1<!DOCTYPE html><html lang="en" dir="ltr"><head><meta charSet="utf-8"/><meta id="meta-viewport" name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="image" href="/assets/logo-DJgjZsal.webp"/><link rel="preload" as="image" href="/assets/background-01IHsg45.jpg"/><link rel="preload" as="image" href="/assets/logto-account-center-04Qq3JGL.webp"/><link rel="preload" as="image" href="/assets/update-email-CsuxJmtk.webp"/><link rel="preload" as="image" href="/assets/set-a-password-CNLqoyKC.webp"/><link rel="preload" as="image" href="/assets/link-social-accounts-BY2yNdAC.webp"/><link rel="preload" as="image" href="/assets/enterprise-sso-accounts-Bt2JM7wH.webp"/><link rel="preload" as="image" href="/assets/add-passkeys-9xwOsW6Q.webp"/><link rel="preload" as="image" href="/assets/add-authenticator-app-otp-tgmh0BQd.webp"/><link rel="preload" as="image" href="/assets/generate-backup-codes-BLtVi8i9.webp"/><link rel="preload" as="image" href="/assets/create-personal-access-token-CqsoQTr-.webp"/><link rel="preload" as="image" href="/assets/edit-profile-GPke5G1s.webp"/><link rel="preload" as="image" href="/assets/delete-account-YziHPLxy.webp"/><link rel="preload" as="image" href="/assets/step-up-verification-BmIGiEbV.webp"/><link rel="preload" as="image" href="/assets/logto-api-account-centers-C3OjdvAk.webp"/><link rel="apple-touch-icon" sizes="180x180" href="/assets/apple-touch-icon-BEsXynRc.png"/><link rel="icon" href="/assets/favicon-Al2JfVNp.ico"/><title>Account settings with step-up verification · Logto</title><meta name="description" content="Customize your end-user account experience with Logtoâs APIs. Empower users to securely manage federated identities, authentication methods, and third-party connections across applications."/><meta property="og:site_name" content="Logto"/><meta property="og:title" content="Account settings with step-up verification · Logto"/><meta property="og:description" content="Customize your end-user account experience with Logtoâs APIs. Empower users to securely manage federated identities, authentication methods, and third-party connections across applications."/><meta property="og:image" content="https://logto.io/assets/social-CH_XwNBP.jpg"/><meta property="og:image:type" content="image/jpeg"/><meta property="og:image:width" content="2560"/><meta property="og:image:height" content="1280"/><meta property="og:image:alt" content="Logto â Modern auth infrastructure for developers"/><meta property="og:type" content="website"/><meta property="og:url" content="https://logto.io/products/account-center"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:site" content="@logto_io"/><meta name="twitter:title" content="Account settings with step-up verification · Logto"/><meta name="twitter:description" content="Customize your end-user account experience with Logtoâs APIs. Empower users to securely manage federated identities, authentication methods, and third-party connections across applications."/><meta name="twitter:image" content="https://logto.io/assets/social-CH_XwNBP.jpg"/><meta name="twitter:url" content="https://logto.io/products/account-center"/><link rel="canonical" href="https://logto.io/products/account-center"/><link rel="alternate" hrefLang="x-default" href="https://logto.io/products/account-center"/><link rel="alternate" hrefLang="ar" href="https://logto.io/ar/products/account-center"/><link rel="alternate" hrefLang="de" href="https://logto.io/de/products/account-center"/><link rel="alternate" hrefLang="en" href="https://logto.io/products/account-center"/><link rel="alternate" hrefLang="es" href="https://logto.io/es/products/account-center"/><link rel="alternate" hrefLang="fi" href="https://logto.io/fi/products/account-center"/><link rel="alternate" hrefLang="fr" href="https://logto.io/fr/products/account-center"/><link rel="alternate" hrefLang="it" href="https://logto.io/it/products/account-center"/><link rel="alternate" hrefLang="ja" href="https://logto.io/ja/products/account-center"/><link rel="alternate" hrefLang="ko" href="https://logto.io/ko/products/account-center"/><link rel="alternate" hrefLang="nl" href="https://logto.io/nl/products/account-center"/><link rel="alternate" hrefLang="pl-PL" href="https://logto.io/pl-PL/products/account-center"/><link rel="alternate" hrefLang="pl" href="https://logto.io/pl-PL/products/account-center"/><link rel="alternate" hrefLang="pt-PT" href="https://logto.io/pt-PT/products/account-center"/><link rel="alternate" hrefLang="pt-BR" href="https://logto.io/pt-BR/products/account-center"/><link rel="alternate" hrefLang="pt" href="https://logto.io/pt-BR/products/account-center"/><link rel="alternate" hrefLang="ru" href="https://logto.io/ru/products/account-center"/><link rel="alternate" hrefLang="sv" href="https://logto.io/sv/products/account-center"/><link rel="alternate" hrefLang="th" href="https://logto.io/th/products/account-center"/><link rel="alternate" hrefLang="tr-TR" href="https://logto.io/tr-TR/products/account-center"/><link rel="alternate" hrefLang="tr" href="https://logto.io/tr-TR/products/account-center"/><link rel="alternate" hrefLang="zh-CN" href="https://logto.io/zh-CN/products/account-center"/><link rel="alternate" hrefLang="zh-HK" href="https://logto.io/zh-
1HK/products/account-center"/><link rel="alternate" hrefLang="zh-TW" href="https://logto.io/zh-TW/products/account-center"/><link rel="alternate" hrefLang="zh" href="https://logto.io/zh-TW/products/account-center"/><link rel="modulepreload" href="/assets/entry.client-B62xCkJ5.js"/><link rel="modulepreload" href="/assets/index-lGppnjmY.js"/><link rel="modulepreload" href="/assets/errorBoundaries-CyYF7UEl.js"/><link rel="modulepreload" href="/assets/components-BK3u82EK.js"/><link rel="modulepreload" href="/assets/hooks-iPMPJKRm.js"/><link rel="modulepreload" href="/assets/warnings-COd-4g09.js"/><link rel="modulepreload" href="/assets/root-DgrjIK3r.js"/><link rel="modulepreload" href="/assets/index-BM3YeuMt.js"/><link rel="modulepreload" href="/assets/i18n-D1-CQUon.js"/><link rel="modulepreload" href="/assets/numbers-BWlOhyf_.js"/><link rel="modulepreload" href="/assets/index.esm-D44eFarn.js"/><link rel="modulepreload" href="/assets/index-D9KE0gxo.js"/><link rel="modulepreload" href="/assets/index-5VITrgZC.js"/><link rel="modulepreload" href="/assets/client-only-Fw2KSmSM.js"/><link rel="modulepreload" href="/assets/urls-BUkIa6ks.js"/><link rel="modulepreload" href="/assets/blogs-ssZVuCgn.js"/><link rel="modulepreload" href="/assets/meta-OsRUPdaO.js"/><link rel="modulepreload" href="/assets/(_lang).products.account-center-ByHR2R2a.js"/><link rel="modulepreload" href="/assets/index-B23X94rQ.js"/><link rel="modulepreload" href="/assets/index-Do2nsg51.js"/><link rel="modulepreload" href="/assets/index-BFokHGDk.js"/><link rel="modulepreload" href="/assets/index-C9qDKeHi.js"/><link rel="modulepreload" href="/assets/index-benIMhXd.js"/><link rel="modulepreload" href="/assets/index-C1v0fw16.js"/><link rel="modulepreload" href="/assets/index-C0sYv4xY.js"/><link rel="modulepreload" href="/assets/index.module-wMQvEUWL.js"/><link rel="modulepreload" href="/assets/Trans-CtPDM99M.js"/><link rel="modulepreload" href="/assets/components-D7Lg5PuW.js"/><link rel="modulepreload" href="/assets/browser-l0AbNYAV.js"/><link rel="modulepreload" href="/assets/index-BDik2zHn.js"/><link rel="modulepreload" href="/assets/use-browser-info-nSZgIHfy.js"/><link rel="stylesheet" href="/assets/root-BWdGuOD6.css"/><link rel="stylesheet" href="/assets/normalized-BQqTZHj6.css"/><link rel="stylesheet" href="/assets/index-BBKVN1B1.css"/><link rel="stylesheet" href="/assets/index-CQ2RH-pa.css"/><link rel="stylesheet" href="/assets/index-DDcV2nHK.css"/><link rel="stylesheet" href="/assets/index-BlaEY6O3.css"/><link rel="stylesheet" href="/assets/normalized-jBqFJ0LG.css"/><link rel="stylesheet" href="/assets/index-u724zBSQ.css"/><link rel="stylesheet" href="/assets/index-DvPdkyiX.css"/><link rel="stylesheet" href="/assets/index-OQ5lImoV.css"/><link rel="stylesheet" href="/assets/index-Dn2x2PrL.css"/><link rel="stylesheet" href="/assets/index-BBn4fTj2.css"/><link rel="stylesheet" href="/assets/index-D12xokK8.css"/><link rel="stylesheet" href="/assets/index-Ba3yen0p.css"/><link rel="stylesheet" href="/assets/index-L1sLbom_.css"/><link rel="stylesheet" href="/assets/index-BJCZVaf3.css"/></head><body><div class="_bar_di0m7_1"></div><div style="position:fixed;z-index:9999;top:16px;left:16px;right:16px;bottom:16px;pointer-events:none;inset:72px 0 0"></div><div class="_container_tz4ux_13"><nav aria-label="Topbar" class="_container_1knp4_26"><div class="_topBarBanner_vbpu1_17"><div class="_content_vbpu1_24"><span class="_bannerText_vbpu1_49">ð Get an overview of what Logto offers for AI use cases!</span><a href="/ai" class="_bannerLink_vbpu1_52">Let's go</a></div></div><div data-ai-stop-here="true" data-ai-id="topbar" class="_wrapper_1knp4_41"><a class="_logo_1knp4_71" data-ai-id="logo" href="/" data-discover="true"><img class="_logo_1knp4_71" src="/assets/logo-DJgjZsal.webp" alt="Logto logo"/></a><div class="_linksWrapper_1knp4_80"></div><div class="_buttons_1knp4_104"><a class="_button_2yhrd_17 _gradient_2yhrd_97 _small_2yhrd_84 _cta_1knp4_50 _githubButton_1knp4_109" data-ai-id="github.desktop" href="https://github.com/logto-io/logto" target="_blank" rel="noopener"><div class="_children_2yhrd_129"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M9.99937 1.87207C8.0206 1.87215 6.10642 2.57633 4.59934 3.85861C3.09226 5.14089 2.09062 6.91759 1.77365 8.87081C1.45668 10.824 1.84505 12.8263 2.86929 14.5194C3.89352 16.2124 5.48678 17.4858 7.36397 18.1116C7.78064 18.1846 7.93689 17.9346 7.93689 17.7158C7.93689 17.5179 7.92646 16.8616 7.92646 16.1637C5.83271 16.5491 5.29104 15.6533 5.12437 15.1846C4.93943 14.7287 4.64627 14.3247 4.2702 14.0075C3.97854 13.8512 3.56187 13.4658 4.25978 13.4554C4.52627 13.4843 4.78186 13.5771 5.0049 13.7258C5.22793 13.8744 5.41184 14.0747 5.54
1104 14.3096C5.65501 14.5143 5.80827 14.6946 5.99203 14.84C6.17579 14.9854 6.38643 15.0931 6.6119 15.157C6.83736 15.2209 7.07321 15.2396 7.30594 15.2122C7.53866 15.1847 7.76368 15.1116 7.9681 14.9971C8.00418 14.5734 8.19299 14.1773 8.49937 13.8825C6.64521 13.6742 4.7077 12.9554 4.7077 9.76793C4.69599 8.93972 5.00161 8.13841 5.56187 7.52835C5.30711 6.80853 5.33692 6.01858 5.6452 5.32001C5.6452 5.32001 6.3431 5.10125 7.93687 6.17418C9.30044 5.79916 10.74 5.79916 12.1035 6.17418C13.6973 5.09085 14.3952 5.32001 14.3952 5.32001C14.7035 6.01857 14.7333 6.80853 14.4785 7.52835C15.0405 8.13737 15.3464 8.93937 15.3327 9.76793C15.3327 12.9658 13.3848 13.6742 11.5306 13.8825C11.7295 14.0841 11.8827 14.3261 11.9797 14.5921C12.0768 14.8581 12.1155 15.1419 12.0931 15.4242C12.0931 16.5388 12.0827 17.4346 12.0827 17.7158C12.0827 17.9346 12.2389 18.195 12.6556 18.1117C14.5295 17.4807 16.1182 16.2044 17.138 14.5104C18.1579 12.8165 18.5426 10.8153 18.2234 8.86393C17.9043 6.91261 16.902 5.13821 15.3956 3.8575C13.8892 2.57678 11.9766 1.8731 9.99937 1.87207V1.87207Z" fill="white"></path></svg>Star 14.6k</div></a><a class="_button_2yhrd_17 _gradient_2yhrd_97 _small_2yhrd_84 _cta_1knp4_50 _hideOnMobile_1knp4_162" data-ai-id="cloud" href="https://cloud.logto.io" target="_blank" rel="noopener"><div class="_children_2yhrd_129">Sign in</div></a><a class="_button_2yhrd_17 _primary_2yhrd_89 _small_2yhrd_84 _cta_1knp4_50 _hideOnMobile_1knp4_162 _primaryCta_1knp4_63" data-ai-id="cloud" href="https://cloud.logto.io?sign_up=true" target="_blank" rel="noopener"><div class="_children_2yhrd_129">Get started</div></a></div><svg viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg" class="_icon_1knp4_122"><rect x="4" y="5" width="16" height="2" rx="1" fill="#F7F8F8"></rect><rect x="4" y="11" width="16" height="2" rx="1" fill="#F7F8F8"></rect><rect x="4" y="17" width="16" height="2" rx="1" fill="#F7F8F8"></rect></svg></div></nav><section class="_section_l33ty_17 _topSection_1ejq1_23"><div class="_contentWrapper_l33ty_30"><img src="/assets/background-01IHsg45.jpg" class="_backgroundImage_10sjc_17" alt="background"/><div class="_banner_1xcpl_17"><header class="_wrapper_1xcpl_47"><h1 class="_title_1xcpl_80">Account settings with step-up verification</h1><p class="_subtitle_1xcpl_81">Customize your end-user account experience with Logtoâs APIs. Empower users to securely manage federated identities, authentication methods, and third-party connections across applications.</p><div class="_buttons_1xcpl_118"><a class="_button_2yhrd_17 _primary_2yhrd_89 _large_2yhrd_77" href="https://cloud.logto.io?sign_up=true" target="_blank" rel="noopener"><div class="_children_2yhrd_129">Get started</div></a><a class="_button_2yhrd_17 _gradient_2yhrd_97 _large_2yhrd_77" href="/contact?src=banner.account-center" data-discover="true"><div class="_children_2yhrd_129">Contact us</div></a></div></header><div class="_imageWrapper_1xcpl_48"><img src="/assets/logto-account-center-04Qq3JGL.webp" alt="banner"/></div></div></div></section><section class="_section_l33ty_17 _light_l33ty_26"><div class="_contentWrapper_l33ty_30"><h2 class="_headline_1e3w8_17 _light_1e3w8_26">Self-serve account management</h2><p class="_subtitle_1e3w8_30 _light_1e3w8_26">Give users control while enforcing security policies.</p><div class="_carouselContainer_1uh62_17"><div class="_description_1uh62_38"><div class="_title_1uh62_72">Profile & Account settings</div><div class="_subtitle_1uh62_86">Flexibly add, update, or remove authentication methods under strict sign-in/sign-up rules, maintaining accessibility without losing necessary authentication factors.</div><div class="_container_12e3b_17"><div role="button" tabindex="0" class="_button_12e3b_23 _active_12e3b_57"><span class="_dot_12e3b_45"></span>Update identifiers</div><div role="button" tabindex="0" class="_button_12e3b_23"><span class="_dot_12e3b_45"></span>Set a password</div><div role="button" tabindex="0" class="_button_12e3b_23"><span class="_dot_12e3b_45"></span>Link social accounts</div><div role="button" tabindex="0" class="_button_12e3b_23"><span class="_dot_12e3b_45"></span>Enterprise SSO accounts</div><div role="button" tabindex="0" class="_button_12e3b_23"><span class="_dot_12e3b_45"></span>Add passkeys</div><div role="button" tabindex="0" class="_button_12e3b_23"><span class="_dot_12e3b_45"></span>Add authenticator app</div><div role="button" tabindex="0" class="_button_12e3b_23"><span class="_dot_12e3b_45"></span>Generate backup codes</div><div role="button" tabindex="0" class="_button_12e3b_23"><span class="_dot_12e3b_45"></span>Create personal access token</div><div role="button" tabindex="0" class="_button_12e3b_23"><span class="_dot_12e3b_45"></span>Edit profile</div><div role="button" tabindex="0" class="_button_12e3b_23"><span class="_dot_12e3b_45"></span>Delete account</div></div><a class="_button_2yhrd_17 _secondary_2yhrd_104 _learnMoreButton_1uh62_106" href="https://docs.logto.io/end-user-flows/account-settings" target="_blank" rel="noopener"><div class="_children_2yhrd_129">Learn more</div></a></div>
1<div class="_carouselImages_1uh62_97 _figure_dhdc2_17"><div class="_blur_dhdc2_26"></div><div class="_wrapper_304fe_17" style="opacity:1"><img class="_image_304fe_39" src="/assets/update-email-CsuxJmtk.webp" alt="/assets/update-email-CsuxJmtk.webp"/></div><div class="_wrapper_304fe_17" style="opacity:0"><img class="_image_304fe_39" src="/assets/set-a-password-CNLqoyKC.webp" alt="/assets/set-a-password-CNLqoyKC.webp"/></div><div class="_wrapper_304fe_17" style="opacity:0"><img class="_image_304fe_39" src="/assets/link-social-accounts-BY2yNdAC.webp" alt="/assets/link-social-accounts-BY2yNdAC.webp"/></div><div class="_wrapper_304fe_17" style="opacity:0"><img class="_image_304fe_39" src="/assets/enterprise-sso-accounts-Bt2JM7wH.webp" alt="/assets/enterprise-sso-accounts-Bt2JM7wH.webp"/></div><div class="_wrapper_304fe_17" style="opacity:0"><img class="_image_304fe_39" src="/assets/add-passkeys-9xwOsW6Q.webp" alt="/assets/add-passkeys-9xwOsW6Q.webp"/></div><div class="_wrapper_304fe_17" style="opacity:0"><img class="_image_304fe_39" src="/assets/add-authenticator-app-otp-tgmh0BQd.webp" alt="/assets/add-authenticator-app-otp-tgmh0BQd.webp"/></div><div class="_wrapper_304fe_17" style="opacity:0"><img class="_image_304fe_39" src="/assets/generate-backup-codes-BLtVi8i9.webp" alt="/assets/generate-backup-codes-BLtVi8i9.webp"/></div><div class="_wrapper_304fe_17" style="opacity:0"><img class="_image_304fe_39" src="/assets/create-personal-access-token-CqsoQTr-.webp" alt="/assets/create-personal-access-token-CqsoQTr-.webp"/></div><div class="_wrapper_304fe_17" style="opacity:0"><img class="_image_304fe_39" src="/assets/edit-profile-GPke5G1s.webp" alt="/assets/edit-profile-GPke5G1s.webp"/></div><div class="_wrapper_304fe_17" style="opacity:0"><img class="_image_304fe_39" src="/assets/delete-account-YziHPLxy.webp" alt="/assets/delete-account-YziHPLxy.webp"/></div></div></div><div class="_container_13mfb_17 _hasBlurBackground_13mfb_131"><div class="_imageWrapper_13mfb_33"><img src="/assets/step-up-verification-BmIGiEbV.webp" alt="figure"/></div><div class="_textWrapper_13mfb_34"><h3 class="_title_13mfb_69">Step-up security verification</h3><div class="_subtitleAndBullets_13mfb_86"><p class="_subtitle_13mfb_75">Require instant identity reconfirmation before high-risk actions (e.g., auth method changes, sensitive data access). Verify legitimate users initiate critical operations.</p><ul class="_bullets_1q8ws_17"><li class="_bullet_1q8ws_17"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Solid / check circle"><circle id="Ellipse 136" cx="10" cy="10" r="8" fill="white"></circle><path id="Vector" d="M10.0001 1.66663C5.41675 1.66663 1.66675 5.41663 1.66675 9.99996C1.66675 14.5833 5.41675 18.3333 10.0001 18.3333C14.5834 18.3333 18.3334 14.5833 18.3334 9.99996C18.3334 5.41663 14.5834 1.66663 10.0001 1.66663ZM13.5001 8.58329L9.50008 12.5833C9.16675 12.9166 8.66675 12.9166 8.33342 12.5833L6.50008 10.75C6.16675 10.4166 6.16675 9.91663 6.50008 9.58329C6.83342 9.24996 7.33342 9.24996 7.66675 9.58329L8.91675 10.8333L12.3334 7.41663C12.6667 7.08329 13.1667 7.08329 13.5001 7.41663C13.8334 7.74996 13.8334 8.24996 13.5001 8.58329Z" fill="#7958FF"></path></g></svg><span>Verify email address</span></li><li class="_bullet_1q8ws_17"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Solid / check circle"><circle id="Ellipse 136" cx="10" cy="10" r="8" fill="white"></circle><path id="Vector" d="M10.0001 1.66663C5.41675 1.66663 1.66675 5.41663 1.66675 9.99996C1.66675 14.5833 5.41675 18.3333 10.0001 18.3333C14.5834 18.3333 18.3334 14.5833 18.3334 9.99996C18.3334 5.41663 14.5834 1.66663 10.0001 1.66663ZM13.5001 8.58329L9.50008 12.5833C9.16675 12.9166 8.66675 12.9166 8.33342 12.5833L6.50008 10.75C6.16675 10.4166 6.16675 9.91663 6.50008 9.58329C6.83342 9.24996 7.33342 9.24996 7.66675 9.58329L8.91675 10.8333L12.3334 7.41663C12.6667 7.08329 13.1667 7.08329 13.5001 7.41663C13.8334 7.74996 13.8334 8.24996 13.5001 8.58329Z" fill="#7958FF"></path></g></svg><span>
