Logto

Open-source authentication and authorization infrastructure for web and mobile applications. Handles sign-in, SSO, RBAC, and multi-tenancy across OAuth 2.1 and OIDC with support for passwordless, social login, and enterprise IdP integration.

Trusted by public companies, startups, and government agencies. Logto differentiates itself with a developer-first approach: fast integration, SDKs for 20+ frameworks including Next.js, React, Vue, SvelteKit, Python, and Go, plus a Management API for programmatic user and tenant control. SOC 2 Type II certified, with self-hosting and managed cloud deployment across multiple regions.

Key capabilities:

• OAuth 2.1, OIDC, and SAML with passwordless, social sign-in, and MFA
• Multi-tenancy and organization-scoped RBAC for B2B and enterprise
• Enterprise SSO and federated IdP for third-party apps
• Machine-to-machine auth, impersonation, and PAT for APIs and tooling
• Framework SDKs and quick-starts for Next.js, React, Vue, Nuxt, SvelteKit, Python, Go, Swift, and .NET
• Self-hosted deployment or managed cloud with high availability

Teams use Logto to secure SaaS products, multi-app platforms, and AI applications with a single identity layer. Single sign-in flows work across web and mobile while keeping auth centralized. M2M tokens and PATs fit CI pipelines, scripts, and microservices. Enterprise customers rely on SSO and SOC 2 compliance for B2B sales.