Provides multi-tenant authentication and identity management for B2B software with support for SSO and RBAC.
Tesseral is an open-source and self-hosted web app and server. It provides authentication infrastructure specifically designed for B2B SaaS applications, focusing on multi-tenant environments where customer administrators manage their own users and security policies.
The software operates as an API-first service that can be deployed on the cloud or self-hosted. Because it is not tied to a specific language or framework, it integrates with any tech stack via provided client-side and server-side SDKs. This allows developers to implement complex identity flows without being locked into a particular ecosystem or programming language.
Key features
- B2B multitenancy with customer-led user and login management
- SAML and OIDC support for enterprise single sign-on
- Role-based access control (RBAC) for fine-grained permissions
- SCIM support for enterprise directory synchronization
- Multi-factor authentication including TOTP and WebAuthn passkeys
- Pre-built, customizable hosted login pages and settings screens
- API key management for automated endpoint access
- Real-time data synchronization via webhooks
- Audit logs for tracking actions within the product
Tesseral is built for developers who need to implement enterprise-grade authentication without building the underlying logic from scratch. It includes pre-built UI components for user invitations and various login methods, such as magic links and social logins via Google, GitHub, and Microsoft. The architecture allows for user impersonation, which enables developers to log in as their users to debug issues and provide technical support more efficiently.
Beyond basic login, the system handles the administrative side of B2B software. It provides self-service configuration pages where customers can invite coworkers and edit their own login settings. The inclusion of API key management ensures that the software supports both human users and automated machine-to-machine communication. Integration is handled through a publishable key system and dedicated SDKs for common web frameworks, such as React.
It serves as a comprehensive identity layer for business software requiring strict tenant isolation and enterprise compliance.
Similar Open Source Software
Keycloak
An identity and access management server providing single sign-on, user federation, and fine-grained authorization for applications.
Authentik
A self-hosted identity provider for single sign-on that manages authentication and authorization via multiple industry standards.
Join our newsletter to get shiny new open source software delivered to your inbox. Unsubscribe anytime.