1Verify phone number</span></li><li class="_bullet_1q8ws_17"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Solid / check circle"><circle id="Ellipse 136" cx="10" cy="10" r="8" fill="white"></circle><path id="Vector" d="M10.0001 1.66663C5.41675 1.66663 1.66675 5.41663 1.66675 9.99996C1.66675 14.5833 5.41675 18.3333 10.0001 18.3333C14.5834 18.3333 18.3334 14.5833 18.3334 9.99996C18.3334 5.41663 14.5834 1.66663 10.0001 1.66663ZM13.5001 8.58329L9.50008 12.5833C9.16675 12.9166 8.66675 12.9166 8.33342 12.5833L6.50008 10.75C6.16675 10.4166 6.16675 9.91663 6.50008 9.58329C6.83342 9.24996 7.33342 9.24996 7.66675 9.58329L8.91675 10.8333L12.3334 7.41663C12.6667 7.08329 13.1667 7.08329 13.5001 7.41663C13.8334 7.74996 13.8334 8.24996 13.5001 8.58329Z" fill="#7958FF"></path></g></svg><span>Verify password</span></li></ul></div><div class="_buttons_13mfb_178"><a class="_button_2yhrd_17 _secondary_2yhrd_104 _button_13mfb_178" href="https://docs.logto.io/end-user-flows/security-verification" target="_blank" rel="noopener"><div class="_children_2yhrd_129">Learn more</div></a></div></div></div><div class="_container_13mfb_17 _hasBlurBackground_13mfb_131 _reversed_13mfb_119"><div class="_imageWrapper_13mfb_33"><img src="/assets/logto-api-account-centers-C3OjdvAk.webp" alt="figure"/></div><div class="_textWrapper_13mfb_34"><h3 class="_title_13mfb_69">Custom account centers via Logto APIs</h3><div class="_subtitleAndBullets_13mfb_86"><p class="_subtitle_13mfb_75">Build secure, branded account management interfaces using:</p><ul class="_bullets_1q8ws_17"><li class="_bullet_1q8ws_17"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Solid / check circle"><circle id="Ellipse 136" cx="10" cy="10" r="8" fill="white"></circle><path id="Vector" d="M10.0001 1.66663C5.41675 1.66663 1.66675 5.41663 1.66675 9.99996C1.66675 14.5833 5.41675 18.3333 10.0001 18.3333C14.5834 18.3333 18.3334 14.5833 18.3334 9.99996C18.3334 5.41663 14.5834 1.66663 10.0001 1.66663ZM13.5001 8.58329L9.50008 12.5833C9.16675 12.9166 8.66675 12.9166 8.33342 12.5833L6.50008 10.75C6.16675 10.4166 6.16675 9.91663 6.50008 9.58329C6.83342 9.24996 7.33342 9.24996 7.66675 9.58329L8.91675 10.8333L12.3334 7.41663C12.6667 7.08329 13.1667 7.08329 13.5001 7.41663C13.8334 7.74996 13.8334 8.24996 13.5001 8.58329Z" fill="#7958FF"></path></g></svg><span>Account API (Recommended):Â Direct end-user access with granular permissions.</span></li><li class="_bullet_1q8ws_17"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Solid / check circle"><circle id="Ellipse 136" cx="10" cy="10" r="8" fill="white"></circle><path id="Vector" d="M10.0001 1.66663C5.41675 1.66663 1.66675 5.41663 1.66675 9.99996C1.66675 14.5833 5.41675 18.3333 10.0001 18.3333C14.5834 18.3333 18.3334 14.5833 18.3334 9.99996C18.3334 5.41663 14.5834 1.66663 10.0001 1.66663ZM13.5001 8.58329L9.50008 12.5833C9.16675 12.9166 8.66675 12.9166 8.33342 12.5833L6.50008 10.75C6.16675 10.4166 6.16675 9.91663 6.50008 9.58329C6.83342 9.24996 7.33342 9.24996 7.66675 9.58329L8.91675 10.8333L12.3334 7.41663C12.6667 7.08329 13.1667 7.08329 13.5001 7.41663C13.8334 7.74996 13.8334 8.24996 13.5001 8.58329Z" fill="#7958FF"></path></g></svg><span>Management API: Full developer control for custom implementations.</span></li></ul></div><div class="_buttons_13mfb_178"><a class="_button_2yhrd_17 _secondary_2yhrd_104 _button_13mfb_178" href="https://docs.logto.io/end-user-flows#account-flows" target="_blank" rel="noopener"><div class="_children_2yhrd_129">Learn more</div></a><a class="_button_2yhrd_17 _secondary_2yhrd_104 _button_13mfb_178" href="https://openapi.logto.io/group/endpoint-account-center" target="_blank" rel="noopener"><div class="_children_2yhrd_129">Check API doc</div></a></div></div></div></div></section><section class="_section_l33ty_17"><div class="_contentWrapper_l33ty_30"><img src="/assets/background-01IHsg45.jpg" class="_backgroundImage_10sjc_17" alt="background"/><h2 class="_headline_1e3w8_17">What makes Logto the preferred choice?</h2><p class="_subtitle_1e3w8_30">
1Security and efficiency engineered for modern apps.</p><div class="_grid_1ejq1_47"><div class="_card_17puh_76"><div class="_wrapper_17puh_118"><h3 class="_title_17puh_23">Account API for rapid integration</h3></div><ul class="_bullets_1q8ws_17"><li class="_bullet_1q8ws_17 _bullet_17puh_72"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Solid / check circle"><circle id="Ellipse 136" cx="10" cy="10" r="8" fill="white"></circle><path id="Vector" d="M10.0001 1.66663C5.41675 1.66663 1.66675 5.41663 1.66675 9.99996C1.66675 14.5833 5.41675 18.3333 10.0001 18.3333C14.5834 18.3333 18.3334 14.5833 18.3334 9.99996C18.3334 5.41663 14.5834 1.66663 10.0001 1.66663ZM13.5001 8.58329L9.50008 12.5833C9.16675 12.9166 8.66675 12.9166 8.33342 12.5833L6.50008 10.75C6.16675 10.4166 6.16675 9.91663 6.50008 9.58329C6.83342 9.24996 7.33342 9.24996 7.66675 9.58329L8.91675 10.8333L12.3334 7.41663C12.6667 7.08329 13.1667 7.08329 13.5001 7.41663C13.8334 7.74996 13.8334 8.24996 13.5001 8.58329Z" fill="#7958FF"></path></g></svg><span>End-user-facing APIs with minimal integration effort</span></li><li class="_bullet_1q8ws_17 _bullet_17puh_72"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Solid / check circle"><circle id="Ellipse 136" cx="10" cy="10" r="8" fill="white"></circle><path id="Vector" d="M10.0001 1.66663C5.41675 1.66663 1.66675 5.41663 1.66675 9.99996C1.66675 14.5833 5.41675 18.3333 10.0001 18.3333C14.5834 18.3333 18.3334 14.5833 18.3334 9.99996C18.3334 5.41663 14.5834 1.66663 10.0001 1.66663ZM13.5001 8.58329L9.50008 12.5833C9.16675 12.9166 8.66675 12.9166 8.33342 12.5833L6.50008 10.75C6.16675 10.4166 6.16675 9.91663 6.50008 9.58329C6.83342 9.24996 7.33342 9.24996 7.66675 9.58329L8.91675 10.8333L12.3334 7.41663C12.6667 7.08329 13.1667 7.08329 13.5001 7.41663C13.8334 7.74996 13.8334 8.24996 13.5001 8.58329Z" fill="#7958FF"></path></g></svg><span>Admins have full, global control over user access</span></li><li class="_bullet_1q8ws_17 _bullet_17puh_72"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Solid / check circle"><circle id="Ellipse 136" cx="10" cy="10" r="8" fill="white"></circle><path id="Vector" d="M10.0001 1.66663C5.41675 1.66663 1.66675 5.41663 1.66675 9.99996C1.66675 14.5833 5.41675 18.3333 10.0001 18.3333C14.5834 18.3333 18.3334 14.5833 18.3334 9.99996C18.3334 5.41663 14.5834 1.66663 10.0001 1.66663ZM13.5001 8.58329L9.50008 12.5833C9.16675 12.9166 8.66675 12.9166 8.33342 12.5833L6.50008 10.75C6.16675 10.4166 6.16675 9.91663 6.50008 9.58329C6.83342 9.24996 7.33342 9.24996 7.66675 9.58329L8.91675 10.8333L12.3334 7.41663C12.6667 7.08329 13.1667 7.08329 13.5001 7.41663C13.8334 7.74996 13.8334 8.24996 13.5001 8.58329Z" fill="#7958FF"></path></g></svg><span>Complete UI customization using your components</span></li></ul></div><div class="_card_17puh_76"><div class="_wrapper_17puh_118"><h3 class="_title_17puh_23">Intelligent secure guardrails</h3></div><ul class="_bullets_1q8ws_17"><li class="_bullet_1q8ws_17 _bullet_17puh_72"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Solid / check circle"><circle id="Ellipse 136" cx="10" cy="10" r="8" fill="white"></circle><path id="Vector" d="M10.0001 1.66663C5.41675 1.66663 1.66675 5.41663 1.66675 9.99996C1.66675 14.5833 5.41675 18.3333 10.0001 18.3333C14.5834 18.3333 18.3334 14.5833 18.3334 9.99996C18.3334 5.41663 14.5834 1.66663 10.0001 1.66663ZM13.5001 8.58329L9.50008 12.5833C9.16675 12.9166 8.66675 12.9166 8.33342 12.5833L6.50008 10.75C6.16675 10.4166 6.16675 9.91663 6.50008 9.58329C6.83342 9.24996 7.33342 9.24996 7.66675 9.58329L8.91675 10.8333L12.3334 7.41663C12.6667 7.08329 13.1667 7.08329 13.5001 7.41663C13.8334 7.74996 13.8334 8.24996 13.5001 8.58329Z" fill="#7958FF"></path></g></svg><span>Set contextual step-up verification rules</span></li><li class="_bullet_1q8ws_17 _bullet_17puh_72"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Solid / check circle"><circle id="Ellipse 136" cx="10" cy="10" r="8" fill="white"></circle><path id="Vector" d="M10.0001 1.66663C5.41675 1.66663 1.66675 5.41663 1.66675 9.99996C1.66675 14.5833 5.41675 18.3333 10.0001 18.3333C14.5834 18.3333 18.3334 14.5833 18.3334 9.99996C18.3334 5.41663 14.5834 1.66663 10.0001 1.66663ZM13.5001 8.58329L9.50008 12.5833C9.16675 12.9166 8.66675 12.9166 8.33342 12.5833L6.50008 10.75C6.16675 10.4166 6.16675 9.91663 6.50008 9.58329C6.83342 9.24996 7.33342 9.24996 7.66675 9.58329L8.91675 10.8333L12.3334 7.41663C12.6667 7.08329 13.1667 7.08329 13.5001 7.41663C13.8334 7.74996 13.8334 8.24996 13.5001 8.58329Z" fill="#7958FF"></path></g></svg><span>Mandatory re-authentication for auth method changes</span></li><li class="_bullet_1q8ws_17 _bullet_17puh_72"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Solid / check circle"><circle id="Ellipse 136" cx="10" cy="10" r="8" fill="white"></circle><path id="Vector" d="M10.0001 1.66663C5.41675 1.66663 1.66675 5.41663 1.66675 9.99996C1.66675 14.5833 5.41675 18.3333 10.0001 18.3333C14.5834 18.3333 18.3334 14.5833 18.3334 9.99996C18.3334 5.41663 14.5834 1.66663 10.0001 1.66663ZM13.5001 8.58329L9.50008 12.5833C9.16675 12.9166 8.66675 12.9166 8.33342 12.5833L6.50008 10.75C6.16675 10.4166 6.16675 9.91663 6.50008 9.58329C6.83342 9.24996 7.33342 9.24996 7.66675 9.58329L8.91675 10.8333L12.3334 7.41663C12.6667 7.08329 13.1667 7.08329 13.5001 7.41663C13.8334 7.74996 13.8334 8.24996 13.5001 8.58329Z" fill="#7958FF"></path></g></svg><span>Time-bound sessions balancing security and UX</span></li></ul></div></div></div></section><section class="_section_l33ty_17 _light_l33ty_26"><div class="_contentWrapper_l33ty_30"><h2 class="_headline_1e3w8_17 _light_1e3w8_26">Is a prebuilt account center available?</h2><div class="_questions_1mhfn_17"><div class="_question_1mhfn_17"><div class="_wrapper_1mhfn_33" role="button" tabindex="0"><svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19 11H13V5C13 4.73478 12.8946 4.48043 12.7071 4.29289C12.5196 4.10536 12.2652 4 12 4C11.7348 4 11.4804 4.10536 11.2929 4.29289C11.1054 4.48043 11 4.73478 11 5V11H5C4.73478 11 4.48043 11.1054 4.29289 11.2929C4.10536 11.4804 4 11.7348 4 12C4 12.2652 4.10536 12.5196 4.29289 12.7071C4.48043 12.8946 4.73478 13 5 13H11V19C11 19.2652 11.1054 19.5196 11.2929 19.7071C11.4804 19.8946 11.7348 20 12 20C12.2652 20 12.5196 19.8946 12.7071 19.7071C12.8946 19.5196 13 19.2652 13 19V13H19C19.2652 13 19.5196 12.8946 19.7071 12.7071C19.8946 12.5196 20 12.2652 20 12C20 11.7348 19.8946 11.4804 19.7071 11.2929C19.5196 11.1054 19.2652 11 19 11Z" fill="#747778"></path></svg><h3>Is centralized identity system necessary for single-app business?</h3></div><div aria-hidden="true" class="rah-static rah-static--height-zero " style="height:0;overflow:hidden"><div style="transition:opacity 300ms ease 0ms;-webkit-transition:opacity 300ms ease 0ms;opacity:0"><div class="_answer_1mhfn_61">While Logto currently provides no out-of-box UI, use our Account API to build account management directly into your UI, enabling profile/authentication/social/MFA controls with full brand consistency. Bypass Management API complexity for faster integration.</div></div></div></div></div></div></section><section class="_section_l33ty_17 _section_t9tbb_1"><div class="_contentWrapper_l33ty_30"><h2 class="_headline_1e3w8_17">Unlock more with Logto Cloud</h2><p class="_subtitle_1e3w8_30 _subtitle_t9tbb_12">Build secure, branded account experiences in minutes. No compromise on security or customization.</p><div style="opacity:0;transform:translateY(100%) scale(2)"><svg xmlns="http://www.w3.org/2000/svg" fill="none" id="svg-892913766_1091" viewBox="0 0 866 153"><path fill="#FAABFF" d="M176.793 64h8v8h-8z"></path><path fill="#F07EFF" d="m857.973 52.644 7.177 3.535-3.535 7.177-7.177-3.535z"></path><path fill="#F4E560" d="m616.676 7.344 5.775 5.537-5.537 5.774-5.775-5.537z"></path><circle cx="293.793" cy="4" r="4" fill="#AF9EFF"></circle><circle cx="476.793" cy="28" r="3" stroke="#E0E3E3" stroke-width="2"></circle><circle cx="247.793" cy="137" r="3" stroke="#E0E3E3" stroke-width="2"></circle><path d="M384.793 44a8 8 0 0 1 8-8" stroke="#E0E3E3" stroke-width="2"></path><path d="m122.677 141.012.332-.037a4.574 4.574 0 0 0 3.782-2.975 4.577 4.577 0 0 1 3.783-2.975l.331-.037m534.127-95.526.29-.167a4.576 4.576 0 0 0 2.29-4.232 4.576 4.576 0 0 1 2.29-4.232l.29-.166" stroke="#8DF637" stroke-width="2"></path><path d="M757.345 113.562a5.657 5.657 0 0 0 2.667 7.542 5.657 5.657 0 0 1 2.667 7.543M48.628 71.386a5.657 5.657 0 0 0 7.602 2.49 5.657 5.657 0 0 1 7.603 2.49" stroke="#FAABFF" stroke-width="2"></path><path d="M3.813 136.251a5.657 5.657 0 0 0 2.42 7.625 5.657 5.657 0 0 1 2.42 7.625" stroke="#68BE6C" stroke-width="2"></path></svg></div><div class="_actions_euvm5_1"><a class="_button_2yhrd_17 _primary_2yhrd_89 _large_2yhrd_77" href="https://cloud.logto.io?sign_up=true" target="_blank" rel="noopener"><div class="_children_2yhrd_129">Get started free</div></a><a class="_button_2yhrd_17 _gradient_2yhrd_97 _large_2yhrd_77" href="/contact?src=products.account_center" data-discover="true"><div class="_children_2yhrd_129">Contact us</div></a></div></div></section><nav data-ai-stop-here="true" data-ai-id="footer" aria-label="Footer" class="_container_12jdn_17"><div class="_content_12jdn_25"><div class="_wrapper_12jdn_30"><aside class="_subscribeUs_ffbfx_17"><div class="_title_ffbfx_34">Subscribe Logto newsletters</div><div class="_subtitle_ffbfx_40">Stay on top of the latest product updates, development inspirations, blogs, and research prompt.</div><form><div class="_field_ufhs4_17"><div class="_headline_ufhs4_21"><div class="_title_ufhs4_26">Email address</div><span class="_spacer_1p9az_1"></span></div><div><div class="_container_bg1mj_22"><input type="text" placeholder="Enter email address" name="email"/></div></div></div><button class="_button_2yhrd_17 _primary_2yhrd_89 _button_ffbfx_45" type="button"><div class="_children_2yhrd_129">Subscribe</div></button></form><div class="_socialIcons_ffbfx_49"><a rel="noopener" aria-label="Discord" href="https://discord.com/invite/UEPaF3j5e6" target="_blank"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M16.9308 3.26368C15.6561 2.67878 14.2892 2.24785 12.8599 2.00104C12.8339 1.99627 12.8079 2.00818
112.7945 2.03198C12.6187 2.34466 12.4239 2.75258 12.2876 3.0732C10.7503 2.84306 9.22099 2.84306 7.71527 3.0732C7.57887 2.74545 7.37707 2.34466 7.20048 2.03198C7.18707 2.00897 7.16107 1.99707 7.13504 2.00104C5.70659 2.24706 4.33963 2.67799 3.06411 3.26368C3.05307 3.26844 3.04361 3.27638 3.03732 3.28669C0.444493 7.16033 -0.265792 10.9387 0.0826501 14.6703C0.0842267 14.6886 0.0944749 14.706 0.108665 14.7171C1.81934 15.9734 3.47642 16.7361 5.10273 17.2416C5.12876 17.2496 5.15634 17.24 5.1729 17.2186C5.55761 16.6933 5.90054 16.1393 6.19456 15.5568C6.21192 15.5227 6.19535 15.4822 6.15989 15.4687C5.61594 15.2624 5.098 15.0108 4.59978 14.7251C4.56037 14.7021 4.55721 14.6457 4.59347 14.6187C4.69831 14.5402 4.80318 14.4584 4.9033 14.3759C4.92141 14.3608 4.94665 14.3576 4.96794 14.3671C8.24107 15.8615 11.7846 15.8615 15.0191 14.3671C15.0404 14.3568 15.0657 14.36 15.0846 14.3751C15.1847 14.4576 15.2896 14.5402 15.3952 14.6187C15.4314 14.6457 15.4291 14.7021 15.3897 14.7251C14.8914 15.0163 14.3735 15.2624 13.8288 15.4679C13.7933 15.4814 13.7775 15.5227 13.7949 15.5568C14.0952 16.1385 14.4381 16.6924 14.8157 17.2178C14.8315 17.24 14.8599 17.2496 14.8859 17.2416C16.5201 16.7361 18.1772 15.9734 19.8879 14.7171C19.9028 14.706 19.9123 14.6894 19.9139 14.6711C20.3309 10.357 19.2154 6.60956 16.9568 3.28748C16.9513 3.27638 16.9419 3.26844 16.9308 3.26368ZM6.68335 12.3982C5.69792 12.3982 4.88594 11.4935 4.88594 10.3824C4.88594 9.27134 5.68217 8.36664 6.68335 8.36664C7.69239 8.36664 8.49651 9.27928 8.48073 10.3824C8.48073 11.4935 7.68451 12.3982 6.68335 12.3982ZM13.329 12.3982C12.3435 12.3982 11.5316 11.4935 11.5316 10.3824C11.5316 9.27134 12.3278 8.36664 13.329 8.36664C14.338 8.36664 15.1421 9.27928 15.1264 10.3824C15.1264 11.4935 14.338 12.3982 13.329 12.3982Z" fill="currentColor"></path></svg></a><a rel="noopener" aria-label="GitHub" href="https://github.com/logto-io/logto" target="_blank"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M9.99996 0C7.62545 9.84646e-05 5.32845 0.845108 3.51997 2.38383C1.71148 3.92255 0.509525 6.05458 0.12916 8.39842C-0.251206 10.7423 0.214844 13.145 1.44392 15.1766C2.67299 17.2083 4.58488 18.7364 6.8375 19.4874C7.3375 19.5749 7.52499 19.2749 7.52499 19.0124C7.52499 18.7749 7.51248 17.9874 7.51248 17.1499C4.99999 17.6124 4.35 16.5374 4.15 15.9749C3.92808 15.4278 3.57628 14.943 3.12501 14.5624C2.77501 14.3749 2.27501 13.9124 3.1125 13.8999C3.43228 13.9346 3.73899 14.0459 4.00663 14.2243C4.27427 14.4027 4.49496 14.643 4.64999 14.9249C4.78676 15.1706 4.97067 15.3869 5.19118 15.5614C5.41169 15.7359 5.66446 15.8651 5.93502 15.9418C6.20557 16.0184 6.48859 16.0409 6.76786 16.008C7.04712 15.9751 7.31715 15.8873 7.56245 15.7499C7.60574 15.2415 7.83231 14.7662 8.19997 14.4124C5.97499 14.1624 3.65 13.2999 3.65 9.47496C3.63595 8.48112 4.00268 7.51955 4.67499 6.78748C4.36928 5.92371 4.40505 4.97578 4.77499 4.1375C4.77499 4.1375 5.61246 3.87499 7.52497 5.16249C9.16125 4.71247 10.8887 4.71247 12.5249 5.16249C14.4374 3.8625 15.2749 4.1375 15.2749 4.1375C15.6449 4.97577 15.6807 5.92372 15.3749 6.78748C16.0493 7.5183 16.4163 8.4807 16.3999 9.47496C16.3999 13.3124 14.0624 14.1624 11.8374 14.4124C12.0761 14.6543 12.2599 14.9447 12.3764 15.2639C12.4928 15.5831 12.5392 15.9237 12.5124 16.2624C12.5124 17.5999 12.4999 18.6749 12.4999 19.0124C12.4999 19.2749 12.6874 19.5874 13.1874 19.4874C15.4361 18.7303 17.3425 17.1986 18.5663 15.1659C19.7901 13.1332 20.2518 10.7318 19.8688 8.39018C19.4858 6.0486 18.2831 3.91934 16.4754 2.38249C14.6677 0.845644 12.3726 0.0012349 9.99996 0V0Z" fill="currentColor"></path></svg></a><a rel="noopener" aria-label="X (Twitter)" href="https://x.com/logto_io" target="_blank"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Social Icon 24x24"><path id="Vector" d="M6.28978 18.0723C13.8373 18.0723 17.9648 11.8195 17.9648 6.39725C17.9648 6.21967 17.9612 6.04289 17.9532 5.86685C18.7562 5.28577 19.4493 4.56626 20 3.74205C19.2648 4.06889 18.4736 4.28889 17.6437 4.38808C18.4908 3.88003 19.1412 3.07649 19.448 2.11851C18.6425 2.59638 17.7613 2.93322 16.8424 3.11454C16.0936 2.31697 15.0277 1.81812 13.8472 1.81812C11.5812 1.81812 9.74363 3.65574 9.74363 5.92088C9.74363 6.24289 9.77967 6.5561 9.85007 6.8565C6.43971 6.68489 3.41566 5.0521 1.39179 2.56931C1.02728 3.19547 0.835541 3.90717 0.836163 4.6317C0.836163 6.05531 1.56058 7.31207 2.66218 8.04729C2.01058 8.02742 1.37327 7.85141 0.803815 7.53408C0.803211 7.55133 0.803211 7.5681 0.803211 7.58649C0.803211 9.57371 2.21762 11.2329 4.09518 11.6089C3.74254 11.7049 3.37867 11.7535 3.01318 11.7533C2.75435 11.7531 2.49612 11.7283 2.24198 11.6793C2.76439 13.3096 4.2792 14.4961 6.07515 14.5292C4.67074 15.63 2.90157 16.2856 0.978779 16.2856C0.647978 16.2856 0.321204 16.2668 0 16.2289C1.81602 17.3929 3.97236 18.0721 6.28998 18.0721" fill="currentColor"></path></g></svg></a><a rel="noopener" aria-label="Email" href="/contact?src=footer" target="_blank" data-discover="true"><svg width="20" height="18" viewBox="0 0 20 18" fill="none" xmlns="http://www.w3.org/2000/svg"><path id="Subtract" fill-rule="evenodd" clip-rule="evenodd" d="M16.89 0.932679C16.4031 0.760462 15.8792 0.666748 15.3333 0.666748H4.66667C4.12127 0.666748 3.59773 0.760308 3.11122 0.932253L10.0008 7.82185L16.89 0.932679ZM10.0008 9.79051C10.2279 9.80194 10.4588 9.72093 10.6322 9.54749L18.3807 1.799C19.3723 2.65476 20 3.92079 20 5.33342V12.6667C20 15.2441 17.9107 17.3334 15.3333 17.3334H4.66667C2.08934 17.3334 0 15.2441 0 12.6667V5.33342C0 3.92037 0.628028 2.65402 1.62018 1.79824L9.36943 9.54749C9.54287 9.72093 9.77373 9.80194 10.0008 9.79051Z" fill="currentColor"></path></svg></a><a rel="noopener" aria-label="YouTube" href="https://www.youtube.com/@logto-io" target="_blank"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.1669 8.0919C19.2081 6.89911 18.9472 5.71524 18.4085 4.65023C18.043 4.21323 17.5358 3.91832 16.9752 3.8169C14.6565 3.6065 12.3281 3.52027 10.0002 3.55856C7.68072 3.51853 5.36078 3.60198 3.05019 3.80856C2.59337 3.89166 2.17062 4.10593 1.83352 4.42523C1.08352 5.1169 1.00019 6.30023 0.916852 7.30023C0.795945 9.0982 0.795945 10.9023 0.916852 12.7002C0.94096 13.2631 1.02476 13.8218 1.16685 14.3669C1.26733 14.7878 1.47062 15.1772 1.75852 15.5002C2.09791 15.8364 2.53051 16.0629 3.00019 16.1502C4.79678 16.372 6.60703 16.4639 8.41685 16.4252C11.3335 16.4669
