor pricing
18. Windsurf pricing
19. Wiz: critical vulnerability in Base44