Ory

Open-source identity and access management platform delivering modular building blocks for authentication, authorization, and permission management. Components include an OpenID Connect–certified OAuth2 provider, headless identity and user management, and a relationship-based permission server built on a Zanzibar-style model.

Trusted by enterprises such as OpenAI and commercetools for customer identity, B2B access, workforce IAM, and agentic AI use cases. Ory stands out through a headless, API-first design that decouples identity logic from UI, enabling full ownership of user flows and deployment flexibility from self-hosted to managed services.

Key capabilities:

• OAuth2.1 and OpenID Connect provider with headless APIs
• Passkeys, magic links, social sign-in, MFA, and enterprise SSO with SAML
• Relationship-based permission engine supporting ACL, RBAC, and custom policies
• Cloud-native, stateless architecture for horizontal scaling
• SDKs and integration guides for React, Next.js, Vue, Node, Go, and Python

Teams use Ory for customer-facing auth, B2B partner onboarding, API and service protection, and machine-to-machine authentication. Developers integrate via official SDKs, self-service flows, and pre-built UI components while keeping full control over branding and user experience.