113.8919 16.4252 16.9169 16.1919C17.3981 16.1099 17.8428 15.8832 18.1919 15.5419C18.4252 15.3085 18.5994 15.0228 18.7002 14.7086C18.9982 13.7941 19.1446 12.837 19.1335 11.8752C19.1669 11.4086 19.1669 8.5919 19.1669 8.0919ZM8.11685 12.3752V7.2169L13.0502 9.80856C11.6669 10.5752 9.84185 11.4419 8.11685 12.3752Z" fill="currentColor"></path></svg></a></div></aside><div class="_navigationLinks_100h6_17"><section><header>Products</header><div class="_content_100h6_30"><a class="_item_100h6_35" data-ai-id="passwordless" tabindex="0" rel="noopener" href="/products/passwordless" target="_self" data-discover="true"><span>Passwordless</span></a><a class="_item_100h6_35" data-ai-id="password" tabindex="0" rel="noopener" href="/products/password" target="_self" data-discover="true"><span>Password</span></a><a class="_item_100h6_35" data-ai-id="social" tabindex="0" rel="noopener" href="/products/social-sign-in" target="_self" data-discover="true"><span>Social sign-in</span></a><a class="_item_100h6_35" data-ai-id="enterprise-sso" tabindex="0" rel="noopener" href="/products/enterprise-sso" target="_self" data-discover="true"><span>Enterprise SSO</span></a><a class="_item_100h6_35" data-ai-id="mfa" tabindex="0" rel="noopener" href="/products/mfa" target="_self" data-discover="true"><span>Multi-factor authentication</span></a><a class="_item_100h6_35" data-ai-id="m2m" tabindex="0" rel="noopener" href="/products/machine-to-machine" target="_self" data-discover="true"><span>Machine-to-machine</span></a><a class="_item_100h6_35" data-ai-id="security" tabindex="0" rel="noopener" href="/products/security" target="_self" data-discover="true"><span>Security</span></a><a class="_item_100h6_35" data-ai-id="rbac" tabindex="0" rel="noopener" href="/products/rbac" target="_self" data-discover="true"><span>Authorization</span></a><a class="_item_100h6_35" data-ai-id="organizations" tabindex="0" rel="noopener" href="/products/organizations" target="_self" data-discover="true"><span>Organizations (Multi-tenancy)</span></a><a class="_item_100h6_35" data-ai-id="user-management" tabindex="0" rel="noopener" href="/products/user-management" target="_self" data-discover="true"><span>User management</span></a><a class="_item_100h6_35" data-ai-id="secret-vault" tabindex="0" rel="noopener" href="/products/secret-vault" target="_self" data-discover="true"><span>Secret vault</span></a><a class="_item_100h6_35" data-ai-id="omni" tabindex="0" rel="noopener" href="/products/omni-sign-in" target="_self" data-discover="true"><span>Omni sign-in experience</span></a><a class="_item_100h6_35" data-ai-id="account-center" tabindex="0" rel="noopener" href="/products/account-center" target="_self" data-discover="true"><span>Account center</span></a><a class="_item_100h6_35" data-ai-id="idp" tabindex="0" rel="noopener" href="/products/idp" target="_self" data-discover="true"><span>Third-party apps (OAuth/OIDC)</span></a><a class="_item_100h6_35" data-ai-id="saml-app" tabindex="0" rel="noopener" href="/products/saml-app" target="_self" data-discover="true"><span>SAML apps</span></a><a class="_item_100h6_35" data-ai-id="protected-app" tabindex="0" rel="noopener" href="/products/protected-app" target="_self" data-discover="true"><span>Protected App (Non-SDK)</span></a></div></section><section><header>Pricing</header><div class="_content_100h6_30"><a class="_item_100h6_35" data-ai-id="pricing" tabindex="0" rel="noopener" href="/pricing" target="_self" data-discover="true"><span>Pricing plans</span></a></div></section><section><header>Solutions</header><div class="_content_100h6_30"><a class="_item_100h6_35" data-ai-id="consumer-app" tabindex="0" rel="noopener" href="/solutions/consumer-app" target="_self" data-discover="true"><span>Consumer apps</span></a><a class="_item_100h6_35" data-ai-id="saas" tabindex="0" rel="noopener" href="/solutions/saas-product" target="_self" data-discover="true"><span>SaaS products</span></a><a class="_item_100h6_35" data-ai-id="ai" tabindex="0" rel="noopener" href="/ai" target="_self" data-discover="true"><span>AI</span></a><a class="_item_100h6_35" data-ai-id="enterprise-ready" tabindex="0" rel="noopener" href="/solutions/enterprise-ready" target="_self" data-discover="true"><span>Enterprise-ready</span></a><a class="_item_100h6_35" data-ai-id="enterprises" tabindex="0" rel="noopener" href="/solutions/enterprises" target="_self" data-discover="true"><span>Enterprises</span></a><a class="_item_100h6_35" data-ai-id="multi-app-product" tabindex="0" rel="noopener" href="/solutions/multi-app-product" target="_self" data-discover="true"><span>Multi-app products</span></a><a class="_item_100h6_35" data-ai-id="b2b-b2c-unified" tabindex="0" rel="noopener" href="/solutions/b2b-b2c-unified" target="_self" data-discover="true"><span>B2B + B2C unified</span></a></div></section><section><header>Developers</header><div class="_content_100h6_30"><a href="https://docs.logto.io/introduction" class="_item_100h6_35" data-ai-id="docs" tabindex="0" target="_blank" rel="noopener"><span>Documentation</span><svg width="12" height="12" viewBox="0 0 12 12" fill="none" xmlns="http://www.w3.org/2000/svg" class=""><g id="User Interface / External Link"><path id="Vector" d="M8.99976 5.40976C8.86715 5.40976 8.73997 5.46243 8.6462 5.5562C8.55243 5.64997 8.49976 5.77715 8.49976 5.90976V9.49976C8.49976 9.63236 8.44708 9.75954 8.35331 9.85331C8.25954 9.94708 8.13236 9.99976 7.99976 9.99976H2.49976C2.36715 9.99976 2.23997 9.94708 2.1462 9.85331C2.05243 9.75954 1.99976 9.63236 1.99976 9.49976V3.99976C1.99976 3.86715 2.05243 3.73997 2.1462 3.6462C2.23997 3.55243 2.36715 3.49976 2.49976 3.49976H6.08976C6.22236 3.49976 6.34954 3.44708 6.44331 3.35331C6.53708 3.25954 6.58976 3.13236 6.58976 2.99976C6.58976 2.86715 6.53708 2.73997 6.44331 2.6462C6.34954 2.55243 6.22236 2.49976 6.08976 2.49976H2.49976C2.10193 2.49976 1.7204 2.65779 1.4391 2.9391C1.15779 3.2204 0.999756 3.60193 0.999756 3.99976V9.49976C0.999756 9.89758 1.15779 10.2791 1.4391 10.5604C1.7204 10.8417 2.10193 10.9998 2.49976 10.9998H7.99976C8.39758 10.9998 8.77911 10.8417 9.06042 10.5604C9.34172 10.2791 9.49976 9.89758 9.49976 9.49976V5.90976C9.49976 5.77715 9.44708 5.64997 9.35331 5.5562C9.25954 5.46243 9.13236 5.40976 8.99976 5.40976ZM10.9598 1.30976C10.909 1.18758 10.8119 1.09049 10.6898 1.03976C10.6296 1.01414 10.5651 1.00055 10.4998 0.999756H7.49976C7.36715 0.999756 7.23997 1.05243 7.1462 1.1462C7.05243 1.23997 6.99976 1.36715 6.99976 1.49976C6.99976 1.63236 7.05243 1.75954 7.1462 1.85331C7.23997 1.94708 7.36715 1.99976 7.49976 1.99976H9.29476L4.14476 7.14476C4.09789 7.19124 4.06069 7.24654 4.03531 7.30747C4.00993 7.3684 3.99686 7.43375 3.99686 7.49976C3.99686 7.56576 4.00993 7.63111 4.03531 7.69204C4.06069 7.75297 4.09789 7.80827 4.14476 7.85476C4.19124 7.90162 4.24654 7.93882 4.30747 7.9642C4.3684 7.98959 4.43375 8.00266 4.49976 8.00266C4.56576 8.00266 4.63111 7.98959 4.69204 7.9642C4.75297 7.93882 4.80827 7.90162 4.85476 7.85476L9.99976 2.70476V4.49976C9.99976 4.63236 10.0524 4.75954 10.1462 4.85331C10.24 4.94708 10.3671 4.99976 10.4998 4.99976C10.6324 4.99976 10.7595 4.94708 10.8533 4.85331C10.9471 4.75954 10.9998 4.63236 10.9998 4.49976V1.49976C10.999 1.43442 10.9854 1.36987 10.9598 1.30976Z" fill="currentColor"></path></g></svg></a><a href="https://openapi.logto.io/" class="_item_100h6_35" data-ai-id="api" tabindex="0" target="_blank" rel="noopener"><span>API references</span><svg width="12" height="12" viewBox="0 0 12 12" fill="none" xmlns="http://www.w3.org/2000/svg" class=""><g id="User Interface / External Link"><path id="Vector" d="M8.99976 5.40976C8.86715 5.40976 8.73997 5.46243 8.6462 5.5562C8.55243 5.64997 8.49976 5.77715 8.49976 5.90976V9.49976C8.49976 9.63236 8.44708 9.75954 8.35331 9.85331C8.25954 9.94708 8.13236 9.99976 7.99976 9.99976H2.49976C2.36715 9.99976 2.23997 9.94708 2.1462 9.85331C2.05243 9.75954 1.99976 9.63236 1.99976 9.49976V3.99976C1.99976 3.86715 2.05243 3.73997 2.1462 3.6462C2.23997 3.55243 2.36715 3.49976 2.49976 3.49976H6.08976C6.22236 3.49976 6.34954 3.44708 6.44331 3.35331C6.53708 3.25954 6.58976 3.13236 6.58976 2.99976C6.58976 2.86715 6.53708 2.73997 6.44331 2.6462C6.34954 2.55243 6.22236 2.49976 6.08976 2.49976H2.49976C2.10193 2.49976 1.7204 2.65779 1.4391 2.9391C1.15779 3.2204 0.999756 3.60193 0.999756 3.99976V9.49976C0.999756 9.89758 1.15779 10.2791 1.4391 10.5604C1.7204 10.8417 2.10193 10.9998 2.49976 10.9998H7.99976C8.39758 10.9998 8.77911 10.8417 9.06042 10.5604C9.34172 10.2791 9.49976 9.89758 9.49976 9.49976V5.90976C9.49976 5.77715 9.44708 5.64997 9.35331 5.5562C9.25954 5.46243 9.13236 5.40976 8.99976 5.40976ZM10.9598 1.30976C10.909 1.18758 10.8119 1.09049 10.6898 1.03976C10.6296 1.01414 10.5651 1.00055 10.4998 0.999756H7.49976C7.36715 0.999756 7.23997 1.05243 7.1462 1.1462C7.05243 1.23997 6.99976 1.36715 6.99976 1.49976C6.99976 1.63236 7.05243 1.75954 7.1462 1.85331C7.23997 1.94708 7.36715 1.99976 7.49976 1.99976H9.29476L4.14476 7.14476C4.09789 7.19124 4.06069 7.24654 4.03531 7.30747C4.00993 7.3684 3.99686 7.43375 3.99686 7.49976C3.99686 7.56576 4.00993 7.63111 4.03531 7.69204C4.06069 7.75297 4.09789 7.80827 4.14476 7.85476C4.19124 7.90162 4.24654 7.93882 4.30747 7.9642C4.3684 7.98959 4.43375 8.00266 4.49976 8.00266C4.56576 8.00266 4.63111 7.98959 4.69204 7.9642C4.75297 7.93882 4.80827 7.90162 4.85476 7.85476L9.99976 2.70476V4.49976C9.99976 4.63236 10.0524 4.75954 10.1462 4.85331C10.24 4.94708 10.3671 4.99976 10.4998 4.99976C10.6324 4.99976 10.7595 4.94708 10.8533 4.85331C10.9471 4.75954 10.9998 4.63236 10.9998 4.49976V1.49976C10.999 1.43442 10.9854 1.36987 10.9598 1.30976Z" fill="currentColor"></path></g></svg></a><a href="https://docs.logto.io/quick-starts" class="_item_100h6_35" data-ai-id="sdk" tabindex="0" target="_blank" rel="noopener"><span>SDK guide</span><svg width="12" height="12" viewBox="0 0 12 12" fill="none" xmlns="http://www.w3.org/2000/svg" class=""><g id="User Interface / External Link"><path id="Vector" d="M8.99976 5.40976C8.86715 5.40976 8.73997 5.46243 8.6462 5.5562C8.55243 5.64997 8.49976 5.77715 8.49976 5.90976V9.49976C8.49976 9.63236 8.44708 9.75954 8.35331 9.85331C8.25954 9.94708 8.13236 9.99976 7.99976 9.99976H2.49976C2.36715 9.99976 2.23997 9.94708 2.1462 9.85331C2.05243 9.75954 1.99976 9.63236 1.99976 9.49976V3.99976C1.99976 3.86715 2.05243 3.73997 2.1462 3.6462C2.23997 3.55243 2.36715 3.49976 2.49976 3.49976H6.08976C6.22236 3.49976 6.34954 3.44708 6.44331 3.35331C6.53708 3.25954 6.58976 3.13236 6.58976 2.99976C6.58976 2.86715 6.53708 2.73997 6.44331 2.6462C6.34954 2.55243 6.22236 2.49976 6.08976 2.49976H2.49976C2.10193 2.49976 1.7204 2.65779 1.4391 2.9391C1.15779 3.2204 0.999756 3.60193 0.999756 3.99976V9.49976C0.999756 9.89758 1.15779 10.2791 1.4391 10.5604C1.7204 10.8417 2.10193 10.9998 2.49976 10.9998H7.99976C8.39758 10.9998 8.77911 10.8417 9.06042 10.5604C9.34172 10.2791 9.49976 9.89758 9.49976 9.49976V5.90976C9.49976 5.77715 9.44708 5.64997 9.35331 5.5562C9.25954 5.46243 9.13236 5.40976 8.99976 5.40976ZM10.9598 1.30976C10.909 1.18758 10.8119 1.09049 10.6898 1.03976C10.6296 1.01414 10.5651 1.00055 10.4998 0.999756H7.49976C7.36715 0.999756 7.23997 1.05243 7.1462 1.1462C7.05243 1.23997 6.99976 1.36715 6.99976 1.49976C6.99976 1.63236 7.05243 1.75954 7.1462 1.85331C7.23997 1.94708 7.36715 1.99976 7.49976 1.99976H9.29476L4.14476 7.14476C4.09789 7.19124 4.06069 7.24654 4.03531 7.30747C4.00993 7.3684 3.99686 7.43375 3.99686 7.49976C3.99686 7.56576 4.00993 7.63111 4.03531 7.69204C4.06069 7.75297 4.09789 7.80827 4.14476 7.85476C4.19124 7.90162 4.24654 7.93882 4.30747 7.9642C4.3684 7.98959 4.43375 8.00266 4.49976 8.00266C4.56576 8.00266 4.63111 7.98959 4.69204 7.9642C4.75297 7.93882 4.80827 7.90162 4.85476 7.85476L9.99976 2.70476V4.49976C9.99976 4.63236 10.0524 4.75954 10.1462 4.85331C10.24 4.94708 10.3671 4.99976 10.4998 4.99976C10.6324 4.99976 10.7595 4.94708 10.8533 4.85331C10.9471 4.75954 10.9998 4.63236 10.9998 4.49976V1.49976C10.999 1.43442 10.9854 1.36987 10.9598 1.30976Z" fill="currentColor"></path></g></svg></a><a href="https://docs.logto.io/user-management/user-migration" class="_item_100h6_35" data-ai-id="migration-guide" tabindex="0" target="_blank" rel="noopener"><span>Migration guide</span><svg width="12" height="12" viewBox="0 0 12 12" fill="none" xmlns="http://www.w3.org/2000/svg" class=""><g id="User Interface / External Link"><path id="Vector" d="M8.99976 5.40976C8.86715 5.40976 8.73997 5.46243 8.6462 5.5562C8.55243 5.64997 8.49976 5.77715 8.49976 5.90976V9.49976C8.49976 9.63236 8.44708 9.75954 8.35331 9.85331C8.25954 9.94708 8.13236 9.99976 7.99976 9.99976H2.49976C2.36715 9.99976 2.23997 9.94708 2.1462 9.85331C2.05243 9.75954 1.99976 9.63236 1.99976 9.49976V3.99976C1.99976 3.86715 2.05243 3.73997 2.1462 3.6462C2.23997 3.55243 2.36715 3.49976 2.49976 3.49976H6.08976C6.22236 3.49976 6.34954 3.44708 6.44331 3.35331C6.53708 3.25954 6.58976 3.13236 6.58976 2.99976C6.58976 2.86715 6.53708 2.73997 6.44331 2.6462C6.34954 2.55243 6.22236 2.49976 6.08976 2.49976H2.49976C2.10193 2.49976 1.7204 2.65779 1.4391 2.9391C1.15779 3.2204 0.999756 3.60193 0.999756 3.99976V9.49976C0.999756 9.89758 1.15779 10.2791 1.4391 10.5604C1.7204 10.8417 2.10193 10.9998 2.49976 10.9998H7.99976C8.39758 10.9998 8.77911 10.8417 9.06042 10.5604C9.34172 10.2791 9.49976 9.89758 9.49976 9.49976V5.90976C9.49976 5.77715 9.44708 5.64997 9.35331 5.5562C9.25954 5.46243 9.13236 5.40976 8.99976 5.40976ZM10.9598 1.30976C10.909 1.18758 10.8119 1.09049 10.6898 1.03976C10.6296 1.01414 10.5651 1.00055 10.4998 0.999756H7.49976C7.36715 0.999756 7.23997 1.05243 7.1462 1.1462C7.05243 1.23997 6.99976 1.36715 6.99976 1.49976C6.99976 1.63236 7.05243 1.75954 7.1462 1.85331C7.23997 1.94708 7.36715 1.99976 7.49976 1.99976H9.29476L4.14476 7.14476C4.09789 7.19124 4.06069 7.24654 4.03531 7.30747C4.00993 7.3684 3.99686 7.43375 3.99686 7.49976C3.99686 7.56576 4.00993 7.63111 4.03531 7.69204C4.06069 7.75297 4.09789 7.80827 4.14476 7.85476C4.19124 7.90162 4.24654 7.93882 4.30747 7.9642C4.3684 7.98959 4.43375 8.00266 4.49976 8.00266C4.56576 8.00266 4.63111 7.98959 4.69204 7.9642C4.75297 7.93882 4.80827 7.90162 4.85476 7.85476L9.99976 2.70476V4.49976C9.99976 4.63236 10.0524 4.75954 10.1462 4.85331C10.24 4.94708 10.3671 4.99976 10.4998 4.99976C10.6324 4.99976 10.7595 4.94708 10.8533 4.85331C10.9471 4.75954 10.9998 4.63236 10.9998 4.49976V1.49976C10.999 1.43442 10.9854 1.36987 10.9598 1.30976Z" fill="currentColor"></path></g></svg></a><a href="https://tutorials.logto.io/how-to" class="_item_100h6_35" data-ai-id="build-x-with-y" tabindex="0" target="_blank" rel="noopener"><span>Build X with Y</span><svg width="12" height="12" viewBox="0 0 12 12" fill="none" xmlns="http://www.w3.org/2000/svg" class=""><g id="User Interface / External Link"><path id="Vector" d="M8.99976 5.40976C8.86715 5.40976 8.73997 5.46243 8.6462 5.5562C8.55243 5.64997 8.49976 5.77715 8.49976 5.90976V9.49976C8.49976 9.63236 8.44708 9.75954 8.35331 9.85331C8.25954 9.94708 8.13236 9.99976 7.99976 9.99976H2.49976C2.36715 9.99976 2.23997 9.94708 2.1462 9.85331C2.05243 9.75954 1.99976 9.63236 1.99976 9.49976V3.99976C1.99976 3.86715 2.05243 3.73997 2.1462 3.6462C2.23997 3.55243 2.36715 3.49976 2.49976 3.49976H6.08976C6.22236 3.49976 6.34954 3.44708 6.44331 3.35331C6.53708 3.25954 6.58976 3.13236 6.58976 2.99976C6.58976 2.86715 6.53708 2.73997 6.44331 2.6462C6.34954 2.55243 6.22236 2.49976 6.08976 2.49976H2.49976C2.10193 2.49976 1.7204 2.65779 1.4391 2.9391C1.15779 3.2204 0.999756 3.60193 0.999756 3.99976V9.49976C0.999756 9.89758 1.15779 10.2791 1.4391 10.5604C1.7204 10.8417 2.10193 10.9998 2.49976 10.9998H7.99976C8.39758 10.9998 8.77911 10.8417 9.06042 10.5604C9.34172 10.2791 9.49976 9.89758 9.49976 9.49976V5.90976C9.49976 5.77715 9.44708 5.64997 9.35331 5.5562C9.25954 5.46243 9.13236 5.40976 8.99976 5.40976ZM10.9598 1.30976C10.909 1.18758 10.8119 1.09049 10.6898 1.03976C10.6296 1.01414 10.5651 1.00055 10.4998 0.999756H7.49976C7.36715 0.999756 7.23997 1.05243 7.1462 1.1462C7.05243 1.23997 6.99976 1.36715 6.99976 1.49976C6.99976 1.63236 7.05243 1.75954 7.1462 1.85331C7.23997 1.94708 7.36715 1.99976 7.49976 1.99976H9.29476L4.14476 7.14476C4.09789 7.19124 4.06069 7.24654 4.03531 7.30747C4.00993 7.3684 3.99686 7.43375 3.99686 7.49976C3.99686 7.56576 4.00993 7.63111 4.03531 7.69204C4.06069 7.75297 4.09789 7.80827 4.14476 7.85476C4.19124 7.90162 4.24654 7.93882 4.30747 7.9642C4.3684 7.98959 4.43375 8.002
