An identity solution providing multi-tenancy, enterprise SSO, and RBAC for SaaS and agent-based AI applications.
Logto is an open-source identity infrastructure for SaaS and AI applications. It manages user authentication and authorization through a centralized server that can be deployed via Docker Compose or Node.js with a PostgreSQL database. The software handles the complexities of identity protocols to enable secure sign-in flows and user management for developers who want to avoid building these systems from scratch.
It is designed for integration into single-page applications, mobile apps, APIs, and command-line tools. Users can choose between a managed cloud version for immediate deployment or a self-hosted installation for full control over their identity data. The system focuses on reducing the friction associated with implementing industry-standard security protocols while providing a customizable experience for the end user.
Key features
- Support for OIDC, OAuth 2.1, and SAML protocols
- Multi-tenancy and organization management with RBAC
- Pre-built sign-in flows and customizable user interfaces
- Integration with identity providers including Google, Facebook, and Azure AD
- SDKs for over 30 frameworks such as React, Next.js, Vue, and Flutter
- Support for MFA, social login, and Google One Tap
- Compatibility with Model Context Protocol and agent-based AI architectures
- Just-in-time provisioning and member invites for organizations
Logto is built for teams scaling platforms that require enterprise-grade authentication without manual protocol implementation. It provides a developer-first approach with dedicated SDKs for various languages including Go and Python, allowing for rapid integration into existing tech stacks. The architecture supports machine-to-machine communication and integrates with external identity providers to facilitate single sign-on across different services. By providing a standardized layer for identity, it allows developers to focus on core application logic rather than the intricacies of JWTs or session management.
It serves as a comprehensive identity layer for developers who need a flexible, self-hosted auth system for modern web and AI applications.
Similar Open Source Software
Keycloak
An identity and access management server providing single sign-on, user federation, and fine-grained authorization for applications.
Authentik
A self-hosted identity provider for single sign-on that manages authentication and authorization via multiple industry standards.
Join our newsletter to get shiny new open source software delivered to your inbox. Unsubscribe anytime.