logto-io/logto
Logto
Logto is an open-source identity provider that serves as a centralized authentication and authorization server for web, mobile, and command-line applications. It implements the OpenID Connect and OAuth 2.1 standards to handle secure user sign-in and the issuance of identity tokens.
The platform is specifically designed as a multi-tenant authentication framework for software-as-a-service environments, featuring built-in organization management and tenant isolation. It includes an enterprise single sign-on gateway to integrate external identity providers and supports role-based access control to manage permissions through organizational hierarchies.
The system covers identity and access management through user onboarding flows, multi-factor authentication, and custom sign-in interfaces. It also provides tools for organization-level membership management and the automation of user and role provisioning.
The software is distributed via container images to ensure consistent deployment across different computing environments.
Features
- Identity and Access Management Servers - Serves as a centralized platform for managing user identities, authentication, and authorization policies across applications.
- Identity Providers - Provides a centralized identity provider that manages authentication and authorization for web, mobile, and CLI applications.
- Enterprise Identity Providers - Implements a gateway to integrate enterprise-grade identity providers using protocols like SAML and OIDC for single sign-on.
- Permission-Based Security - Manages feature permissions across organizations by assigning access rights to roles rather than individual users.
- Multi-Tenant Identity Management - Manages organization-level permissions and member invitations to support secure multi-tenancy in B2B environments.
- Identity Servers - Ships an identity server that handles secure user sign-in and issues OIDC and OAuth 2.1 identity tokens.
- Multi-Tenant Isolation Layers - Implements data-level isolation to separate user identities and organizational settings for multiple independent customers.
- Multi-Tenant Authentication Services - Offers a multi-tenant authentication framework with isolated user pools and tenant-specific login configurations for SaaS environments.
- OAuth 2.1 Implementations - Implements the OAuth 2.1 protocol to issue and validate secure access tokens for managing permissions.
- Role-Based Access Control - Enforces role-based permissions and organization-level restrictions to manage feature access across multi-tenant environments.
- Role-Based Access Control Systems - Implements a role-based access control system to manage user permissions and access levels through organizational hierarchies.
- User Identity Management - Centralizes the handling of user identities and access control using standard protocols for secure verification.
- Identity Federation - Uses the OpenID Connect protocol to standardize identity exchange and authentication across different service providers.
- External Identity Provider Integration - Allows users to authenticate using third-party accounts such as Google or Facebook via standardized protocols.
- Web Sign-in Flows - Supports the creation of custom web-based interfaces for sign-up, social login, and multi-factor authentication.
- User Role Management - Provides a command line interface to automate the bulk creation of organizational roles and permission settings.
- Open-Source Authentication Platforms - Provides an open-source, self-hosted identity platform for session management and identity linking via OIDC and OAuth.
- Enterprise SSO Integrations - Connects to external enterprise identity providers via industry protocols to enable single sign-on for users.
- Client Application Connectivity - Enables secure communication for web apps, mobile apps, and CLI tools using standardized machine-to-machine protocols.
- Authentication Services - Authentication service with cloud and self-hosted deployment options.
- Authentication Services - OIDC and OAuth 2.1 infrastructure for SaaS and AI apps.
- Security And Privacy - Identity platform for user authentication.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