166 4.49976 8.00266C4.56576 8.00266 4.63111 7.98959 4.69204 7.9642C4.75297 7.93882 4.80827 7.90162 4.85476 7.85476L9.99976 2.70476V4.49976C9.99976 4.63236 10.0524 4.75954 10.1462 4.85331C10.24 4.94708 10.3671 4.99976 10.4998 4.99976C10.6324 4.99976 10.7595 4.94708 10.8533 4.85331C10.9471 4.75954 10.9998 4.63236 10.9998 4.49976V1.49976C10.999 1.43442 10.9854 1.36987 10.9598 1.30976Z" fill="currentColor"></path></g></svg></a><a class="_item_100h6_35" data-ai-id="jwt-decoder-encoder" tabindex="0" rel="noopener" href="/jwt-decoder" target="_self" data-discover="true"><span>JWT decoder & encoder</span></a><a class="_item_100h6_35" data-ai-id="base64-decoder-encoder" tabindex="0" rel="noopener" href="/base64-decoder" target="_self" data-discover="true"><span>Base64 encoder & decoder</span></a><a class="_item_100h6_35" data-ai-id="oauth-providers-explorer" tabindex="0" rel="noopener" href="/oauth-providers-explorer" target="_self" data-discover="true"><span>OAuth providers explorer</span></a></div></section><section><header>Resources</header><div class="_content_100h6_30"><a href="https://blog.logto.io/" class="_item_100h6_35" data-ai-id="blog" tabindex="0" target="_self" rel="noopener"><span>Blog</span></a><a href="https://auth-wiki.logto.io" class="_item_100h6_35" data-ai-id="auth-wiki" tabindex="0" target="_blank" rel="noopener"><span>Auth Wiki</span><svg width="12" height="12" viewBox="0 0 12 12" fill="none" xmlns="http://www.w3.org/2000/svg" class=""><g id="User Interface / External Link"><path id="Vector" d="M8.99976 5.40976C8.86715 5.40976 8.73997 5.46243 8.6462 5.5562C8.55243 5.64997 8.49976 5.77715 8.49976 5.90976V9.49976C8.49976 9.63236 8.44708 9.75954 8.35331 9.85331C8.25954 9.94708 8.13236 9.99976 7.99976 9.99976H2.49976C2.36715 9.99976 2.23997 9.94708 2.1462 9.85331C2.05243 9.75954 1.99976 9.63236 1.99976 9.49976V3.99976C1.99976 3.86715 2.05243 3.73997 2.1462 3.6462C2.23997 3.55243 2.36715 3.49976 2.49976 3.49976H6.08976C6.22236 3.49976 6.34954 3.44708 6.44331 3.35331C6.53708 3.25954 6.58976 3.13236 6.58976 2.99976C6.58976 2.86715 6.53708 2.73997 6.44331 2.6462C6.34954 2.55243 6.22236 2.49976 6.08976 2.49976H2.49976C2.10193 2.49976 1.7204 2.65779 1.4391 2.9391C1.15779 3.2204 0.999756 3.60193 0.999756 3.99976V9.49976C0.999756 9.89758 1.15779 10.2791 1.4391 10.5604C1.7204 10.8417 2.10193 10.9998 2.49976 10.9998H7.99976C8.39758 10.9998 8.77911 10.8417 9.06042 10.5604C9.34172 10.2791 9.49976 9.89758 9.49976 9.49976V5.90976C9.49976 5.77715 9.44708 5.64997 9.35331 5.5562C9.25954 5.46243 9.13236 5.40976 8.99976 5.40976ZM10.9598 1.30976C10.909 1.18758 10.8119 1.09049 10.6898 1.03976C10.6296 1.01414 10.5651 1.00055 10.4998 0.999756H7.49976C7.36715 0.999756 7.23997 1.05243 7.1462 1.1462C7.05243 1.23997 6.99976 1.36715 6.99976 1.49976C6.99976 1.63236 7.05243 1.75954 7.1462 1.85331C7.23997 1.94708 7.36715 1.99976 7.49976 1.99976H9.29476L4.14476 7.14476C4.09789 7.19124 4.06069 7.24654 4.03531 7.30747C4.00993 7.3684 3.99686 7.43375 3.99686 7.49976C3.99686 7.56576 4.00993 7.63111 4.03531 7.69204C4.06069 7.75297 4.09789 7.80827 4.14476 7.85476C4.19124 7.90162 4.24654 7.93882 4.30747 7.9642C4.3684 7.98959 4.43375 8.00266 4.49976 8.00266C4.56576 8.00266 4.63111 7.98959 4.69204 7.9642C4.75297 7.93882 4.80827 7.90162 4.85476 7.85476L9.99976 2.70476V4.49976C9.99976 4.63236 10.0524 4.75954 10.1462 4.85331C10.24 4.94708 10.3671 4.99976 10.4998 4.99976C10.6324 4.99976 10.7595 4.94708 10.8533 4.85331C10.9471 4.75954 10.9998 4.63236 10.9998 4.49976V1.49976C10.999 1.43442 10.9854 1.36987 10.9598 1.30976Z" fill="currentColor"></path></g></svg></a><a class="_item_100h6_35" data-ai-id="why-not-build-auth" tabindex="0" rel="noopener" href="/build-your-own-auth" target="_self" data-discover="true"><span>Build your own auth?</span></a><a href="https://mcp-auth.dev/" class="_item_100h6_35" data-ai-id="mcp-auth" tabindex="0" target="_blank" rel="noopener"><span>MCP Auth</span><svg width="12" height="12" viewBox="0 0 12 12" fill="none" xmlns="http://www.w3.org/2000/svg" class=""><g id="User Interface / External Link"><path id="Vector" d="M8.99976 5.40976C8.86715 5.40976 8.73997 5.46243 8.6462 5.5562C8.55243 5.64997 8.49976 5.77715 8.49976 5.90976V9.49976C8.49976 9.63236 8.44708 9.75954 8.35331 9.85331C8.25954 9.94708 8.13236 9.99976 7.99976 9.99976H2.49976C2.36715 9.99976 2.23997 9.94708 2.1462 9.85331C2.05243 9.75954 1.99976 9.63236 1.99976 9.49976V3.99976C1.99976 3.86715 2.05243 3.73997 2.1462 3.6462C2.23997 3.55243 2.36715 3.49976 2.49976 3.49976H6.08976C6.22236 3.49976 6.34954 3.44708 6.44331 3.35331C6.53708 3.25954 6.58976 3.13236 6.58976 2.99976C6.58976 2.86715 6.53708 2.73997 6.44331 2.6462C6.34954 2.55243 6.22236 2.49976 6.08976 2.49976H2.49976C2.10193 2.49976 1.7204 2.65779 1.4391 2.9391C1.15779 3.2204 0.999756 3.60193 0.999756 3.99976V9.49976C0.999756 9.89758 1.15779 10.2791 1.4391 10.5604C1.7204 10.8417 2.10193 10.9998 2.49976 10.9998H7.99976C8.39758 10.9998 8.77911 10.8417 9.06042 10.5604C9.34172 10.2791 9.49976 9.89758 9.49976 9.49976V5.90976C9.49976 5.77715 9.44708 5.64997 9.35331 5.5562C9.25954 5.46243 9.13236 5.40976 8.99976 5.40976ZM10.9598 1.30976C10.909 1.18758 10.8119 1.09049 10.6898 1.03976C10.6296 1.01414 10.5651 1.00055 10.4998 0.999756H7.49976C7.36715 0.999756 7.23997 1.05243 7.1462 1.1462C7.05243 1.23997 6.99976 1.36715 6.99976 1.49976C6.99976 1.63236 7.05243 1.75954 7.1462 1.85331C7.23997 1.94708 7.36715 1.99976 7.49976 1.99976H9.29476L4.14476 7.14476C4.09789 7.19124 4.06069 7.24654 4.03531 7.30747C4.00993 7.3684 3.99686 7.43375 3.99686 7.49976C3.99686 7.56576 4.00993 7.63111 4.03531 7.69204C4.06069 7.75297 4.09789 7.80827 4.14476 7.85476C4.19124 7.90162 4.24654 7.93882 4.30747 7.9642C4.3684 7.98959 4.43375 8.00266 4.49976 8.00266C4.56576 8.00266 4.63111 7.98959 4.69204 7.9642C4.75297 7.93882 4.80827 7.90162 4.85476 7.85476L9.99976 2.70476V4.49976C9.99976 4.63236 10.0524 4.75954 10.1462 4.85331C10.24 4.94708 10.3671 4.99976 10.4998 4.99976C10.6324 4.99976 10.7595 4.94708 10.8533 4.85331C10.9471 4.75954 10.9998 4.63236 10.9998 4.49976V1.49976C10.999 1.43442 10.9854 1.36987 10.9598 1.30976Z" fill="currentColor"></path></g></svg></a><a class="_item_100h6_35" data-ai-id="cli-auth" tabindex="0" rel="noopener" href="/cli-auth" target="_self" data-discover="true"><span>CLI Auth</span></a><a href="https://www.youtube.com/@logto-io" class="_item_100h6_35" data-ai-id="youtube-channel" tabindex="0" target="_blank" rel="noopener"><span>YouTube channel</span><svg width="12" height="12" viewBox="0 0 12 12" fill="none" xmlns="http://www.w3.org/2000/svg" class=""><g id="User Interface / External Link"><path id="Vector" d="M8.99976 5.40976C8.86715 5.40976 8.73997 5.46243 8.6462 5.5562C8.55243 5.64997 8.49976 5.77715 8.49976 5.90976V9.49976C8.49976 9.63236 8.44708 9.75954 8.35331 9.85331C8.25954 9.94708 8.13236 9.99976 7.99976 9.99976H2.49976C2.36715 9.99976 2.23997 9.94708 2.1462 9.85331C2.05243 9.75954 1.99976 9.63236 1.99976 9.49976V3.99976C1.99976 3.86715 2.05243 3.73997 2.1462 3.6462C2.23997 3.55243 2.36715 3.49976 2.49976 3.49976H6.08976C6.22236 3.49976 6.34954 3.44708 6.44331 3.35331C6.53708 3.25954 6.58976 3.13236 6.58976 2.99976C6.58976 2.86715 6.53708 2.73997 6.44331 2.6462C6.34954 2.55243 6.22236 2.49976 6.08976 2.49976H2.49976C2.10193 2.49976 1.7204 2.65779 1.4391 2.9391C1.15779 3.2204 0.999756 3.60193 0.999756 3.99976V9.49976C0.999756 9.89758 1.15779 10.2791 1.4391 10.5604C1.7204 10.8417 2.10193 10.9998 2.49976 10.9998H7.99976C8.39758 10.9998 8.77911 10.8417 9.06042 10.5604C9.34172 10.2791 9.49976 9.89758 9.49976 9.49976V5.90976C9.49976 5.77715 9.44708 5.64997 9.35331 5.5562C9.25954 5.46243 9.13236 5.40976 8.99976 5.40976ZM10.9598 1.30976C10.909 1.18758 10.8119 1.09049 10.6898 1.03976C10.6296 1.01414 10.5651 1.00055 10.4998 0.999756H7.49976C7.36715 0.999756 7.23997 1.05243 7.1462 1.1462C7.05243 1.23997 6.99976 1.36715 6.99976 1.49976C6.99976 1.63236 7.05243 1.75954 7.1462 1.85331C7.23997 1.94708 7.36715 1.99976 7.49976 1.99976H9.29476L4.14476 7.14476C4.09789 7.19124 4.06069 7.24654 4.03531 7.30747C4.00993 7.3684 3.99686 7.43375 3.99686 7.49976C3.99686 7.56576 4.00993 7.63111 4.03531 7.69204C4.06069 7.75297 4.09789 7.80827 4.14476 7.85476C4.19124 7.90162 4.24654 7.93882 4.30747 7.9642C4.3684 7.98959 4.43375 8.00266 4.49976 8.00266C4.56576 8.00266 4.63111 7.98959 4.69204 7.9642C4.75297 7.93882 4.80827 7.90162 4.85476 7.85476L9.99976 2.70476V4.49976C9.99976 4.63236 10.0524 4.75954 10.1462 4.85331C10.24 4.94708 10.3671 4.99976 10.4998 4.99976C10.6324 4.99976 10.7595 4.94708 10.8533 4.85331C10.9471 4.75954 10.9998 4.63236 10.9998 4.49976V1.49976C10.999 1.43442 10.9854 1.36987 10.9598 1.30976Z" fill="currentColor"></path></g></svg></a><a href="https://logto.io/logto-logo-assets.zip" class="_item_100h6_35" data-ai-id="logto-branding-assets" tabindex="0" target="_self" rel="noopener"><span>Branding assets</span></a><a class="_item_100h6_35" data-ai-id="newsletter" tabindex="0" rel="noopener" href="/subscribe" target="_self" data-discover="true"><span>Newsletter</span></a><a href="https://www.figma.com/community/file/1260495684847942413/logto-sign-in-experience" class="_item_100h6_35" data-ai-id="sie-ui-assets" tabindex="0" target="_blank" rel="noopener"><span>Sign-in experience assets</span><svg width="12" height="12" viewBox="0 0 12 12" fill="none" xmlns="http://www.w3.org/2000/svg" class=""><g id="User Interface / External Link"><path id="Vector" d="M8.99976 5.40976C8.86715 5.40976 8.73997 5.46243 8.6462 5.5562C8.55243 5.64997 8.49976 5.77715 8.49976 5.90976V9.49976C8.49976 9.63236 8.44708 9.75954 8.35331 9.85331C8.25954 9.94708 8.13236 9.99976 7.99976 9.99976H2.49976C2.36715 9.99976 2.23997 9.94708 2.1462 9.85331C2.05243 9.75954 1.99976 9.63236 1.99976 9.49976V3.99976C1.99976 3.86715 2.05243 3.73997 2.1462 3.6462C2.23997 3.55243 2.36715 3.49976 2.49976 3.49976H6.08976C6.22236 3.49976 6.34954 3.44708 6.44331 3.35331C6.53708 3.25954 6.58976 3.13236 6.58976 2.99976C6.58976 2.86715 6.53708 2.73997 6.44331 2.6462C6.34954 2.55243 6.22236 2.49976 6.08976 2.49976H2.49976C2.10193 2.49976 1.7204 2.65779 1.4391 2.9391C1.15779 3.2204 0.999756 3.60193 0.999756 3.99976V9.49976C0.999756 9.89758 1.15779 10.2791 1.4391 10.5604C1.7204 10.8417 2.10193 10.9998 2.49976 10.9998H7.99976C8.39758 10.9998 8.77911 10.8417 9.06042 10.5604C9.34172 10.2791 9.49976 9.89758 9.49976 9.49976V5.90976C9.49976 5.77715 9.44708 5.64997 9.35331 5.5562C9.25954 5.46243 9.13236 5.40976 8.99976 5.40976ZM10.9598 1.30976C10.909 1.18758 10.8119 1.09049 10.6898 1.03976C10.6296 1.01414 10.5651 1.00055 10.4998 0.999756H7.49976C7.36715 0.999756 7.23997 1.05243 7.1462 1.1462C7.05243 1.23997 6.99976 1.36715 6.99976 1.49976C6.99976 1.63236 7.05243 1.75954 7.1462 1.85331C7.23997 1.94708 7.36715 1.99976 7.49976 1.99976H9.29476L4.14476 7.14476C4.09789 7.19124 4.06069 7.24654 4.03531 7.30747C4.00993 7.3684 3.99686 7.43375 3.99686 7.49976C3.99686 7.56576 4.00993 7.63111 4.03531 7.69204C4.06069 7.75297 4.09789 7.80827 4.14476 7.85476C4.19124 7.90162 4.24654 7.93882 4.30747 7.9642C4.3684 7.98959 4.43375 8.00266 4.49976 8.00266C4.56576 8.00266 4.63111 7.98959 4.69204 7.9642C4.75297 7.93882 4.80827 7.90162 4.85476 7.85476L9.99976 2.70476V4.49976C9.99976 4.63236 10.0524 4.75954 10.1462 4.85331C10.24 4.94708 10.3671 4.99976 10.4998 4.99976C10.6324 4.99976 10.7595 4.94708 10.8533 4.85331C10.9471 4.75954 10.9998 4.63236 10.9998 4.49976V1.49976C10.999 1.43442 10.9854 1.36987 10.9598 1.30976Z" fill="currentColor"></path></g></svg></a><a class="_item_100h6_35" data-ai-id="self-hosted" tabindex="0" rel="noopener" href="/self-hosted-plans" target="_self" data-discover="true"><span>Self-hosted</span></a><a class="_item_100h6_35" data-ai-id="open_source" tabindex="0" rel="noopener" href="/open-source" target="_self" data-discover="true"><span>Open-source</span></a><a class="_item_100h6_35" data-ai-id="compare-auth0" tabindex="0" rel="noopener" href="/compare/auth0" target="_self" data-discover="true"><span>Logto vs. Auth0</span></a><a class="_item_100h6_35" data-ai-id="compare-clerk" tabindex="0" rel="noopener" href="/compare/clerk" target="_self" data-discover="true"><span>Logto vs. Clerk</span></a><a class="_item_100h6_35" data-ai-id="compare-stytch" tabindex="0" rel="noopener" href="/compare/stytch" target="_self" data-discover="true"><span>Logto vs. Stytch</span></a><a class="_item_100h6_35" data-ai-id="compare-firebase" tabindex="0" rel="noopener" href="/compare/firebase" target="_self" data-discover="true"><span>Logto vs. Firebase</span></a><a class="_item_100h6_35" data-ai-id="compare-azure-ad-b2c" tabindex="0" rel="noopener" href="/compare/azure-ad-b2c" target="_self" data-discover="true"><span>Logto vs. Azure AD B2C</span></a><a class="_item_100h6_35" data-ai-id="compare-aws-cognito" tabindex="0" rel="noopener" href="/compare/aws-cognito" target="_self" data-discover="true"><span>Logto vs. AWS Cognito</span></a><a class="_item_100h6_35" data-ai-id="compare-workos" tabindex="0" rel="noopener" href="/compare/workos" target="_self" data-discover="true"><span>Logto vs. WorkOS</span></a><a href="https://blog.logto.io/categories/changelogs/#all" class="_item_100h6_35" data-ai-id="changelog" tabindex="0" target="_self" rel="noopener"><span>Changelogs</span></a><a href="https://feedback.logto.io/roadmap" class="_item_100h6_35" data-ai-id="roadmap" tabindex="0" target="_blank" rel="noopener"><span>Roadmap</span><svg width="12" height="12" viewBox="0 0 12 12" fill="none" xmlns="http://www.w3.org/2000/svg" class=""><g id="User Interface / External Link"><path id="Vector" d="M8.99976 5.40976C8.86715 5.40976 8.73997 5.46243 8.6462 5.5562C8.55243 5.64997 8.49976 5.77715 8.49976 5.90976V9.49976C8.49976 9.63236 8.44708 9.75954 8.35331 9.85331C8.25954 9.94708 8.13236 9.99976 7.99976 9.99976H2.49976C2.36715 9.99976 2.23997 9.94708 2.1462 9.85331C2.05243 9.75954 1.99976 9.63236 1.99976 9.49976V3.99976C1.99976 3.86715 2.05243 3.73997 2.1462 3.6462C2.23997 3.55243 2.36715 3.49976 2.49976 3.49976H6.08976C6.22236 3.49976 6.34954 3.44708 6.44331 3.35331C6.53708 3.25954 6.58976 3.13236 6.58976 2.99976C6.58976 2.86715 6.53708 2.73997 6.44331 2.6462C6.34954 2.55243 6.22236 2.49976 6.08976 2.49976H2.49976C2.10193 2.49976 1.7204 2.65779 1.4391 2.9391C1.15779 3.2204 0.999756 3.60193 0.999756 3.99976V9.49976C0.999756 9.89758 1.15779 10.2791 1.4391 10.5604C1.7204 10.8417 2.10193 10.9998 2.49976 10.9998H7.99976C8.39758 10.9998 8.77911 10.8417 9.06042 10.5604C9.34172 10.2791 9.49976 9.89758 9.49976 9.49976V5.90976C9.49976 5.77715 9.44708 5.64997 9.35331 5.5562C9.25954 5.46243 9.13236 5.40976 8.99976 5.40976ZM10.9598 1.30976C10.909 1.18758 10.8119 1.09049 10.6898 1.03976C10.6296 1.01414 10.5651 1.00055 10.4998 0.999756H7.49976C7.36715 0.999756 7.23997 1.05243 7.1462 1.1462C7.05243 1.23997 6.99976 1.36715 6.99976 1.49976C6.99976 1.63236 7.05243 1.75954 7.1462 1.85331C7.23997 1.94708 7.36715 1.99976 7.49976 1.99976H9.29476L4.14476 7.14476C4.09789 7.19124 4.06069 7.24654 4.03531 7.30747C4.00993 7.3684 3.99686 7.43375 3.99686 7.49976C3.99686 7.56576 4.00993 7.63111 4.03531 7.69204C4.06069 7.75297 4.09789 7.80827 4.14476 7.85476C4.19124 7.90162 4.24654 7.93882 4.30747 7.9642C4.3684 7.98959 4.43375 8.00266 4.49976 8.00266C4.56576 8.00266 4.63111 7.98959 4.69204 7.9642C4.75297 7.93882 4.80827 7.90162 4.85476 7.85476L9.99976 2.70476V4.49976C9.99976 4.63236 10.0524 4.75954 10.1462 4.85331C10.24 4.94708 10.3671 4.99976 10.4998 4.99976C10.6324 4.99976 10.7595 4.94708 10.8533 4.85331C10.9471 4.75954 10.9998 4.63236 10.9998 4.49976V1.49976C10.999 1.43442 10.9854 1.36987 10.9598 1.30976Z" fill="currentColor"></path></g></svg></a></div></section><section><header>Company</header><div class="_content_100h6_30"><a class="_item_100h6_35" data-ai-id="customers" tabindex="0" rel="noopener" href="/customers" target="_self" data-discover="true"><span>Customers</span></a><a class="_item_100h6_35" data-ai-id="trust-and-security" tabindex="0" rel="noopener" href="/trust-and-security" target="_self" data-discover="true"><span>Trust and security</span></a><a class="_item_100h6_35" data-ai-id="about" tabindex="0" rel="noopener" href="/about" target="_self" data-discover="true"><span>About us</span></a><a class="_item_100h6_35" data-ai-id="contact-us" tabindex="0" rel="noopener" href="/contact" target="_self" data-discover="true"><span>Contact us</span></a></div></section></div></div><div class="_hr_12
1jdn_49"></div><div class="_footer_12jdn_53"><div class="_footnotes_12jdn_58"><svg width="160" height="29" viewBox="0 0 160 29" fill="none" xmlns="http://www.w3.org/2000/svg" class="_silverhandLogo_12jdn_94"><path d="M44.2095 13.897H41.7628C40.8844 13.897 40.4453 13.4578 40.4453 12.5795V12.0149C40.4453 11.1366 40.8844 10.6974 41.7628 10.6974H46.1857C46.3739 10.6974 46.468 10.6033 46.468 10.4151V9.47409C46.468 9.28588 46.3739 9.19177 46.1857 9.19177H41.1981C39.316 9.19177 38.375 10.1328 38.375 12.0149V12.5795C38.375 14.4616 39.316 15.4027 41.1981 15.4027H43.6448C44.6486 15.4027 45.1505 15.9045 45.1505 16.9083V17.473C45.1505 18.4767 44.6486 18.9786 43.6448 18.9786H39.0337C38.8455 18.9786 38.7514 19.0727 38.7514 19.2609V20.202C38.7514 20.3902 38.8455 20.4843 39.0337 20.4843H44.2095C46.217 20.4843 47.2208 19.4805 47.2208 17.473V16.9083C47.2208 14.9008 46.217 13.897 44.2095 13.897Z" fill="#F7F8F8"></path><path d="M54.1512 9.47409C54.1512 9.28588 54.0571 9.19177 53.8689 9.19177H52.3632C52.175 9.19177 52.0809 9.28588 52.0809 9.47409V20.202C52.0809 20.3902 52.175 20.4843 52.3632 20.4843H53.8689C54.0571 20.4843 54.1512 20.3902 54.1512 20.202V9.47409Z" fill="#F7F8F8"></path><path d="M66.9214 20.4843C67.1097 20.4843 67.2038 20.3902 67.2038 20.202V19.2609C67.2038 19.0727 67.1097 18.9786 66.9214 18.9786H61.5575V9.47409C61.5575 9.28588 61.4634 9.19177 61.2752 9.19177H59.7695C59.5813 9.19177 59.4872 9.28588 59.4872 9.47409V20.202C59.4872 20.3902 59.5813 20.4843 59.7695 20.4843H66.9214Z" fill="#F7F8F8"></path><path d="M78.974 9.19177H77.4997C77.3115 9.19177 77.186 9.28588 77.1233 9.47409L74.3629 17.5514L71.6025 9.47409C71.5398 9.28588 71.4143 9.19177 71.2261 9.19177H69.7518C69.5636 9.19177 69.5009 9.28588 69.5793 9.47409L73.2337 20.202C73.2964 20.3902 73.4219 20.4843 73.6101 20.4843H75.1157C75.304 20.4843 75.4294 20.3902 75.5079 20.202L79.1622 9.47409C79.225 9.28588 79.1622 9.19177 78.974 9.19177Z" fill="#F7F8F8"></path><path d="M91.3989 10.6974C91.5871 10.6974 91.6812 10.6033 91.6812 10.4151V9.47409C91.6812 9.28588 91.5871 9.19177 91.3989 9.19177H83.9646C83.7764 9.19177 83.6823 9.28588 83.6823 9.47409V20.202C83.6823 20.3902 83.7764 20.4843 83.9646 20.4843H91.493C91.6812 20.4843 91.7753 20.3902 91.7753 20.202V19.2609C91.7753 19.0727 91.6812 18.9786 91.493 18.9786H83.6823V15.4027H90.9283C91.1165 15.4027 91.2107 15.3086 91.2107 15.1203V14.1793C91.2107 13.9911 91.1165 13.897 90.9283 13.897H83.6823V10.6974H91.3989Z" fill="#F7F8F8"></path><path d="M105.53 20.202L102.817 15.9359C104.527 15.7791 105.389 14.7439 105.389 12.8618V12.2972C105.389 10.2269 104.354 9.19177 102.284 9.19177H96.9199C96.7317 9.19177 96.6376 9.28588 96.6376 9.47409V20.202C96.6376 20.3902 96.7317 20.4843 96.9199 20.4843H98.4256C98.6138 20.4843 98.7079 20.3902 98.7079 20.202V15.9673H100.543L103.241 20.202C103.366 20.3902 103.523 20.4843 103.711 20.4843H105.436C105.625 20.4843 105.656 20.3902 105.53 20.202ZM98.7079 10.6974H101.719C102.786 10.6974 103.319 11.2307 103.319 12.2972V12.8618C103.319 13.9284 102.786 14.4616 101.719 14.4616H98.7079V10.6974Z" fill="#F7F8F8"></path><path d="M118.443 9.19177H116.937C116.749 9.19177 116.655 9.28588 116.655 9.47409V13.897H112.138V9.47409C112.138 9.28588 112.044 9.19177 111.856 9.19177H110.35C110.162 9.19177 110.068 9.28588 110.068 9.47409V20.202C110.068 20.3902 110.162 20.4843 110.35 20.4843H111.856C112.044 20.4843 112.138 20.3902 112.138 20.202V15.4027H116.655V20.202C116.655 20.3902 116.749 20.4843 116.937 20.4843H118.443C118.631 20.4843 118.725 20.3902 118.725 20.202V9.47409C118.725 9.28588 118.631 9.19177 118.443 9.19177Z" fill="#F7F8F8"></path><path d="M145.732 9.19177H144.226C144.038 9.19177 143.944 9.28588 143.944 9.47409V17.3632L139.584 9.47409C139.474 9.28588 139.333 9.19177 139.145 9.19177H137.639C137.451 9.19177 137.357 9.28588 137.357 9.47409V20.202C137.357 20.3902 137.451 20.4843 137.639 20.4843H139.145C139.333 20.4843 139.427 20.3902 139.427 20.202V12.3129L143.787 20.202C143.897 20.3902 144.038 20.4843 144.226 20.4843H145.732C145.92 20.4843 146.014 20.3902 146.014 20.202V9.47409C146.014 9.28588 145.92 9.19177 145.732 9.19177Z" fill="#F7F8F8"></path><path d="M156.707 9.19177H151.437C151.248 9.19177 151.154 9.28588 151.154 9.47409V20.202C151.154 20.3902 151.248 20.4843 151.437 20.4843H156.707C158.902 20.4843 160 19.3864 160 17.1906V12.4854C160 10.2897 158.902 9.19177 156.707 9.19177ZM157.93 17.1906C157.93 18.3826 157.334 18.9786 156.142 18.9786H153.225V10.6974H156.142C157.334 10.6974 157.93 11.2934 157.93 12.4854V17.1906Z" fill="#F7F8F8"></path><path d="M129.182 9.47409L132.837 20.202C132.899 20.3902 132.837 20.4843 132.648 20.4843H131.174C130.986 20.4843 130.86 20.3902 130.798 20.202L130.123 18.2258L129.606 16.7201L128.037 12.1247L126.469 16.7201L125.967 18.2258L125.277 20.202C125.214 20.3902 125.
