logto-io/logto
Logto
Logto is an open-source identity provider that serves as a centralized authentication and authorization server for web, mobile, and command-line applications. It implements the OpenID Connect and OAuth 2.1 standards to handle secure user sign-in and the issuance of identity tokens.
The platform is specifically designed as a multi-tenant authentication framework for software-as-a-service environments, featuring built-in organization management and tenant isolation. It includes an enterprise single sign-on gateway to integrate external identity providers and supports role-based access control to manage permissions through organizational hierarchies.
The system covers identity and access management through user onboarding flows, multi-factor authentication, and custom sign-in interfaces. It also provides tools for organization-level membership management and the automation of user and role provisioning.
The software is distributed via container images to ensure consistent deployment across different computing environments.
Features
- Identity and Access Management Servers - Serves as a centralized platform for managing user identities, authentication, and authorization policies across applications.
- Identity Providers - Provides a centralized identity provider that manages authentication and authorization for web, mobile, and CLI applications.
- Enterprise Identity Providers - Implements a gateway to integrate enterprise-grade identity providers using protocols like SAML and OIDC for single sign-on.
- Permission-Based Security - Manages feature permissions across organizations by assigning access rights to roles rather than individual users.
- Multi-Tenant Identity Management - Manages organization-level permissions and member invitations to support secure multi-tenancy in B2B environments.
- Identity Servers - Ships an identity server that handles secure user sign-in and issues OIDC and OAuth 2.1 identity tokens.
- Multi-Tenant Isolation Layers - Implements data-level isolation to separate user identities and organizational settings for multiple independent customers.
- Multi-Tenant Authentication Services - Offers a multi-tenant authentication framework with isolated user pools and tenant-specific login configurations for SaaS environments.
- OAuth 2.1 Implementations - Implements the OAuth 2.1 protocol to issue and validate secure access tokens for managing permissions.
- Role-Based Access Control - Enforces role-based permissions and organization-level restrictions to manage feature access across multi-tenant environments.
- Role-Based Access Control Systems - Implements a role-based access control system to manage user permissions and access levels through organizational hierarchies.
- User Identity Management - Centralizes the handling of user identities and access control using standard protocols for secure verification.
- Identity Federation - Uses the OpenID Connect protocol to standardize identity exchange and authentication across different service providers.
- External Identity Provider Integration - Allows users to authenticate using third-party accounts such as Google or Facebook via standardized protocols.
- Web Sign-in Flows - Supports the creation of custom web-based interfaces for sign-up, social login, and multi-factor authentication.
- User Role Management - Provides a command line interface to automate the bulk creation of organizational roles and permission settings.
- Open-Source Authentication Platforms - Provides an open-source, self-hosted identity platform for session management and identity linking via OIDC and OAuth.
- Enterprise SSO Integrations - Connects to external enterprise identity providers via industry protocols to enable single sign-on for users.
- Client Application Connectivity - Enables secure communication for web apps, mobile apps, and CLI tools using standardized machine-to-machine protocols.
- Authentication Services - Authentication service with cloud and self-hosted deployment options.
- Authentication Services - OIDC and OAuth 2.1 infrastructure for SaaS and AI apps.
- الأمن والخصوصية - Identity platform for user authentication.