1089 20.4843 124.901 20.4843H123.426C123.238 20.4843 123.175 20.3902 123.254 20.202L126.908 9.47409C126.971 9.28588 127.096 9.19177 127.284 9.19177H128.79C128.978 9.19177 129.104 9.28588 129.182 9.47409Z" fill="#F7F8F8"></path><path d="M16.1307 21.2733C13.4541 22.3551 9.58996 22.477 8.02923 22.4C7.9814 22.3976 7.94671 22.3571 7.94859 22.3092C7.97442 21.6546 7.86454 20.3447 7.25161 19.5123C7.20757 19.4525 7.24869 19.3612 7.32261 19.3538C9.23582 19.1623 11.6385 16.199 13.6747 15.6618C16.2624 14.9789 18.0949 15.8857 18.5907 16.2926C18.6364 16.3302 18.6214 16.3992 18.568 16.4247C16.1918 17.5627 16.175 20.7226 16.1827 21.194C16.1833 21.229 16.1631 21.2602 16.1307 21.2733Z" fill="#F7F8F8"></path><path d="M14.3983 5.56343C14.6066 5.06917 14.9459 4.57251 15.1589 4.29545C15.2097 4.22936 15.3076 4.22996 15.3549 4.29863C15.7609 4.88828 16.1701 6.01395 16.0773 6.10681C15.4928 6.69126 14.4408 6.55767 14.374 6.40739C14.3072 6.2571 14.5076 6.14021 14.541 6.05672C14.564 5.99925 14.4732 5.8058 14.4049 5.67846C14.3858 5.64286 14.3826 5.60065 14.3983 5.56343Z" fill="#F7F8F8"></path><path d="M15.3984 3.76774C15.4648 3.57595 15.7342 3.20681 15.9083 2.95317C15.9594 2.87878 16.0687 2.87162 16.1238 2.94307C16.614 3.57886 17.2887 4.75766 17.0291 5.33869C16.6784 6.12352 16.2443 6.00663 16.2443 5.88974C16.1804 5.20287 15.4594 3.98117 15.397 3.80335C15.3928 3.79142 15.3943 3.77969 15.3984 3.76774Z" fill="#F7F8F8"></path><path d="M16.3629 2.50215C16.4586 2.34431 16.5373 2.14292 16.6127 2.0042C16.6504 1.93496 16.7392 1.93471 16.7889 1.99587C17.0033 2.25949 17.3825 2.74897 17.7137 3.25147C18.1979 3.9862 18.0643 4.28677 17.9808 4.58734C17.8974 4.88791 17.4799 5.42226 17.3129 4.58734C17.1875 3.96036 16.7041 3.11163 16.3691 2.66923C16.3324 2.62083 16.3314 2.55406 16.3629 2.50215Z" fill="#F7F8F8"></path><path d="M17.0778 5.85516C17.158 5.72157 17.8237 5.32081 18.1465 5.13713C18.8979 4.67627 19.282 5.58798 19.2486 5.97205C19.2152 6.35611 18.6809 6.55649 17.9795 6.4563C17.2782 6.35611 16.9776 6.02214 17.0778 5.85516Z" fill="#F7F8F8"></path><path d="M17.1782 1.21318C17.2851 1.1731 17.8695 1.56491 18.1979 1.81539C19.3167 2.667 19.3668 2.95088 19.1497 3.8025C18.9551 4.56607 18.6128 4.71214 18.4358 4.71011C18.4007 4.7097 18.3699 4.68789 18.3608 4.65405C18.3019 4.43398 18.432 3.85605 18.3816 3.62869C18.3377 3.43045 17.7621 2.6044 17.4799 2.21615C16.9497 1.39848 17.0446 1.26327 17.1782 1.21318Z" fill="#F7F8F8"></path><path d="M13.4723 1.5148C11.6015 2.2402 10.441 3.19495 10.037 3.63984C10.0026 3.67768 9.99582 3.73189 10.0176 3.77814C10.1445 4.04789 10.3412 4.4272 10.4332 4.40362C10.5441 4.36457 10.81 4.28254 11.0639 4.23741C11.1166 4.22805 11.169 4.25302 11.1947 4.29992C11.3975 4.66947 11.7426 5.47581 11.8136 6.33147C11.8175 6.37846 11.8479 6.41212 11.8945 6.40501C12.2412 6.35206 13.6165 5.92435 13.8947 5.824C13.9246 5.81321 13.9467 5.7899 13.959 5.76059C14.976 3.33759 16.3113 1.60815 16.8918 1.00199C16.9158 0.976921 16.9305 0.941081 16.9062 0.916241C16.7452 0.751314 15.7152 0.645093 13.4723 1.5148Z" fill="#F7F8F8"></path><path d="M11.2688 7.8861C10.9259 6.14766 9.74762 4.9429 9.07833 4.46337C9.00671 4.41206 8.90743 4.44828 8.87402 4.5298C8.5791 5.2493 7.40908 7.18689 4.50785 10.4493C1.5693 13.7536 0.628566 16.5876 0.486898 17.8231C0.474671 17.9298 0.592863 17.9981 0.687905 17.9482C1.23796 17.6595 2.34862 17.2674 3.72137 17.3337C5.21945 17.406 6.21825 18.287 6.59385 18.7957C6.6322 18.8477 6.70193 18.8684 6.76088 18.842C9.35149 17.6841 10.0295 15.7862 10.0993 13.1028C10.155 10.9599 10.8858 8.81055 11.2601 7.96437C11.2711 7.93957 11.274 7.91271 11.2688 7.8861Z" fill="#F7F8F8"></path><path fill-rule="evenodd" clip-rule="evenodd" d="M3.29265 25.0882C5.04442 25.0882 6.46451 23.6681 6.46451 21.9164C6.46451 20.1646 5.04442 18.7445 3.29265 18.7445C1.54088 18.7445 0.120789 20.1646 0.120789 21.9164C0.120789 23.6681 1.54088 25.0882 3.29265 25.0882ZM3.29265 23.5023C4.16854 23.5023 4.87858 22.7923 4.87858 21.9164C4.87858 21.0405 4.16854 20.3305 3.29265 20.3305C2.41676 20.3305 1.70672 21.0405 1.70672 21.9164C1.70672 22.7923 2.41676 23.5023 3.29265 23.5023Z" fill="#F7F8F8"></path><circle cx="3.29266" cy="21.9164" r="0.991207" fill="#F7F8F8"></circle><path d="M7.92938 23.0308C11.0281 23.4515 15.0452 22.5065 16.64 21.9
1605C16.673 21.9492 16.6943 21.9186 16.6964 21.8838C16.9303 18.1273 19.0026 16.5467 19.067 16.5682C19.1318 16.5898 20.0167 17.0862 19.9951 17.1941C19.9789 17.2749 19.6465 17.8786 19.4506 18.2269C19.4289 18.2655 19.4397 18.3142 19.4759 18.3397C19.8376 18.595 20.4696 19.0339 20.5346 19.0502C20.5996 19.0664 21.1668 18.6124 21.4912 18.343C21.5244 18.3154 21.5726 18.3163 21.6044 18.3455C21.8081 18.5326 22.2097 18.9085 22.4419 19.1264C22.4742 19.1567 22.4773 19.2074 22.4507 19.2429C19.9667 22.5449 21.3541 25.5882 22.4262 26.7844C22.4631 26.8256 22.4533 26.8901 22.4056 26.9181C21.3592 27.5336 20.7231 27.749 20.5008 27.7866C20.4807 27.79 20.4604 27.7847 20.4436 27.7732C19.5633 27.173 19.0536 26.4186 18.879 26.0599C18.8618 26.0246 18.8242 26.0039 18.7854 26.0098C14.7118 26.6304 10.5104 26.5881 9.13314 26.2489C9.10174 26.2412 9.07004 26.2518 9.04827 26.2757C8.4632 26.9186 8.21945 27.0502 7.90947 27.2454C7.88255 27.2623 7.84859 27.2633 7.82042 27.2485C7.38174 27.0183 6.17849 26.5643 5.46808 26.3064C5.39629 26.2804 5.39065 26.1794 5.45728 26.142C6.81787 25.3793 7.53776 23.8423 7.83691 23.085C7.85167 23.0476 7.88956 23.0254 7.92938 23.0308Z" fill="#F7F8F8"></path><path d="M25.3645 15.0844C22.869 15.5798 21.4348 16.2797 20.924 16.6359C20.873 16.6715 20.881 16.7464 20.935 16.7774C21.4657 17.0813 21.8697 17.529 22.0484 17.7738C22.0744 17.8093 22.122 17.8215 22.1615 17.8023C22.6638 17.5593 23.3433 17.393 23.6781 17.3289C23.7116 17.3225 23.7457 17.3376 23.7647 17.3658C26.2049 20.9865 25.3779 23.8486 25.2112 24.9078C25.2045 24.9502 25.231 24.9894 25.2721 25.0012L29.1448 26.1196C29.1938 26.1337 29.2444 26.1026 29.253 26.0523C29.9461 21.9884 27.0333 17.103 25.4479 15.1138C25.4279 15.0887 25.396 15.0782 25.3645 15.0844Z" fill="#F7F8F8"></path><path d="M19.4125 28.1364C14.3421 29.9 10.422 28.5725 8.92055 27.5976C8.87723 27.5695 8.87081 27.5106 8.90461 27.4715L9.43485 26.8589C9.45427 26.8365 9.48398 26.8256 9.51332 26.8301C13.3099 27.4032 16.8686 26.9868 18.2575 26.6448C18.3013 26.634 18.3444 26.6584 18.3624 26.6997C18.5532 27.1375 19.1147 27.6786 19.4671 27.975C19.5185 28.0183 19.505 28.1017 19.4421 28.1253L19.4125 28.1364Z" fill="#F7F8F8"></path></svg><div>Designed by Silverhand Inc.</div><span class="_spacer_1p9az_1"></span><div class="_termsAndPrivacy_12jdn_77"><a data-ai-id="security" href="https://logto.io/trust-and-security">Security</a><a href="https://status.logto.io/" target="_blank" rel="noopener">Status</a><a data-ai-id="terms_of_use" href="https://logto.io/terms/of-service" target="_blank" rel="noopener">Terms</a><a data-ai-id="privacy_policy" href="https://logto.io/terms/privacy-policy" target="_blank" rel="noopener">Privacy</a><div class="_select_1ntw0_17 _small_1ntw0_71 _languageSelector_12jdn_82" role="button" tabindex="0"><svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="User Interface / Internet"><path id="Vector" d="M17.8416 7.2C17.8416 7.2 17.8416 7.2 17.8416 7.15834C17.2545 5.55519 16.1891 4.17107 14.7895 3.19322C13.39 2.21537 11.7239 1.69098 10.0166 1.69098C8.30933 1.69098 6.64324 2.21537 5.24372 3.19322C3.8442 4.17107 2.77879 5.55519 2.19163 7.15834C2.19163 7.15834 2.19163 7.15834 2.19163 7.2C1.5359 9.00908 1.5359 10.9909 2.19163 12.8C2.19163 12.8 2.19163 12.8 2.19163 12.8417C2.77879 14.4448 3.8442 15.8289 5.24372 16.8068C6.64324 17.7846 8.30933 18.309 10.0166 18.309C11.7239 18.309 13.39 17.7846 14.7895 16.8068C16.1891 15.8289 17.2545 14.4448 17.8416 12.8417C17.8416 12.8417 17.8416 12.8417 17.8416 12.8C18.4974 10.9909 18.4974 9.00908 17.8416 7.2ZM3.54996 11.6667C3.26098 10.5743 3.26098 9.42566 3.54996 8.33334H5.09996C4.96665 9.44045 4.96665 10.5596 5.09996 11.6667H3.54996ZM4.23329 13.3333H5.39996C5.59556 14.0765 5.87514 14.7951 6.23329 15.475C5.41604 14.9183 4.73287 14.1867 4.23329 13.3333ZM5.39996 6.66667H4.23329C4.72568 5.81591 5.40012 5.08456 6.20829 4.525C5.85875 5.20604 5.58758 5.92452 5.39996 6.66667ZM9.16663 16.4167C8.1431 15.6656 7.42425 14.571 7.14163 13.3333H9.16663V16.4167ZM9.16663 11.6667H6.78329C6.62778 10.561 6.62778 9.43901 6.78329 8.33334H9.16663V11.6667ZM9.16663 6.66667H7.14163C7.42425 5.42898 8.1431 4.33443 9.16663 3.58334V6.66667ZM15.7666 6.66667H14.6C14.4044 5.92347 14.1248 5.20495 13.7666 4.525C14.5839 5.08173 15.267 5.81329 15.7666 6.66667ZM10.8333 3.58334C11.8568 4.33443 12.5757 5.42898 12.8583 6.66667H10.8333V3.58334ZM10.8333 16.4167V13.3333H12.8583C12.5757 14.571 11.8568 15.6656 10.8333 16.4167ZM13.2166 11.6667H10.8333V8.33334H13.2166C13.3721 9.43901 13.3721 10.561 13.2166 11.6667ZM13.7916 15.475C14.1498 14.7951 14.4294 14.0765 14.625 13.3333H15.7916C15.292 14.1867 14.6089 14.9183 13.7916 15.475ZM16.45 11.6667H14.9C14.9677 11.1137 15.0011 10.5571 15 10C15.0009 9.44292 14.9675 8.88631 14.9 8.33334H16.45C16.7389 9.42566 16.7389 10.5743 16.45 11.6667Z" fill="currentColor"></path></g></svg><span class="_title_1ntw0_51">English</span><span class="_spacer_1p9az_1"></span><div class="_arrow_1ntw0_60"><svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.71 15.5402L18.36 9.88023C18.4537 9.78726 18.5281 9.67666 18.5789 9.5548C18.6296 9.43294 18.6558 9.30224 18.6558 9.17023C18.6558 9.03821 18.6296 8.90751 18.5789 8.78565C18.5281 8.66379 18.4537 8.55319 18.36 8.46023C18.1726 8.27398 17.9191 8.16943 17.655 8.16943C17.3908 8.16943 17.1373 8.27398 16.95 8.46023L11.95 13.4102L6.99996 8.46023C6.8126 8.27398 6.55915 8.16943 6.29496 8.16943C6.03078 8.16943 5.77733 8.27398 5.58996 8.46023C5.49548 8.55284 5.42031 8.66329 5.36881 8.78516C5.31731 8.90704 5.29051 9.03792 5.28996 9.17023C5.29051 9.30253 5.31731 9.43342 5.36881 9.55529C5.42031 9.67717 5.49548 9.78761 5.58996 9.88023L11.24 15.5402C11.3336 15.6417 11.4473 15.7227 11.5738 15.7781C11.7003 15.8336 11.8369 15.8622 11.975 15.8622C12.1131 15.8622 12.2497 15.8336 12.3762 15.7781C12.5027 15.7227 12.6163 15.6417 12.71 15.5402Z" fill="currentColor"></path></svg></div></div></div></div></div></div></nav></div>
1<script>((storageKey, restoreKey) => { 2 if (!window.history.state || !window.history.state.key) { 3 let key = Math.random().toString(32).slice(2); 4 window.history.replaceState({ key }, ""); 5 } 6 try { 7 let storedY = JSON.parse(sessionStorage.getItem(storageKey) || "{}")[restoreKey || window.history.state.key]; 8 if (typeof storedY === "number") window.scrollTo(0, storedY); 9 } catch (error) { 10 console.error(error); 11 sessionStorage.removeItem(storageKey); 12 } 13 })("react-router-scroll-positions", null)</script>
13<script>window.__reactRouterContext = {"basename":"/","future":{"unstable_enableNodeReadableStream":false,"unstable_optimizeDeps":false},"routeDiscovery":{"mode":"lazy","manifestPath":"/__manifest"},"ssr":true,"isSpaMode":false};window.__reactRouterContext.stream = new ReadableStream({start(controller){window.__reactRouterContext.streamController = controller;}}).pipeThrough(new TextEncoderStream());</script>
13<script type="module" async="">; 14import * as route0 from "/assets/root-DgrjIK3r.js"; 15import * as route1 from "/assets/(_lang).products.account-center-ByHR2R2a.js"; 16 window.__reactRouterManifest = { 17 "entry": { 18 "module": "/assets/entry.client-B62xCkJ5.js", 19 "imports": [ 20 "/assets/index-lGppnjmY.js", 21 "/assets/errorBoundaries-CyYF7UEl.js", 22 "/assets/components-BK3u82EK.js", 23 "/assets/hooks-iPMPJKRm.js", 24 "/assets/warnings-COd-4g09.js" 25 ], 26 "css": [] 27 }, 28 "routes": { 29 "root": { 30 "id": "root", 31 "path": "", 32 "hasAction": false, 33 "hasLoader": true, 34 "hasClientAction": false, 35 "hasClientLoader": false, 36 "hasClientMiddleware": false, 37 "hasDefaultExport": true, 38 "hasErrorBoundary": true, 39 "module": "/assets/root-DgrjIK3r.js", 40 "imports": [ 41 "/assets/index-lGppnjmY.js", 42 "/assets/errorBoundaries-CyYF7UEl.js", 43 "/assets/components-BK3u82EK.js", 44 "/assets/hooks-iPMPJKRm.js", 45 "/assets/warnings-COd-4g09.js", 46 "/assets/index-BM3YeuMt.js", 47 "/assets/i18n-D1-CQUon.js", 48 "/assets/numbers-BWlOhyf_.js", 49 "/assets/index.esm-D44eFarn.js", 50 "/assets/index-D9KE0gxo.js", 51 "/assets/index-5VITrgZC.js", 52 "/assets/client-only-Fw2KSmSM.js", 53 "/assets/urls-BUkIa6ks.js", 54 "/assets/blogs-ssZVuCgn.js", 55 "/assets/meta-OsRUPdaO.js" 56 ], 57 "css": [ 58 "/assets/root-BWdGuOD6.css", 59 "/assets/normalized-BQqTZHj6.css", 60 "/assets/index-BBKVN1B1.css", 61 "/assets/index-CQ2RH-pa.css", 62 "/assets/index-DDcV2nHK.css", 63 "/assets/index-BlaEY6O3.css" 64 ] 65 }, 66 "routes/($lang).products.account-center": { 67 "id": "routes/($lang).products.account-center", 68 "parentId": "root", 69 "path": ":lang?/products/account-center", 70 "hasAction": false, 71 "hasLoader": true, 72 "hasClientAction": false, 73 "hasClientLoader": false, 74 "hasClientMiddleware": false, 75 "hasDefaultExport": true, 76 "hasErrorBoundary": false, 77 "module": "/assets/(_lang).products.account-center-ByHR2R2a.js", 78 "imports": [ 79 "/assets/meta-OsRUPdaO.js", 80 "/assets/index-lGppnjmY.js", 81 "/assets/i18n-D1-CQUon.js", 82 "/assets/index-BM3YeuMt.js", 83 "/assets/numbers-BWlOhyf_.js", 84 "/assets/index-B23X94rQ.js", 85 "/assets/urls-BUkIa6ks.js", 86 "/assets/blogs-ssZVuCgn.js", 87 "/assets/index-Do2nsg51.js", 88 "/assets/index-BFokHGDk.js", 89 "/assets/index-C9qDKeHi.js", 90 "/assets/index-benIMhXd.js", 91 "/assets/index-C1v0fw16.js", 92 "/assets/index-C0sYv4xY.js", 93 "/assets/index.module-wMQvEUWL.js", 94 "/assets/errorBoundaries-CyYF7UEl.js", 95 "/assets/hooks-iPMPJKRm.js", 96 "/assets/warnings-COd-4g09.js", 97 "/assets/Trans-CtPDM99M.js", 98 "/assets/components-D7Lg5PuW.js", 99 "/assets/browser-l0AbNYAV.js", 100 "/assets/index-BDik2zHn.js", 101 "/assets/use-browser-info-nSZgIHfy.js" 102 ], 103 "css": [ 104 "/assets/index-BBKVN1B1.css", 105 "/assets/index-u724zBSQ.css", 106 "/assets/index-DvPdkyiX.css", 107 "/assets/index-OQ5lImoV.css", 108 "/assets/index-Dn2x2PrL.css", 109 "/assets/index-BBn4fTj2.css", 110 "/assets/index-D12xokK8.css", 111 "/assets/index-Ba3yen0p.css", 112 "/assets/index-L1sLbom_.css", 113 "/assets/index-BJCZVaf3.css" 114 ] 115 }, 116 "routes/($lang)._index": { 117 "id": "routes/($lang)._index", 118 "parentId": "root", 119 "path": ":lang?", 120 "index": true, 121 "hasAction": false, 122 "hasLoader": true, 123 "hasClientAction": false, 124 "hasClientLoader": false, 125 "hasClientMiddleware": false, 126 "hasDefaultExport": true, 127 "hasErrorBoundary": false, 128 "module": "/assets/(_lang)._index-BED_M1Fu.js", 129 "imports": [ 130 "/assets/index-lGppnjmY.js", 131 "/assets/hooks-iPMPJKRm.js", 132 "/assets/i18n-D1-CQUon.js", 133 "/assets/index-BM3YeuMt.js", 134 "/assets/numbers-BWlOhyf_.js", 135 "/assets/client-only-Fw2KSmSM.js", 136 "/assets/index-benIMhXd.js", 137 "/assets/index-C1v0fw16.js", 138 "/assets/index-D4ZSeOM5.js", 139 "/assets/index-C0sYv4xY.js", 140 "/assets/use-browser-info-nSZgIHfy.js", 141 "/assets/urls-BUkIa6ks.js", 142 "/assets/blogs-ssZVuCgn.js", 143 "/assets/errorBoundaries-CyYF7UEl.js", 144 "/assets/warnings-COd-4g09.js", 145 "/assets/browser-l0AbNYAV.js" 146 ], 147 "css": [ 148 "/assets/(_lang)-BXpFSEfr.css", 149 "/assets/index-BBKVN1B1.css", 150 "/assets/index-D12xokK8.css", 151 "/assets/index-Ba3yen0p.css", 152 "/assets/index-C3nT3CXH.css", 153 "/assets/index-L1sLbom_.css" 154 ] 155 }, 156 "routes/($lang).products._index": { 157 "id": "routes/($lang).products._index", 158 "parentId": "root", 159 "path": ":lang?/products", 160 "index": true, 161 "hasAction": false, 162 "hasLoader": true, 163 "hasClientAction": false, 164 "hasClientLoader": false, 165 "hasClientMiddleware": false, 166 "hasDefaultExport": false, 167 "hasErrorBoundary": false, 168 "module": "/assets/(_lang).products._index-l0sNRNKZ.js", 169 "imports": [], 170 "css": [] 171 } 172 }, 173 "url": "/assets/manifest-33428643.js", 174 "version": "33428643" 175}; 176 window.__reactRouterRouteModules = {"root":route0,"routes/($lang).products.account-center":route1}; 177 178import("/assets/entry.client-B62xCkJ5.js");</script>
178<!--$-->
178<script>window.__reactRouterContext.streamController.enqueue("[{\"_1\":2,\"_3\":-5,\"_4\":-5},\"loaderData\",{\"_5\":6,\"_7\":8},\"actionData\",\"errors\",\"root\",{\"_16\":17,\"_9\":10,\"_18\":19,\"_20\":21,\"_22\":23,\"_24\":25,\"_26\":27,\"_28\":-7,\"_29\":30,\"_31\":32},\"routes/($lang).products.account-center\",{\"_9\":10,\"_11\":12,\"_13\":14,\"_15\":-7},\"url\",\"https://logto.io/products/account-center\",\"title\",\"Account settings with step-up verification\",\"description\",\"Customize your end-user account experience with Logtoâs APIs. Empower users to securely manage federated identities, authentication methods, and third-party connections across applications.\",\"noSuffix\",\"numbers\",{\"_4178\":5087,\"_5088\":5089},\"language\",\"en\",\"phrases\",{\"_58\":59,\"_60\":61},\"userAgent\",\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PageSourceSearchBot/1.0; +https://pagesourcesearch.com/bot) Chrome/128.0.0.0 Safari/537.36\",\"latestContent\",{\"_33\":34,\"_35\":36},\"rawGoogleOneTapConfig\",\"{\\\"clientId\\\":\\\"100288521176-aqtjihib0665b2hq66m150mf5sjd8sl6.apps.googleusercontent.com\\\",\\\"oneTap\\\":{\\\"isEnabled\\\":true,\\\"autoSelect\\\":false,\\\"closeOnTapOutside\\\":false,\\\"itpSupport\\\":true}}\",\"isGoogleOneTapScriptEnabled\",\"isDebuggingEnabled\",\"0\",\"isProduction\",\"1\",\"blogPosts\",[49,50],\"customerStories\",[37,38],{\"_11\":45,\"_13\":46,\"_41\":47,\"_43\":48},{\"_11\":39,\"_13\":40,\"_41\":42,\"_43\":44},\"Crescendo Lab: Simplifying authorization and scaling securely across Asia\",\"Crescendo Lab uses Logto to manage roles and permissions at scale, supporting regional compliance and flexible access control for their messaging platform across Asia.\",\"link\",\"https://logto.io/stories/crescendo-lab\",\"cover\",\"https://uploads.strapi.logto.io/client_crescendo_lab_min_62913a459c.png\",\"Switching from Firebase, Cognito, and Auth0: Why SpacetoCo chose Logto\",\"SpacetoCo moved from Firebase, Cognito, and Auth0 to Logto to simplify authentication, reduce maintenance, and better support their global venue booking platform.\",\"https://logto.io/stories/spacetoco\",\"https://uploads.strapi.logto.io/spacetoco_min_f578afeb93.png\",{\"_11\":51,\"_13\":55,\"_41\":56,\"_43\":57},{\"_11\":51,\"_13\":52,\"_41\":53,\"_43\":54},\"Logto product updates\",\"Logto v1.42.0 brings custom domain verification files, email allowlists with wildcard patterns, reset-password magic links, a Grant.LimitExceeded webhook, and a protocol-layer refresh with node-oidc-provider v9, Koa 3, and SSRF protection on by default.\",\"https://blog.logto.io/changelogs.2026-july\",\"https://uploads.strapi.logto.io/logto_changelog_2026_264f6ef468.webp\",\"Logto v1.44.0 is here. It adds MFA trusted devices, custom and longer user IDs for migrations, Cap as a self-hosted CAPTCHA, authentication policies for SAML applications, a `theme` authentication parameter, and refresh tokens for dynamic app clients such as ChatGPT and Codex.\",\"https://blog.logto.io/changelogs.2026-september\",\"https://uploads.strapi.logto.io/logto_changelog_2026_09_46c96a4213.webp\",\"components\",{\"_4928\":4929,\"_4\":4930,\"_4931\":4932,\"_4346\":1230,\"_4413\":4414,\"_806\":807,\"_4933\":4934,\"_4935\":4936,\"_4937\":4938},\"app\",{\"_62\":63,\"_64\":65,\"_66\":67,\"_68\":69,\"_70\":71,\"_72\":73,\"_74\":75,\"_76\":77,\"_78\":79,\"_80\":81,\"_82\":83,\"_84\":85,\"_86\":87,\"_88\":89,\"_90\":91,\"_92\":93,\"_94\":95,\"_96\":97,\"_98\":99,\"_100\":101,\"_102\":103,\"_104\":105},\"jwt_decoder\",{\"_11\":4718,\"_13\":4719,\"_4694\":4695,\"_4696\":4697,\"_113\":4720,\"_4721\":4722,\"_4723\":4724,\"_4725\":4726,\"_4727\":4728,\"_4729\":4730,\"_4731\":4732,\"_4733\":4734,\"_4735\":4736,\"_4737\":4738,\"_4739\":4740,\"_4741\":4742,\"_4743\":4744,\"_4745\":4746,\"_4747\":4748,\"_4749\":4750,\"_4751\":4752,\"_4753\":4754,\"_4755\":4756,\"_4757\":4750,\"_4758\":4759,\"_4760\":4761,\"_4762\":4763,\"_4713\":4764,\"_4765\":4766,\"_4767\":4768,\"_4769\":4770,\"_4771\":4772},\"base64_decoder\",{\"_11\":4692,\"_13\":4693,\"_4694\":4695,\"_4696\":4697,\"_113\":4698,\"_4699\":4700,\"_4701\":4702,\"_4703\":4704,\"_4705\":4706,\"_4707\":4708,\"_4709\":4710,\"_4711\":4712,\"_4630\":4631,\"_4713\":4633,\"_4714\":4715,\"_4716\":4717},\"oauth_providers\",{\"_11\":4621,\"_13\":4622,\"_503\":4623,\"_4624\":4625,\"_4626\":4627,\"_4628\":4629,\"_4630\":4631,\"_4632\":4633,\"_4634\":4635,\"_4636\":4637,\"_4638\":4639,\"_4640\":4641,\"_4642\":4643,\"_4644\":4645,\"_4646\":4647,\"_4648\":4649,\"_4650\":4651,\"_4652\":4653,\"_4654\":4655,\"_4656\":4657,\"_4658\":4659,\"_4660\":4661,\"_4662\":4663,\"_4664\":4665,\"_4666\":4667,\"_4668\":4669,\"_4670\":4671,\"_4672\":4673,\"_4674\":4675,\"_4676\":4677,\"_4678\":4679,\"_4680\":4681,\"_4682\":4683,\"_4684\":4685,\"_4686\":4687,\"_4688\":4689,\"_4690\":4691},\"start_with_free\",\"Start with free\",\"home\",{\"_104\":4420,\"_4421\":4422,\"_4423\":4424,\"_4425\":4426,\"_4427\":4428,\"_4429\":4430,\"_4431\":4432,\"_4433\":4434,\"_677\":4435},\"ai\",{\"_111\":4196,\"_13\":4197,\"_4198\":4199,\"_3060\":4200,\"_140\":4201,\"_4202\":4203,\"_4204\":4205,\"_4206\":4207,\"_251\":426,\"_4208\":4209,\"_4210\":4211,\"_4212\":4213},\"about_us\",{\"_4164\":4165,\"_4166\":4167,\"_4168\":4169},\"customers\",{\"_11\":4055,\"_122\":4056,\"_13\":4057,\"_4058\":4059,\"_4060\":4061,\"_168\":4062},\"customer_stories\",{\"_11\":4050,\"_13\":4051,\"_4052\":4053,\"_4054\":4024},\"compare\",{\"_2652\":3042,\"_3043\":3044,\"_3045\":3046,\"_3047\":3048,\"_3049\":3050,\"_3051\":3052,\"_3053\":3054,\"_3055\":3056},\"pricing\",{\"_111\":2626,\"_113\":2627,\"_2628\":2629,\"_2630\":2631,\"_806\":807,\"_2632\":2633,\"_2634\":2635,\"_2636\":2637,\"_2638\":2639,\"_2640\":2641,\"_2642\":2643,\"_2644\":2645,\"_142\":2646,\"_2647\":2648,\"_2649\":2650}
178,\"products\",{\"_1043\":1044,\"_1045\":1046,\"_1047\":1048,\"_1049\":1050,\"_1051\":1052,\"_1053\":1054,\"_1055\":1056,\"_1057\":1058,\"_1059\":1060,\"_1061\":1062,\"_1063\":1064,\"_1065\":1066,\"_1067\":1068,\"_1069\":1070,\"_1071\":1072,\"_1073\":1074,\"_1075\":1076,\"_1077\":1078,\"_1079\":1080,\"_1081\":1082,\"_1083\":1084,\"_1085\":1086},\"solutions\",{\"_734\":735,\"_736\":737,\"_738\":739,\"_740\":741,\"_742\":743,\"_744\":745},\"trust_and_security\",{\"_111\":675,\"_113\":676,\"_677\":678,\"_130\":131,\"_679\":680,\"_681\":682,\"_683\":684,\"_685\":686,\"_687\":688},\"contact\",{\"_11\":614,\"_615\":616,\"_617\":618,\"_619\":620,\"_621\":622,\"_623\":624,\"_625\":626,\"_627\":628,\"_629\":630,\"_631\":632,\"_633\":634,\"_635\":636,\"_637\":638,\"_639\":640,\"_641\":642,\"_643\":644,\"_645\":646,\"_647\":648,\"_649\":650,\"_651\":652},\"cli_auth\",{\"_11\":432,\"_13\":433,\"_434\":435,\"_436\":437,\"_111\":438,\"_113\":439,\"_440\":441,\"_442\":443,\"_444\":445,\"_446\":447,\"_448\":449,\"_450\":451,\"_142\":452,\"_453\":454},\"base64_decoder_learn\",{\"_239\":240,\"_241\":242,\"_243\":244,\"_245\":246,\"_247\":248,\"_249\":250,\"_251\":252,\"_253\":254,\"_255\":256,\"_142\":257},\"why_not_build_auth\",{\"_120\":121,\"_122\":123,\"_111\":124,\"_113\":125,\"_126\":127,\"_128\":129,\"_130\":131,\"_132\":133,\"_134\":135,\"_136\":137,\"_138\":139,\"_140\":141,\"_142\":143},\"earned_the_trust\",{\"_111\":112,\"_113\":114,\"_115\":116},\"unlock_more_with_cloud\",\"Unlock more with Logto Cloud\",\"tool_promo_banner\",{\"_106\":110},\"banner\",{\"_106\":107,\"_108\":109},\"text\",\"ð Get an overview of what Logto offers for AI use cases!\",\"link_text\",\"Let's go\",\"Learn why you shouldnât build your own auth, and what happened to dozens of teams that did\",\"headline\",\"Earned the trust of our valued clients\",\"subtitle\",\"Logto pioneers authentication support for products and plugins in the post-AI era\",\"card\",{\"_11\":117,\"_118\":119},\"Alexander De Ridder, INK Co-founder \u0026 CTO\",\"quote\",\"We developed SEO.app, the first OpenAI-approved SEO plugin for ChatGPT. The rapid influx of daily sign-ups, reaching thousands, prompted our transition to Auth0 Enterprise within 4 days, even without a monetization strategy. However, this necessitated a complete authentication redo, causing disruptions in user engagement. Each plugin update required a re-verification process with OpenAI. Logto played a vital role in swiftly resolving these challenges, allowing us to relaunch on the app store, secure customer identities, and achieve a significant victory. We are excited to explore Logto Cloud for future plugin products.\",\"meta_title\",\"Why you shouldn't build your own authentication system\",\"meta_description\",\"You can build your own auth in a day, and it runs for years. The real cost shows up the day your business changes: enterprise SSO, unified identity, AI agents. Lessons from dozens of B2B interviews.\",\"You can build your own auth in a day. Thatâs the trap.\",\"Dozens of B2B teams told us the same story. It starts as a simple login page. Then real traffic runs through it, and it quietly becomes identity infrastructure: the foundation your whole product stands on.\",\"primary_cta\",\"Start with Logto free\",\"secondary_cta\",\"Talk to our team\",\"learn_more\",\"Learn more\",\"identity_model\",{\"_111\":224,\"_113\":225,\"_168\":226},\"triggers\",{\"_111\":197,\"_113\":198,\"_199\":200,\"_201\":202,\"_203\":204},\"cost\",{\"_111\":182,\"_113\":183,\"_168\":184},\"choose\",{\"_111\":166,\"_113\":167,\"_168\":169},\"cta\",{\"_11\":164,\"_113\":165},\"faq\",{\"_111\":144,\"_145\":146},\"Frequently asked questions\",\"data\",[147,148,149,150,151],{\"_152\":162,\"_154\":163},{\"_152\":160,\"_154\":161},{\"_152\":158,\"_154\":159},{\"_152\":156,\"_154\":157},{\"_152\":153,\"_154\":155},\"question\",\"Why are AI agents and MCP becoming a new source of auth pressure?\",\"answer\",\"Because they introduce a new case: a client accessing resources on a userâs behalf. If the old system was designed only around a person logging in on a page, it struggles to answer who the token is issued to, what its scope is, how to revoke it, and who gets logged in the audit trail. At bottom this is the same class of business change as enterprise SSO, just with a newer trigger.\",\"Weâve run our own for years. Can we still migrate?\",\"Yes, though a single hard cutover usually isnât the way. The realistic path is migrating in layers: put new sign-ups, new logins, and new enterprise SSO on the identity platform first, and migrate existing users gradually on their next login. Unify the user directory and organization model first, then work through fine-grained permissions over time, keeping a rollback path and audit logs throughout.\",\"Why does enterprise SSO make homegrown auth complicated?\",\"Because enterprise SSO means making your product plug into the customerâs own identity system. Different customers use different IdPs, protocols, claim fields, certificates, and organization mappings. Getting the first customer connected doesnât make the rest c
178opy-paste. More often it slowly turns into hand-work only one engineer understands.\",\"Whatâs the difference between authentication and authorization?\",\"Authentication answers âwho are you.â Authorization answers âwhat can you do.â In a real SaaS the two are hard to separate cleanly: users, organizations, roles, permissions, sessions, token claims, and audit logs all weave together. So when you replace an auth system, you canât just look at the login page.\",\"Should you never build your own authentication system?\",\"No. Early demos, internal tools, one-off validation projects, or highly specific fine-grained authorization that off-the-shelf options canât express can all be a fit for building your own, or half of it. What to avoid is taking on a long-term, generic piece of identity infrastructure without realizing it, and parking it inside a business teamâs maintenance scope.\",\"Auth probably isnât your core business. Treat it that way.\",\"Logto is open source, self-hostable, and also offered as a managed Cloud. Sign-in, MFA, SSO, and RBAC work out of the box on standard OIDC. Billing follows tokens, and the day you want to move out, the door stays open.\",\"If you donât build it, how do you choose?\",\"Most mature auth already covers the features: SSO, MFA, organizations, unified login, agent access. The real difference is whether you can leave. Donât climb out of your own few thousand lines just to get locked into someone elseâs.\",\"cards\",[170,171,172,173],{\"_11\":180,\"_13\":181},{\"_11\":178,\"_13\":179},{\"_11\":176,\"_13\":177},{\"_11\":174,\"_13\":175},\"Your data is never locked in\",\"Export user data whenever you want. And handing this sensitive data to a specialist spares you the risk of guarding a pile of PII you were never the right party to hold.\",\"Billing that doesnât track your user table\",\"Charging by registered users or monthly actives follows a table that only grows. At scale thatâs a growth tax, the exact thing that pushes teams to build their own.\",\"A door you can actually walk through\",\"If itâs open source and self-hostable, you can leave whenever you want. Donât trade your own custom system for a hosted one you canât exit either.\",\"Standard protocols, not an invented stack\",\"OIDC, OAuth, and RS256-signed JWTs you already understand. Read claims straight from an ordinary token, with no vendor-specific API to learn.\",\"The real cost isnât the build. Itâs carrying it for years.\",\"The first version is cheap: a few engineers, a few weeks, out the door. Then you feed it every year with the engineering time that belonged in your core product.\",[185,186,187],{\"_11\":194,\"_118\":195,\"_13\":196},{\"_11\":191,\"_118\":192,\"_13\":193},{\"_11\":188,\"_118\":189,\"_13\":190},\"Where do you want your engineers?\",\"No customer pays you a cent more because you wrote your own OAuth server.\",\"Auth has to be reliable. But âreliableâ isnât the same as âbuilt by you.â For most products itâs a core dependency, not a core differentiator. Those two are a long way apart.\",\"It quietly rests on one or two people\",\"The critical context lives in someoneâs head, not the docs.\",\"Which customer is configured how, why a past migration was done a certain way. When that person is out, the enterprise pipeline stalls. When they leave, it walks out the door with them.\",\"The bill just changed how itâs paid\",\"You never get an invoice that says âauthentication.â\",\"You pay in person-months, slipped deadlines, security debt, and rework. One membership organization built their own to dodge a license fee; five years on, maintaining it had cost more than buying ever would.\",\"Homegrown auth runs fine â until the business moves\",\"It logs people in for years without an incident. Then one business change turns âenoughâ into âin the wayâ overnight. These three arrive for almost every product that scales.\",\"section_1\",{\"_11\":218,\"_13\":219,\"_207\":220},\"section_2\",{\"_11\":212,\"_13\":213,\"_207\":214},\"section_3\",{\"_11\":205,\"_13\":206,\"_207\":208},\"AI agents and CLIs start acting on a userâs behalf\",\"Itâs no longer just people in a browser. Agents, MCP servers, and command lines all claim to act for some user. \u003cbold\u003eAnd your auth only knows how to log a person into a page.\u003c/bold\u003e\",\"bullets\",[209,210,211],\"Who is the token issued to, with what scope and what audience?\",\"Grant just one tool or one slice of data, then revoke it later\",\"MCP and CLI access lean on OAuth, not a login form\",\"Identity that started scattered now has to be one\",\"Split by organization, split by product, often inherited through acquisitions. \u003cbold\u003eâUnify identityâ sounds like a feature; in code it means redefining what counts as one user and one organization.\u003c/bold\u003e\",[215,216,217],\"Can one email belong to several organizations? How do you migrate historical usernames?\",\"Nine products from acquisitions means nine auth stacks running in parallel\",\"Revoke a leaver across all of them at once, and audit it in one place\",\"Enterprise customers start asking for SSO\",\"The first big deal lands and procurement wants SSO through their own Entra or Google Worksp
178ace. Then both SAML and OIDC, because the next customer runs something else. \u003cbold\u003eEvery customerâs identity setup is different, and almost none of the work carries over.\u003c/bold\u003e\",[221,222,223],\"Different protocols, field mappings, and certificate rotations per customer\",\"SSO isnât built once. You rebuild it for every enterprise you sign\",\"It quietly becomes hand-work that only one engineer understands end to end\",\"It looked like a feature. It left behind a whole identity model.\",\"Every homegrown auth starts as a handful of lines. The trouble starts after launch, when each small decision quietly hardens into the model your whole product assumes is true.\",[227,228,229],{\"_11\":236,\"_118\":237,\"_13\":238},{\"_11\":233,\"_118\":234,\"_13\":235},{\"_11\":230,\"_118\":231,\"_13\":232},\"Year five: a foundation you canât touch\",\"Swapping the login page on paper meant rebuilding the identity foundation in code.\",\"One 20-year SaaS tried to move to email-as-username. Permission checks lived in hundreds of modules. Nobody would sign off, so it dragged on until it couldnât.\",\"Day two hundred: a silent identity model\",\"Who counts as a user. Which organization they belong to. Which session is still trustworthy. How access gets pulled back.\",\"Rate limits, MFA and its recovery flow, sessions, refresh tokens, an organization model thatâs far more than an is_admin boolean. Every answer you ship becomes a rule the product now silently assumes.\",\"Day one: forty lines of code\",\"Email, password, hash it, store it, compare on login. Clean and done.\",\"Thatâs exactly why every team starts here, and why auth looks like something you can knock out in an afternoon.\",\"quick_answer\",\"Base64 is a way to represent binary data as plain text using 64 ASCII characters: AâZ, aâz, 0â9, plus + and /. It lets binary like images, keys, and email attachments travel safely through systems built for text. It is encoding, not encryption.\",\"url_safe_learn_more\",\"learn more\",\"anchor_label\",\"Link to this section\",\"nav\",{\"_283\":420,\"_421\":422,\"_423\":424,\"_425\":426,\"_427\":428,\"_429\":430,\"_142\":431},\"what_is_base64\",{\"_11\":391,\"_13\":392,\"_393\":394,\"_395\":396,\"_397\":398,\"_399\":400,\"_401\":402,\"_403\":404},\"why_base64\",{\"_11\":387,\"_13\":388,\"_389\":390},\"how_it_works\",{\"_11\":336,\"_13\":337,\"_338\":339,\"_340\":341,\"_342\":343,\"_344\":345,\"_346\":347,\"_348\":349,\"_350\":351,\"_352\":353,\"_354\":355,\"_356\":357,\"_358\":359,\"_360\":361,\"_362\":363,\"_364\":365},\"when_to_use\",{\"_11\":295,\"_13\":296,\"_207\":297,\"_298\":299,\"_300\":301,\"_302\":303,\"_304\":305,\"_306\":307,\"_308\":309,\"_310\":311},\"limitations\",{\"_11\":278,\"_13\":279,\"_207\":280,\"_281\":282},{\"_11\":144,\"_258\":259},\"items\",[260,261,262,263,264,265],{\"_152\":276,\"_154\":277},{\"_152\":274,\"_154\":275},{\"_152\":272,\"_154\":273},{\"_152\":270,\"_154\":271},{\"_152\":268,\"_154\":269},{\"_152\":266,\"_154\":267},\"Does this tool send my data anywhere?\",\"No. Encoding and decoding run entirely in your browser. Nothing you paste is uploaded or logged.\",\"Can Base64 encode any file, or just text?\",\"Any binary: images, PDFs, keys, executables. Base64 works on raw bytes, so the original content type does not matter.\",\"What is the difference between Base64 and Base64URL?\",\"Base64URL is the same encoding with a URL- and filename-safe alphabet: - and _ replace + and /, and the = padding is usually dropped. It is common in URLs, filenames, and many web APIs.\",\"What do the \\\"=\\\" signs at the end mean?\",\"They are padding that keeps the output a multiple of 4 characters. One \\\"=\\\" means the input had 2 leftover bytes; two \\\"=\\\" means it had 1; no \\\"=\\\" means the length was already a multiple of 3 bytes.\",\"Why is my Base64 string about 33% larger?\",\"Base64 turns every 3 bytes into 4 characters, so the encoded form is always roughly one-third bigger than the original bytes.\",\"Is Base64 encryption or secure?\",\"No. It is reversible encoding with a public alphabet, so anyone can decode it instantly and it adds zero confidentiality. Encrypt sensitive data instead.\",\"Limitations (and one big misconception)\",\"Base64 is a representation, not a free lunch. Keep three things in mind:\",[286,287,288],\"notification\",{\"_283\":284,\"_13\":285},\"label\",\"Base64 is not encryption\",\"This is the mistake people make most. Base64 hides nothing. Anyone can decode it in one line. If the data is sensitive, encrypt it. Base64 only changes the shape, never who can read it.\",{\"_283\":293,\"_13\":294},{\"_283\":291,\"_13\":292},{\"_283\":289,\"_13\":290},\"It is unreadable\",\"Opaque strings make logs and debugging harder.\",\"It costs CPU\",\"Encoding and decoding are not free at high volume or on large payloads.\",\"It is ~33% bigger\",\"3 bytes become 4 characters, so encoded data inflates by roughly a third.\",\"When should you use Base64?\",\"Reach for Base64 when binary has to pass through a text-only channel:\",[327,328,329],\"advantages_intro\",\"What you get in return:\",\"advantages_bullets\",[321,322],\"url_safe_title\",\"URL-safe Base64 (Base64URL)\",\"url_safe_intro\",\"Standard Base64 leans on three characters that clash with how URLs, query strings, and filenames work: +, /, and the = padding. Drop a normal Base64 string into a link and it can break in quiet ways:\",\"url_safe_problems\",[312,313,314],\"url_safe_escape_note\",\"You can percent-encode them (+ becomes %2B, / becomes %2F, = becomes %3D), but that bloats the string and is easy to double-encode by mistake.\",\"url_safe_fix\",\"Base64URL (RFC 4648 §5) fixes this at the source: swap + for -, swap / for _, and drop the = padding. The result drops straight into a URL, query parameter, or filename with nothing to escape. You will see it in URLs, filenames, and many web APIs.\",{\"_283\":319,\"_13\":320},{\"_283\":317,\"_13\":318},{\"_283\":315,\"_13\":316},\"= is reserved as well\",\"It splits keys from values in a query string, so trailing = padding gets stripped or misread.\",\"/ is a path separator\",\"A / inside a value can be read as a new path segment, and most filesystems reject it in a filename outright.\",\"+ turns into a space\",\"In a query string, many servers read + as a space. So ?data=ab+cd quietly arrives as \\\"ab cd\\\", and the bytes are wrong.\",{\"_283\":325,\"_13\":326},{\"_283\":323,\"_13\":324},\"Nothing gets corrupted\",\"The output survives channels that would otherwise damage raw bytes.\",\"It works everywhere\",\"Any ASCII-capable system can read it, with no charset negotiation.\",{\"_283\":334,\"_13\":335},{\"_283\":332,\"_13\":333},{\"_283\":330,\"_13\":331},\"Restricted characters\",\"Move data through systems that choke on control bytes.\",\"Text-only transports\",\"Put binary inside JSON, XML, or a URL query parameter.\",\"Inline assets\",\"Embed a tiny image or font in HTML/CSS to save a request.\",\"How Base64 encoding works\",\"The whole scheme is one idea on repeat: take 3 bytes (24 bits), re-slice them into four 6-bit groups, and look each group up in the alphabet. Here is the word \\\"Logto\\\", encoded by hand.\",\"steps\",[381,382,383,384,385,386],\"table_caption\",\"Step 1. Turn each character into its 8-bit binary:\",\"table_headers\",[378,379,380],\"regroup_caption\",\"Step 2. Take the first three bytes, \\\"Log\\\", and re-slice those same 24 bits into four 6-bit groups:\",\"regroup_byte_label\",\"8-bit bytes\",\"regroup_group_label\",\"6-bit groups\",\"lookup_caption\",\"Step 3. Read each 6-bit group as a number, then look the number up in the alphabet:\",\"lookup_headers\",[375,376,377],\"leftover_caption\",\"\\\"Logto\\\" is 5 bytes, not a multiple of 3. The last two bytes, \\\"to\\\", leave a 6 + 6 + 4 split. Pad those last 4 bits with zeros to fill a 6-bit group, then add one \\\"=\\\" to complete the 4-character block:\",\"result_caption\",\"Put the blocks together:\",\"node_caption\",\"Every language ships this built in. In Node.js:\",\"features_intro\",\"Three rules fall out of that process, worth keeping in mind:\",\"features_bullets\",[366,367,368],\"references_label\",\"Sources\",{\"_283\":373,\"_13\":374},{\"_283\":371,\"_13\":372},{\"_283\":369,\"_13\":370},\"Padding counts the leftovers\",\"No \\\"=\\\" means a multiple of 3 bytes, one \\\"=\\\" means 2 leftover bytes, two \\\"=\\\" means 1 leftover byte.\",\"\\\"=\\\" means padding\",\"It only appears when the input is not a multiple of 3 bytes.\",\"3 in, 4 out\",\"Output length is the input rounded up to a multiple of 4 characters, so encoded data always runs about 33% larger.\",\"6-bit group\",\"Value\",\"Base64 character\",\"Character\",\"ASCII code\",\"Binary\",\"Write each character as its 8-bit binary, using its ASCII code.\",\"Take 3 bytes at a time. That is 24 bits.\",\"Re-slice the same 24 bits into four groups of 6 bits.\",\"Read each 6-bit group as a number from 0 to 63.\",\"Look that number up in the alphabet to get one character.\",\"If the last chunk of bytes does not reach 3, pad the leftover bits with zeros and add \\\"=\\\" so every block stays 4 characters.\",\"Why does Base64 exist?\",\"Early network protocols were built for text, not raw bytes. ASCII used 7 bits and 128 characters, which was fine for English but not for binary. Some systems mangled control characters or rewrote line endings (LF to CR + LF), quietly corrupting images and audio in transit.\",\"summary\",\"Base64 sidesteps all of that by only ever emitting characters every system already agrees on. Base16 and Base32 do the same job with smaller alphabets, but Base64 packs more data per
178character while staying safe. That is why it won.\",\"What is Base64?\",\"Base64 uses a fixed alphabet of 64 characters. Each value from 0 to 63 maps to exactly one of them, which is how any 3 bytes of binary become 4 readable characters:\",\"alphabet_headers\",[417,418,419],\"alphabet_notes\",{\"_409\":410,\"_411\":412,\"_413\":414,\"_415\":416},\"padding_note\",\"The \\\"=\\\" sign is the one exception. It is padding, not one of the 64 values, and only rounds out the last block.\",\"usage_intro\",\"You have almost certainly seen it already. Base64 shows up wherever binary needs to ride inside text:\",\"usage_bullets\",[405,406,407,408],\"example_caption\",\"That data-URI trick looks like this. The long string is the entire image:\",\"Inlining a small image or icon straight into HTML or CSS\",\"Returning binary blobs inside a JSON API response\",\"Encoding email attachments (MIME)\",\"Storing keys and certificates in PEM files\",\"upper\",\"26 uppercase letters\",\"lower\",\"26 lowercase letters\",\"digit\",\"10 digits\",\"symbol\",\"2 symbols\",\"Values\",\"Characters\",\"\",\"On this page\",\"what\",\"What is Base64\",\"why\",\"Why it exists\",\"how\",\"How it works\",\"uses\",\"When to use it\",\"limits\",\"Limitations\",\"FAQ\",\"CLI Auth · Drop-in OAuth for your CLI\",\"Drop-in OAuth for Node.js and Bun CLIs. Four flows (device code, authorization code + PKCE, token exchange, client credentials), plus the boring stuff: token storage, refresh, cross-process locks, keychain. Swap any piece you don't like.\",\"eyebrow_package\",\"cli-auth\",\"eyebrow_version\",\"v0.1.0-beta\",\"Production-grade OAuth for your \u003cem\u003eCLI\u003c/em\u003e\",\"A batteries-included, fully pluggable authentication library. Four flows. Token storage, refresh, cross-process locking, keychain integration. Every piece handled, every piece swappable.\",\"github_button\",\"View on GitHub\",\"meta\",{\"_604\":605,\"_606\":607,\"_608\":609,\"_610\":611,\"_612\":613},\"flows\",{\"_111\":555,\"_113\":556,\"_557\":558,\"_559\":560},\"pain\",{\"_111\":553,\"_113\":554},\"pluggable\",{\"_111\":478,\"_113\":479,\"_480\":481,\"_482\":483,\"_484\":485},\"agnostic\",{\"_111\":476,\"_113\":477},{\"_111\":455,\"_456\":457},\"unlock_more_subtitle\",\"CLI authentication without writing it yourself.\",\"Questions people ask\",\"questions\",[458,459,460,461,462,463],{\"_152\":474,\"_154\":475},{\"_152\":472,\"_154\":473},{\"_152\":470,\"_154\":471},{\"_152\":468,\"_154\":469},{\"_152\":466,\"_154\":467},{\"_152\":464,\"_154\":465},\"Can I brand the post-login callback page?\",\"Yes. The authorization-code flow takes callbackPath and callbackSource. Put callbackPath wherever you want (/auth/callback, /cli-done, whatever) and ship your own HTML through callbackSource. No generic \\\"you can close this window\\\" page. Your CLI, your brand.\",\"Which runtimes are supported?\",\"Node.js 22+ and Bun 1.1+. The library is ESM-only and leans on built-ins (fetch, crypto) that behave the same across both. CommonJS require() is not supported.\",\"What if the OS keyring isn't available?\",\"Use fileStorage. It writes the credential with 0600 permissions so only your user account can open it, and other users on the box get permission-denied. Writes are atomic, so a crash mid-save can't corrupt the file. Detect your environment at runtime (headless server, Docker, SSH) and pick the backend that fits. You're not locked to one.\",\"How does cross-process locking actually work?\",\"A file lock via atomic O_CREAT | O_EXCL. Once the lock is held, the library re-reads the credential from storage and checks whether another process already refreshed. Without that recheck, two shells racing to refresh would invali
178date each other's refresh token. Refresh tokens are usually single-use.\",\"Does it work with Auth0, Okta, or my own provider?\",\"Yes. Any OIDC-compliant provider. Hand it the endpoint metadata and it runs the flows. We don't care who issues your tokens.\",\"How is this different from openid-client?\",\"openid-client is great. But it's a protocol library, not a CLI auth library, and the plumbing on top is still on you. cli-auth is that plumbing: token storage with sane defaults, automatic refresh, a cross-process lock so two shells don't burn each other's refresh token, keychain integration, per-resource caching. Write it once here instead of once per CLI.\",\"Bring your own identity provider\",\"Any OAuth 2.0 / OIDC-compliant server works. Point the library at your endpoints and it runs. We didn't build this only for Logto.\",\"Swap any piece. Nothing is a black box.\",\"Storage, locking, fetch, and the callback page are all hooks. Nothing hardcoded. Click a slot and watch the config rewrite itself.\",\"swap_label\",\"Swap the\",\"slots\",{\"_486\":486,\"_488\":488,\"_490\":490,\"_492\":551,\"_494\":552},\"options\",{\"_486\":487,\"_488\":489,\"_490\":491,\"_492\":493,\"_494\":495},\"storage\",{\"_538\":539,\"_529\":540,\"_541\":542,\"_510\":543},\"lock\",{\"_527\":528,\"_529\":530,\"_510\":531},\"fetch\",{\"_496\":516,\"_517\":518,\"_519\":520},\"callback\",{\"_496\":509,\"_510\":511},\"callbackUi\",{\"_496\":497,\"_498\":499,\"_500\":501},\"default\",{\"_283\":507,\"_503\":508},\"branded\",{\"_283\":505,\"_503\":506},\"redirect\",{\"_283\":502,\"_503\":504},\"Redirect to your site\",\"hint\",\"Bounce the browser to a real page you already host. Let your marketing site do the styling.\",\"Branded HTML\",\"callbackSource is just a function. Write whatever HTML you want to the ServerResponse.\",\"Built-in page\",\"Leave the field off. The user gets a plain \\\"You can close this tab\\\" page on both success and failure.\",{\"_283\":514,\"_503\":515},\"custom\",{\"_283\":512,\"_503\":513},\"Custom path\",\"Any path starting with / works. Register the same one with your provider or you'll get redirect_uri_mismatch.\",\"Default /callback\",\"Leave the field off. Defaults to /callback. Just make sure that's the redirect URI registered with your provider.\",{\"_283\":525,\"_503\":526},\"proxy\",{\"_283\":523,\"_503\":524},\"tracing\",{\"_283\":521,\"_503\":522},\"With tracing\",\"Wrap fetch and emit spans across the full login â refresh lifecycle. Shows up in OTel like any other HTTP call.\",\"Via proxy agent\",\"Every OAuth request goes through your dispatcher. Useful for corporate proxies, mTLS, or a custom CA bundle.\",\"Default\",\"Leave the field off. The library uses globalThis.fetch, which is already available on Node 22+ and Bun.\",\"none\",{\"_283\":536,\"_503\":537},\"file\",{\"_283\":534,\"_503\":535},{\"_283\":532,\"_503\":533},\"Your own\",\"An async lock() that returns a release function. Redis, Postgres advisory locks, whatever you already run.\",\"File lock\",\"Atomic O_CREAT | O_EXCL. Works with any storage backend.\",\"None\",\"Fine if only one invocation of your CLI ever runs at a time. Add a lock once that stops being true. Parallel refreshes invalidate each other's refresh token.\",\"keyring\",{\"_283\":549,\"_503\":550},{\"_283\":547,\"_503\":548},\"memory\",{\"_283\":545,\"_503\":546},{\"_283\":532,\"_503\":544},\"Three methods: load, save, clear. That's the whole contract. Add a lock() if two processes will ever refresh at once.\",\"In-memory\",\"Nothing persists. Useful for tests and short-lived daemons.\",\"File (0600)\",\"0600 file, 0700 dir. Atomic writes, so a crash mid-save can't corrupt the file.\",\"OS keychain\",\"macOS Keychain, Windows Credential Store, or Linux Secret Service, whichever the OS provides. Via @napi-rs/keyring.\",\"callback path\",\"callback page\",\"The stuff nobody tells you CLI auth needs.\",\"Every note below is a real bug, race condition, or spec clause we've already handled.\",\"Four flows. One library.\",\"Pick a strategy. The plumbing comes with it.\",\"when_label\",\"When to reach for this â\",\"strategies\",[561,562,563,564],{\"_565\":595,\"_283\":596,\"_568\":597,\"_570\":598,\"_13\":599,\"_207\":600}
178,{\"_565\":585,\"_283\":586,\"_568\":587,\"_570\":588,\"_13\":589,\"_207\":590},{\"_565\":576,\"_283\":577,\"_568\":578,\"_570\":579,\"_13\":580,\"_207\":581},{\"_565\":566,\"_283\":567,\"_568\":569,\"_570\":571,\"_13\":572,\"_207\":573},\"id\",\"client-credentials\",\"Client credentials\",\"rfc\",\"RFC 6749 §4.4\",\"when\",\"Service accounts and daemons. No human in the loop. Client ID and secret, straight to an access token.\",\"Per-resource caching when you're hitting more than one API.\",[574,575],\"Re-auths on expiry, so there is no refresh-token dance to write\",\"One cached token per resource when you talk to several APIs\",\"token-exchange\",\"Token exchange\",\"RFC 8693\",\"Personal access tokens and delegation. Trade an existing token for one with narrower scope.\",\"Good for PAT-driven CLIs, or a service impersonating a user downstream.\",[582,583,584],\"Subject and actor tokens for delegation chains\",\"Public or confidential clients, your call\",\"extraParams for the provider-specific knobs\",\"authorization-code\",\"Authorization code + PKCE\",\"RFC 7636\",\"Desktop and browser-capable CLIs. When you'd rather open a browser than ask the user to copy a code.\",\"Opens a loopback listener, launches the browser, tears the listener down once the callback lands.\",[591,592,593,594],\"Temporary server on 127.0.0.1, gone the moment the callback returns\",\"PKCE verifier and challenge generated for you, so no secret has to ship in the binary\",\"Callback port and path are both configurable\",\"Custom post-login HTML via callbackPath + callbackSource\",\"device-code\",\"Device code\",\"RFC 8628\",\"Headless, SSH, or remote. Anywhere your CLI lives somewhere a browser cannot reach. The user signs in from their laptop while your CLI polls in the background.\",\"The one you want for servers, Docker shells, and any box where opening a browser isn't an option.\",[601,602,603],\"Polling loop handles slow_down back-off and the expiry deadline for you\",\"User code surfaced through an onAuthorization callback so you decide how to show it\",\"Refreshes automatically when the access token nears expiry\",\"mit\",\"MIT license\",\"node\",\"Node.js 22+\",\"bun\",\"Bun 1.1+\",\"esm\",\"ESM only\",\"typescript\",\"TypeScript\",\"Have questions? We have answers.\",\"about_product\",\"About product, features, and bugs\",\"about_product_description\",\"Join our Discord server to chat with the community and the team.\",\"join_discord\",\"Join Discord\",\"issues\",\"Issues regarding open-source project\",\"issues_description\",\"Open a GitHub issue for better support.\",\"open_issue\",\"Open an issue\",\"talk_to_logto_team\",\"Talk to the Logto team\",\"talk_to_logto_team_description\",\"Book a demo, get a quote, talk about the Enterprise plan, or anything you want to discuss.\",\"select_an_option\",\"Select an option\",\"submit\",\"Submit\",\"submitting\",\"Submitting...\",\"submitted_successfully\",\"Submitted successfully\",\"submitted_successfully_description\",\"Thank you for reaching out. We will get back to you soon.\",\"submission_failed\",\"Submission failed\",\"submission_failed_description\",\"Something went wrong. Please try again later.\",\"field_required\",\"This field is required.\",\"invalid_email\",\"The email address is invalid\",\"fields\",{\"_664\":665,\"_653\":666,\"_655\":667,\"_657\":668,\"_669\":670,\"_660\":671,\"_672\":673,\"_662\":674},\"placeholders\",{\"_653\":654,\"_655\":656,\"_657\":658,\"_11\":659,\"_660\":661,\"_662\":663},\"first_name\",\"First\",\"last_name\",\"Last\",\"email\",\"[email protected]\",\"Title\",\"company\",\"Acme Inc.\",\"body\",\"I want to get a quote for the Enterprise plan.\",\"src\",\"Source\",\"First name\",\"Last name\",\"Email\",\"job_title\",\"Job title\",\"Company\",\"company_size\",\"Company size\",\"Message\",\"Trust and security\",\"At Logto, we highly value trust and security. We have taken various measures to ensure the security of our services and established a community that is built on trust.\",\"try_logto_cloud\",\"Try Logto Cloud\",\"embracing_trust_and_security\",{\"_111\":720,\"_199\"
178:721,\"_201\":722,\"_203\":723},\"protection_through_latest_tech\",{\"_111\":693,\"_113\":694,\"_168\":695},\"soc2\",{\"_11\":691,\"_13\":692},\"embracing_dev_sec_ops\",{\"_111\":689,\"_113\":690},\"unlock_more_content\",\"Experience safety and trust in Logto Cloud\",\"Embracing DevSecOps for continuous security\",\"Before each code change, our systems automatically perform code scanning and penetration tests. This proactive approach allows us to identify and rectify potential security weaknesses at an early stage, ensuring that our services remain robust and resilient against emerging threats.\",\"SOC 2 Type II\",\"Logto is SOC 2 Type II certified, validating our Security, Availability, and Confidentiality controls. This achievement underscores our commitment to maintaining the highest standards of security and compliance.\",\"360-degree protection through latest technologies\",\"Just like you, we appreciate the convenience of cloud services and software-as-a-service solutions. At Logto, we believe that certain complex challenges should be entrusted to professionals, and we employ state-of-the-art technologies to ensure comprehensive security.\",[696,697,698,699],{\"_11\":715,\"_207\":716},{\"_11\":710,\"_207\":711},{\"_11\":705,\"_207\":706},{\"_11\":700,\"_207\":701},\"Data protection\",[702,703,704],\"Databases are encrypted at rest\",\"Regular database backups follow a geo-redundant policy\",\"Private network enforced\",\"Data isolation\",[707,708,709],\"Production data is rigorously separated\",\"Each Logto tenant is allocated a dedicated database connection\",\"Enforce \u003crls\u003eRow-Level Security\u003c/rls\u003e on user data tables\",\"Flexible and highly available computing\",[712,713,714],\"Flexible infrastructure\",\"Computing resources configured for high availability\",\"Automated failover and disaster recovery\",\"Enforced security, non-negotiable\",[717,718,719],\"\u003cargon\u003eArgon2\u003c/argon\u003e algorithm\",\"Require \u003ctls\u003eTransport Layer Security (TLS)\u003c/tls\u003e encryption\",\"Multi-layer firewall protection\",\"Trust with openness and transparency\",{\"_11\":728,\"_13\":729,\"_207\":730},{\"_11\":726,\"_13\":727},{\"_11\":724,\"_13\":725},\"Your data, you control\",\"Logto Cloud offers multiple regions (Europe, Australia, and US) for data hosting, allowing you to choose the location that best suits your needs. We also provide the assistance you need to export or delete your data, ensuring that you have full control over your information.\",\"Strictly adheres to open standards\",\"Logto meticulously adheres to the battle-tested open standard known as \u003coidc\u003eOpenID Connect\u003c/oidc\u003e, built on \u003coauth\u003eOAuth 2.0\u003c/oauth\u003e. This protocol provides a solid foundation for our services, offering both flexibility and scalability. We also support \u003csaml\u003eSAML\u003c/saml\u003e to meet enterprise-wide needs.\",\"Born open-source, insured by open-source\",\"\u003coss\u003eLogto OSS\u003c/oss\u003e is available as a self-host option. It offers you an additional layer of insurance when you use Logto Cloud, knowing that even in the unlikely event of Logto's discontinuation, you can still seamlessly transition to your self-hosted version.\",[731,732,733],\"Exceptional developer experience\",\"Self-hosted assurance\",\"Watched by a vast community\",\"consumer\",{\"_111\":1000,\"_113\":1001,\"_130\":131,\"_1002\":1003,\"_1004\":1005,\"_98\":1006,\"_756\":1007,\"_758\":1008},\"multi_app_product\",{\"_120\":951,\"_122\":952,\"_111\":953,\"_113\":954,\"_130\":131,\"_955\":956,\"_957\":958,\"_756\":959,\"_758\":848},\"saas\",{\"_111\":899,\"_113\":900,\"_130\":131,\"_808\":901,\"_810\":902,\"_756\":903,\"_758\":904},\"enterprise_ready\",{\"_111\":843,\"_113\":844,\"_130\":131,\"_808\":845,\"_810\":846,\"_756\":847,\"_758\":848},\"enterprises\",{\"_111\":804,\"_113\":805,\"_130\":131,\"_806\":807,\"_808\":809,\"_810\":811,\"_756\":812,\"_758\":813},\"b2b_b2c_unified\",{\"_120\":746,\"_122\":747,\"_111\":748,\"_113\":749,\"_130\":131,\"_750\":751,\"_752\":753,\"_754\":755,\"_756\":757,\"_758\":759},\"Logto B2B + B2C auth: one platform for users \u0026 orgs\",\"Logto handles consumer sign-in and B2B organization access from one user pool, with SSO provisioning, organization branding, and RBAC.\",\"One auth solution for B2B and B2C\",\"Many products run consumer auth and B2B auth in separate stacks. Logto puts individual users and organizations in the same auth solution. Keep sign-in simple for consumers. Add organization context, SSO provisioning, branding, and roles for business customers.\",\"scenarios\",{\"_111\":790,\"_168\":791}
178,\"unified_platform\",{\"_111\":775,\"_113\":776,\"_199\":777,\"_201\":778,\"_203\":779,\"_780\":781},\"requirements\",{\"_111\":760,\"_113\":761,\"_168\":762},\"blogs_section_headline\",\"Read more on B2B + B2C auth architecture\",\"bottom_section_headline\",\"Use one auth solution for B2B and B2C\",\"What B2B + B2C products need from auth\",\"The hard part is not adding one more login option. It is serving consumer users and business customers without splitting auth into multiple systems.\",[763,764,765,766],{\"_11\":773,\"_13\":774},{\"_11\":771,\"_13\":772},{\"_11\":769,\"_13\":770},{\"_11\":767,\"_13\":768},\"Automate B2B onboarding with provisioning\",\"Use enterprise SSO provisioning and email domain provisioning to add eligible users to the right organization. Assign roles based on your requirements.\",\"Brand each organization when needed\",\"Business customers often expect their own branded experience. Organization branding supports that expectation without a custom auth project for every customer.\",\"Keep one user pool for both sides\",\"B2C users and B2B members often overlap. A unified user pool keeps the same person recognizable whether they sign in individually or through a business customer.\",\"Avoid separate auth stacks\",\"Many teams start with one consumer auth system and add another for B2B SSO later. That split creates duplicated accounts and migration work. Product changes have to be built twice.\",\"A unified auth model for users and organizations\",\"Logto combines consumer sign-in and B2B organization access. One product can serve individuals, teams, and business customers.\",{\"_11\":788,\"_13\":789},{\"_11\":786,\"_13\":787},{\"_11\":784,\"_13\":785},\"section_4\",{\"_11\":782,\"_13\":783},\"RBAC for product and organization access\",\"Use API roles for product-level permissions and organization roles for customer-scoped access. Users can automatically join organizations and receive roles when they meet your provisioning requirements.\",\"Just-in-time provisioning for organizations\",\"With Enterprise SSO provisioning, new or existing users can join an organization on their first SSO sign-in. Email domain provisioning can also add users who sign up with verified email addresses or social sign-in with verified emails.\",\"Consumer sign-in stays simple\",\"Offer email, phone, social, and passwordless sign-in. Use one Omni sign-in experience across apps without duplicating user data or maintaining another auth stack.\",\"Organizations on top of one user pool\",\"Keep one source of truth for users while grouping business customers with organizations. The same account can start as an individual user, join a business customer, and later belong to multiple organizations.\",\"When B2B and B2C auth need to work together\",[792,793,794,795],{\"_11\":802,\"_13\":803},{\"_11\":800,\"_13\":801},{\"_11\":798,\"_13\":799},{\"_11\":796,\"_13\":797},\"Product suites with shared users\",\"A consumer app, a B2B product, and a new product line can share the same auth system. You do not need a separate user pool for each product or customer type.\",\"B2B2C platforms\",\"Your customers are businesses, and their users sign in to your platform too. Keep one auth model while giving each organization its own access boundary and branding.\",\"B2B SaaS with individual end users\",\"You sell to companies, but the people using the product still need fast onboarding. Keep consumer-friendly sign-in while business customers use organizations, roles, and enterprise SSO.\",\"B2C product adding B2B customers\",\"Your product starts with individual users, then teams and companies ask for organizations, admin roles, and SSO. Add B2B access without moving everyone into a second auth system.\",\"Identity and auth solutions for large enterprises\",\"Logto offers customizable enterprise plans for companies looking for enhanced security and dedicated customer support.\",\"contact_us\",\"Contact us\",\"card_section\",{\"_111\":832,\"_168\":833}
178,\"features_supported\",{\"_111\":814,\"_113\":815,\"_199\":816,\"_201\":817,\"_203\":818,\"_780\":819},\"Discover our blogs related to Logto Enterprise plan\",\"Meet your large enterprise requirements with Logto\",\"Tailored solutions to meet your enterprise needs\",\"Deploy with confidence using dedicated infrastructure and enterprise support.\",{\"_11\":830,\"_13\":831},{\"_11\":828,\"_13\":829},{\"_11\":826,\"_13\":827},{\"_11\":820,\"_13\":821,\"_207\":822},\"Premium Support\",\"Access priority support channels with faster response times resolve issues promptly and much more\",[823,824,825],\"Service-level agreement\",\"Migration support\",\"Solution and architecture design\",\"Dedicated computing resources\",\"Benefit from dedicated computing power to handle high-demand applications, ensuring consistent performance and reliability.\",\"Custom data region\",\"Choose the geographical location of your data storage to comply with regional data protection regulations and enhance data sovereignty.\",\"Custom resource quota\",\"Receive tailored product feature resource allocations to meet your organization's specific needs, ensuring optimal performance and flexibility.\",\"With advanced customization and stronger security protection\",[834,835,836],{\"_11\":841,\"_13\":842},{\"_11\":839,\"_13\":840},{\"_11\":837,\"_13\":838},\"Premium support\",\"Logto offers premium support with a SLA, ensuring timely responses and issue resolution. This includes developer onboarding, Slack/Discord private channel and much more to streamline integration and optimize the your developer experience.\",\"Specific data region\",\"Logto enables hosting identities and data in specific regions to ensure compliance with local regulations and enhance security. This feature provides businesses with the flexibility to meet data sovereignty requirements while maintaining robust protection for sensitive information.\",\"Private cloud\",\"Your product runs in its own dedicated cloud environment, completely separate from other customers. Itâs designed to meet your specific security, compliance, and performance needs. Youâll still use Logto Cloud, but on a separate instance hosted on Microsoft Azure.\",\"Make your product enterprise ready\",\"From the very beginning, focus on developing must-have features and start selling to large business clients immediately to broaden your market presence.\",{\"_111\":873,\"_168\":874},{\"_111\":849,\"_113\":850,\"_199\":851,\"_201\":852,\"_203\":853,\"_780\":854,\"_855\":856,\"_857\":858},\"Discover our blogs related to enterprise ready\",\"Easily manage your identity across apps with Logto\",\"Quick integration checklist for enterprise-readiness\",\"Logto offers a suite of features that enable immediate sales to enterprise clients, unlocking your revenue potential.\",{\"_11\":871,\"_13\":872},{\"_11\":866,\"_13\":867,\"_207\":868},{\"_11\":864,\"_13\":865},{\"_11\":862,\"_13\":863},\"section_5\",{\"_11\":860,\"_13\":861},\"section_6\",{\"_11\":859,\"_13\":727},\"Standards are deal makers\",\"Audit logs\",\"Audit logs are the centralized stream of all user activity within a team. Part of the security and compliance program of any large enterprise is designed to control and monitor the access of information within the organization. This drives the need for enterprise buyers to ask for a detailed audit trail of all activity that happens within their account.\",\"Organization and collaboration\",\"Apps that donât have team functionality often require password sharing for multiple users to access the account, which is an obvious security hurdle for most business users.\\nUsing \\\"Organization\\\" to group users is also the foundation layer of building a multi-tenant app.\",\"Multi-factor authentication\",\"Multi-factor Authentication (MFA) aligns with enterprise security policies by validating that the owner of an account (or set of credentials) is actually the one trying to access the application. Nearly half of businesses use MFA to secure company data and assets.\",\"Role-based access control\",\"Today, RBAC is the minimum level of control that most enterprises will require. As a comprehensive identity management platform, Logto offers tailored solutions for various layers and entities, catering to developers and business for diverse product architectures.\",[869,870],\"API role-based access control\",\"Organization role-based access control\",\"Enterprise Single Sign-On\",\"Logto supp
178ort comprehensive SSO solution to easily meet your biggest customers' identity system needs. It offers secure connections to various identity providers via SAML or OIDC protocols, the simplest configuration process, and a smooth sign-on client experience.\",\"Make your product enterprise-ready, regardless your go-to-market strategy\",[875,876,877,878],{\"_11\":894,\"_207\":895},{\"_11\":889,\"_207\":890},{\"_11\":884,\"_207\":885},{\"_11\":879,\"_207\":880},\"Get enterprise ready earlier and earlier\",[881,882,883],\"Enterprise sales holds a big portion of revenue, which is the best way to make your business sustainable.\",\"Having different strategies to different segments is the right approach to product-led-growth companies\",\"Build enterprise-grade features into their products from an early stage helps in the long run and possible\",\"Identity is essential to enterprise buyers\",[886,887,888],\"Security is paramount. Identity management is far beyond the basic authentication, authorization\",\"Identity layer is the foundation. Lots of things were built on top of that\",\"Identity plays a significant role in complying with various data protection regulations.\",\"Enterprise readiness means reliable maturity\",[891,892,893],\"Indicates that product meets enterprise higher standards\",\"Indicates productâs level of operational stability\",\"Deepen your relationships for the long haul and build brand credibility with world-class customers\",\"Enterprise buyer has higher retention rate\",[896,897,898],\"Enterprises take longer to choose, leading to a stronger commitment\",\"Customization for enterprise creates dependency\",\"High financial and time investments discourage switching\",\"Help your SaaS product grow and scale\",\"Ensure your SaaS architecture and identity systems match your growth plans and product roadmap. We've got everything handled for you.\",{\"_111\":929,\"_168\":930},{\"_111\":905,\"_113\":906,\"_199\":907,\"_201\":908,\"_203\":909,\"_780\":910,\"_855\":911,\"_857\":912,\"_913\":914},\"Discover our blogs related to SaaS scenarios\",\"Easily manage your identity across apps with Logto \",\"Features and solutions for SaaS products\",\"Logto provides a range of SaaS solutions to quickly bring your product to market.\",{\"_11\":927,\"_13\":928},{\"_11\":925,\"_13\":926},{\"_11\":923,\"_13\":924},{\"_11\":921,\"_13\":922},{\"_11\":919,\"_13\":920},{\"_11\":916,\"_13\":917,\"_207\":918},\"section_7\",{\"_11\":915,\"_13\":865},\"Enterprise ready stage:\\nMulti-factor authentication for extra layer of security\",\"Enterprise ready stage:\\nAdvanced authorization management\",\"Today, RBAC is the minimum level of control most enterprises require. Logto provides an identity management platform with solutions tailored to various layers and entities, catering to developers and businesses with diverse product architectures. Key features include organization templates (RBAC) for efficient role management and custom JWT support for flexible token configurations to meet unique business needs.\",[869,870],\"Enterprise ready stage:\\nImplement Single Sign-On to accommodate enterprise identities\",\"Logto supports customizable SSO experiences with various authentication methods to suit different customer needs. It allows multiple connections using SAML or OIDC protocols, tailored to single email domains for large company management. Additionally, it offers Just-in-Time provisioning for automatic member registration.\",\"Focus on business clients: Team and collaboration\",\"Apps without team functionality often force users to share passwords, creating significant security risks for businesses. Using âOrganizationâ to group users is a foundational step in building a multi-tenant app. Logto provides APIs and components to help you develop features like team member management and member invitations.\",\"Focus on business clients: Multi-tenancy is key\",\"Multi-tenancy is a requirement for a SaaS vendor to be successful. While single tenancy may not have prevented you from winning and delivering for SMBs, as you begin to scale and grow you will c
178ome to appreciate \\\"Multi-tenant matters\\\".\",\"Product-led growth stage Social sign-in to increase user acquisition\",\"Logto ensures a smooth social sign-in experience, supporting email, phone, and username to cover all user needs. It also integrates with popular social sign-in options like Google Sign-In, Google One-Tap, Apple Sign-In, and Facebook Sign-In, making logging in simple and convenient.\",\"Proof of concept stage:\\nOIDC based modern auth solution\",\"Logto is a secure and modern CIAM solution built on OIDC, focusing on extensibility and interoperability. It offers a modern and professional developer experience.\",\"Identity management solutions support every stage of your SaaS product\",[931,932,933,934],{\"_11\":947,\"_207\":948},{\"_11\":943,\"_207\":944},{\"_11\":939,\"_207\":940},{\"_11\":935,\"_207\":936},\"Make product enterprise ready, securing your initial enterprise clients\",[937,938],\"Enterprise Single Sign-On (SSO): Simplify and secure access by integrating with identity providers like Okta and Azure AD, offering a seamless login experience that meets enterprise expectations.\",\"Multi-Factor Authentication (MFA): Strengthen security by requiring additional verification methods, reducing unauthorized access risks while aligning with enterprise standards.\",\"Expand your reach to teams and businesses\",[941,942],\"Workspace (Tenant) management and B2B software architecture streamline the shift from consumer-focused to business-focused sales.\",\"Collaboration and tenant management are essential features in B2B SaaS software, especially in the AI era and productivity tools.\",\"Win individual customers and propel your product-led growth strategy\",[945,946],\"Integrate easy-to-use tools with your app to speed up your time to market\",\"Offer a user-friendly, out-of-the-box sign-in experience to enhance user acquisition\",\"Build your identity infrastructure right from the proof of concept stage\",[949,950],\"From the beginning, make sure your product is secure to establish trust and safety early on\",\"Using standard protocols like OIDC, OAuth 2.0 and boosts security and aids in future enterprise sales\",\"Logto SSO for product suites: one identity, many apps\",\"Logto runs SSO across every app in your product suite. One user pool, app-level branding, one sign-in URL across domains, and role-based access control.\",\"Build multi-app products\",\"Multi-app businesses are companies with multiple platforms, product lines, or marketplace offerings that share a single identity system.\",\"risks_of_not_centralized_id_system\",{\"_111\":976,\"_168\":977},\"perfectly_suited\",{\"_111\":960,\"_113\":961,\"_199\":962,\"_201\":963,\"_203\":964,\"_780\":965,\"_855\":966},\"Discover our blogs related to multi-app scenarios\",\"Logto is perfectly suited to support multi-app businesses\",\"It understands the intricacies of operating numerous apps and offers a comprehensive solution for efficient identity management.\",{\"_11\":974,\"_13\":975},{\"_11\":972,\"_13\":973},{\"_11\":970,\"_13\":971},{\"_11\":968,\"_13\":969},{\"_11\":866,\"_13\":967},\"In multi-app environments, it is common for authorization policies to become more complex. Therefore, pairing RBAC (role-based access control) becomes a necessity. Assigning roles to each user enables precise access control, ensuring that users have the appropriate level of permissions.\",\"Single identity management task\",\"Regardless of the app from which a user is registered, Logto consolidates them into a single user pool, making it incredibly simple to manage users across multiple apps.\",\"Multiple domains, one sign-in experience\",\"Got multiple products across different domains? Say goodbye to duplicated effortsâone sign-in URL covers them all!\",\"Omni sign-in for a cohesive experience but with app-level customization\",\"For multi-app businesses, a unified and consistent sign-in experience is often a top priority. Logtoâs omni sign-in experience makes this possible, while also allowing app-level branding for a more customizable touch.\",\"Multiple apps in a single tenant on Logto Cloud\",\"Logto Cloud allows multiple apps to operate under a single tenant. This gives you lots of flexibilities when building multi-app business and products in one centralized identity system.\",\"Key requirements for Multi-App businesses\",[978,979,980,981],{\"_11\":995,\"_207\":996},{\"_11\":990,\"_207\":991},{\"_11\":986,\"_207\":987},{\"_11\":982,\"_207\":983},\"Support for multiple app types and frameworks\",[984,985],\"Handle various applications, such as web and native apps, using a single user pool\",\"Support multiple app types, including non-human apps, like machine-to-machine and third-party integrations\",\"Roles and Access Control\",[988,989],\"Manage complex business models with defined roles and permissions across multiple apps\",\"Revoke and manage access universally for a complete and consistent view\",\"App-level unique branding\",[992,993,994],\"Maintain a unified user pool while supporting custom branding for specific products\",\"Restrict sign-ups to specific apps as needed\",\"Customize sign-in methods for different apps\",\"One identity system across all products\",[997,998,999],\"Avoid redundant accounts across platforms or apps\",\"Allow customers to use a single identity for multiple products within a business unit\",\"Reduce the businessâs supp
178ort workload\",\"Build consumer products\",\"Logto enables both organizations and individuals to expedite their product launches, bolster user acquisition, boost conversion and engagement rates, and minimize potential risks. With Logto, you can meet the specific needs of various scenarios and ensure successful product launches.\",\"challenges_and_needs\",{\"_111\":1029,\"_168\":1030},\"extensive_set_of_features\",{\"_111\":1013,\"_113\":1014,\"_199\":1015,\"_201\":1016,\"_203\":1017,\"_780\":1018,\"_855\":1019},{\"_111\":112,\"_113\":1009,\"_115\":1010},\"Discover our blogs on consumer app scenarios\",\"Ship your product quickly with Logto Cloud\",\"We provide extensive support to numerous clients in implementing their consumer app's identity systems. Here's what they have to say about us.\",{\"_11\":1011,\"_118\":1012},\"André König, CEO at Openformation.io\",\"Logto has helped us to include authentication fast and easily. If you are looking for an authentication layer this is the solution. We have been using Logto as THE authentication system and it has truly been a game changer. The integration was seamless and it significantly improved the user experience by providing a secure and efficient way to log in. Overall, we highly recommend Logto for any organization looking to enhance their authentication system.\",\"An extensive set of features prepared for your needs\",\"The following feature package enables a swift and successful launch of your consumer app's identity system.\",{\"_11\":1028,\"_13\":928},{\"_11\":1026,\"_13\":1027},{\"_11\":1024,\"_13\":1025},{\"_11\":1022,\"_13\":1023},{\"_11\":1020,\"_13\":1021},\"Easy user management\",\"Our user management layers provide a wide range of powerful features that enable you to effortlessly handle your customers, whether you are at the initial stages or experiencing rapid growth, using just a few clicks or a few lines of code.\",\"Passwordless sign-in to secure customer identities\",\"With the rising popularity of passwordless sign-in, Logto prioritizes a secure and user-friendly approach by leveraging one-time codes delivered via email and SMS. This method ensures a reliable and convenient sign-in experience for users.\",\"Social Login to increase the conversion\",\"Social sign-in enables users to log in using their existing social media accounts like Facebook, Apple, Google, and more. This feature minimizes friction and significantly boosts sign-up conversion rates.\",\"Omni sign-in for a centralized identity management\",\"In addition to offering highly customized and polished user interfaces, the omni sign-in experience extends to all apps within a tenant, eliminating the need for duplicating or transferring authentication, user data, and branding settings to individual apps.\",\"OIDC based modern auth solution\",\"Challenges and needs of building consumer app identity systems in new era\",[1031,1032,1033,1034],{\"_11\":1041,\"_13\":1042},{\"_11\":1039,\"_13\":1040},{\"_11\":1037,\"_13\":1038},{\"_11\":1035,\"_13\":1036},\"Balance security, experience and conversion\",\"Balancing the above factors and mitigating risk and compliance requires effort and exploration.\",\"Expedite time to market\",\"Startups face budget and timeline constraints when implementing sign-in and sign-up to attract users. Building an auth solution is a must to go to market.\",\"Developer experience is a top priority\",\"Customer Identity Access Management tools must be innovative and scalable from start to finish. Companies face challenges finding suitable and modern solutions.\",\"Must fit for involving business needs\",\"Identity systems require significant developer effort to establish essential pillars. Avoid reinventing wheels is one of the guiding principles.\",\"password\",{\"_111\":2564,\"_113\":2565,\"_130\":131,\"_2566\":2567,\"_2568\":2569,\"_1092\":2570,\"_142\":2571,\"_453\":2572},\"passwordless\",{\"_111\":2484,\"_113\":2485,\"_130\":131,\"_2486\":2487,\"_1401\":1402,\"_2488\":2489,\"_2490\":2491,\"_1092\":2492,\"_142\":2493,\"_453\":2494},\"social\",{\"_120\":2394,\"_122\":2395,\"_111\":2396,\"_113\":2397,\"_130\":131,\"_2398\":2399,\"_2400\":2401,\"_2402\":2403,\"_1092\":2404,\"_142\":2405,\"_453\":2406},\"omni\",{\"_120\":2291,\"_122\":2292,\"_111\":2293,\"_113\":2294,\"_130\":131,\"_2295\":2296,\"_2297\":2298,\"_2299\":2300,\"_2301\":2302,\"_1092\":2303,\"_142\":2304,\"_453\":2305},\"account_center\",{\"_111\":12,\"_113\":14,\"_130\":131,\"_1180\":1556,\"_2238\":2239,\"_1092\":2240,\"_142\":2241,\"_453\":2242},\"branding\",{\"_111\":2172,\"_113\":2173,\"_130\":131,\"_2174\":2175,\"_2176\":2177,\"_1092\":2178,\"_142\":2179,\"_453\":2180},\"i18n\",{\"_111\":2101,\"_113\":2102,\"_130\":131,\"_2103\":2104,\"_2105\":2106,\"_1092\":2107,\"_142\":2108,\"_453\":2109}
178,\"idp\",{\"_111\":2045,\"_113\":2046,\"_130\":131,\"_1089\":2047,\"_810\":2048,\"_1092\":2049,\"_142\":2050,\"_453\":2051},\"user_management\",{\"_120\":1980,\"_122\":1981,\"_111\":1982,\"_113\":1983,\"_130\":131,\"_1180\":1556,\"_1984\":1985,\"_1986\":1987,\"_1988\":1989,\"_453\":1990},\"rbac\",{\"_120\":1921,\"_122\":1922,\"_111\":1923,\"_113\":1924,\"_130\":131,\"_1180\":1556,\"_1182\":1925,\"_1184\":1926,\"_1927\":1928,\"_142\":1929,\"_453\":1189},\"audit_logs\",{\"_111\":860,\"_113\":1874,\"_130\":131,\"_1180\":1556,\"_1875\":1876,\"_1877\":1878,\"_750\":1879,\"_142\":1880,\"_453\":1881},\"standard_connectors\",{\"_111\":1827,\"_113\":1828,\"_130\":131,\"_1180\":1556,\"_1829\":1830,\"_1831\":1832,\"_1833\":1834,\"_1835\":1836,\"_1837\":1838,\"_142\":1839,\"_453\":1840},\"webhook\",{\"_111\":1764,\"_113\":1765,\"_130\":131,\"_1089\":1766,\"_810\":1767,\"_1092\":1768,\"_142\":1769,\"_453\":1770},\"protected_app\",{\"_120\":1699,\"_122\":1700,\"_111\":1701,\"_113\":1702,\"_130\":131,\"_1089\":1703,\"_810\":1704,\"_1092\":1705,\"_142\":1706,\"_453\":1707},\"management_api\",{\"_120\":1635,\"_122\":1636,\"_111\":1637,\"_113\":1638,\"_130\":131,\"_1639\":1640,\"_1641\":1642,\"_1092\":1643,\"_142\":1644,\"_453\":1645},\"machine_to_machine\",{\"_111\":1554,\"_113\":1555,\"_130\":131,\"_1180\":1556,\"_1557\":1558,\"_1559\":1560,\"_1561\":1562,\"_453\":1563},\"mfa\",{\"_120\":1482,\"_122\":1483,\"_111\":864,\"_113\":1484,\"_130\":131,\"_1089\":1485,\"_810\":1486,\"_1092\":1487,\"_142\":1488,\"_453\":1489},\"organizations\",{\"_111\":1399,\"_113\":1400,\"_130\":131,\"_1401\":1402,\"_1403\":1404,\"_810\":1405,\"_1092\":1406,\"_142\":1407,\"_453\":1408},\"sso\",{\"_120\":1320,\"_122\":1321,\"_111\":1322,\"_113\":1323,\"_130\":131,\"_1089\":1324,\"_810\":1325,\"_1092\":1326,\"_142\":1327,\"_453\":1328},\"saml_app\",{\"_111\":1245,\"_113\":1246,\"_130\":131,\"_1089\":1247,\"_810\":1248,\"_1092\":1249,\"_142\":1250,\"_453\":1251},\"security\",{\"_111\":1178,\"_113\":1179,\"_130\":131,\"_1180\":1181,\"_1182\":1183,\"_1184\":1185,\"_1186\":1187,\"_142\":1188,\"_453\":1189},\"secret_vault\",{\"_111\":1087,\"_113\":1088,\"_130\":131,\"_1089\":1090,\"_86\":1091,\"_1092\":1093,\"_142\":1094,\"_453\":1095},\"Secure secret vault for third-party integrations\",\"Connect your applications to external APIs securely through OIDC/OAuth protocols. Obtain user authorization for step-up request scopes while maintaining enterprise-grade security for all third-party access tokens.\",\"benefits\",{\"_111\":1163,\"_113\":1164,\"_168\":1165},{\"_111\":1126,\"_113\":1127,\"_199\":1128,\"_201\":1129,\"_203\":1130,\"_780\":1131},\"preferred_choice\",{\"_111\":1109,\"_113\":1110,\"_168\":1111},{\"_111\":144,\"_145\":1096},\"Start building secure third-party integrations with Logto Secret Vault.\",[1097,1098,1099,1100],{\"_152\":1107,\"_154\":1108},{\"_152\":1105,\"_154\":1106},{\"_152\":1103,\"_154\":1104},{\"_152\":1101,\"_154\":1102},\"What happens if a stored token expires or is revoked?\",\"Secret Vault automatically monitors token health and attempts to refresh tokens using stored refresh tokens when possible. If a token cannot be refreshed (e.g., due to revocation), the system will notify your application through API responses, allowing you to prompt the user for re-authorization. You can use Logto's Account API to retrieve tokens on behalf of authenticated users. The API provides secure endpoints for token operations, including retrieval, refresh status checking, and scope management.\",\"Can I integrate Secret Vault with custom third-party services?\",\"Yes, Secret Vault supports any service that implements standard OAuth 2.0 or OIDC protocols. While we provide pre-built connectors for popular services like Google, GitHub, and Facebook, you can easily configure custom connectors for any OAuth-compliant service using our Management API and configuration tools.\",\"How does Secret Vault ensure that administrators cannot access user tokens?\",\"Secret Vault uses a zero-knowledge architecture with a robust two-tiered encryption scheme. Each token is encrypted with its own unique Data Encryption Key (DEK), and the DEK itself is encrypted with a Key Encryption Key (KEK) derived from user authentication credentials. This layered approach ensures that even if part of the system is breached, attackers cannot access tokens without both keys. Only the authenticated user can retrieve their third-party access tokens -- administrators and Logto staff have no access to the encryption keys or token values.\",\"Is secret vault only used for storing third-party tokens from connectors?\",\"Currently, Secret Vault is primarily used for c
178onnector-based third-party tokens. However, Secret Vault is designed to accommodate much more. It can help AI agents store third-party application usernames and passwords, API keys, files, and other sensitive data - with the guarantee that only end users can view their credentials. If you have specific use cases or need accelerated support for additional secret types, please contact us to expedite the development process.\",\"What makes Logto Secret Vault the developer's choice?\",\"Built for modern applications that need secure, scalable, and user-friendly third-party integrations.\",[1112,1113],{\"_11\":1120,\"_207\":1121},{\"_11\":1114,\"_207\":1115},\"Developer-friendly integration\",[1116,1117,1118,1119],\"RESTful Management API for all token operations\",\"Comprehensive SDKs for popular programming languages\",\"Detailed documentation with code examples\",\"Test environments for safe development\",\"Complete token lifecycle management\",[1122,1123,1124,1125],\"Automatic token acquisition during sign-in flows, account linking, and in-app operations\",\"Secure storage with user-only access guarantees\",\"Intelligent token refresh before expiration\",\"Monitoring and revocation capabilities for admins\",\"Enterprise-grade solutions for secure token management\",\"From OAuth/OIDC integrations to secure token storage, everything developers need for third-party integrations.\",{\"_11\":1156,\"_13\":1157,\"_207\":1158},{\"_11\":1150,\"_13\":1151,\"_207\":1152},{\"_11\":1143,\"_13\":1144,\"_207\":1145},{\"_11\":1132,\"_13\":1133,\"_207\":1134,\"_1135\":1136},\"Efficient user management and token oversight\",\"Comprehensive user management capabilities in Logto Console enable administrators to monitor, manage, and control federated token storage with complete visibility and control.\",[1140,1141,1142],\"buttons\",[1137],{\"_106\":131,\"_1138\":1139},\"href\",\"https://docs.logto.io/secret-vault/federated-token-set\",\"View synced info from Social / Enterprise accounts\",\"Monitor token storage status and metadata\",\"Execute token revocation for support needs\",\"Easy OAuth / OIDC integration with step-by-step tutorials\",\"Accelerate development with ready-to-use integrations and comprehensive developer resources. Focus on building features, not reinventing authentication infrastructure.\",[1146,1147,1148,1149],\"Universal OIDC/OAuth support for any service\",\"Pre-built connectors: Google, GitHub, Facebook, etc\",\"Step-by-step integration guides\",\"Account API for programmatic token operations\",\"Call third-party APIs for data sync and automation\",\"Break free from authentication limitations and unlock the full potential of third-party integrations. E.g., your AI assistant can retrieve access token with Google calendar permissions when users ask to schedule meetings.\",[1153,1154,1155],\"All business scopes support beyond user profile\",\"Dynamic scope escalation during user workflows\",\"Instant API access using securely stored user tokens\",\"Layered encryption with unique isolation for ultimate security\",\"Multi-layered encryption with unique isolation ensures each token is independently protected. Only end users can access their tokens, guaranteeing complete privacy and enterprise compliance.\",[1159,1160,1161,1162],\"Store access and refresh tokens after user consent\",\"End-to-end encryption with individual token isolation\",\"Zero-knowledge design: Admins cannot view tokens\",\"Automated token lifecycle management and rotation\",\"Why Secret vault powers the next generation of connected applications?\",\"Unlock limitless possibilities for AI agents, SaaS platforms, and enterprise applications with secure third-party token storage and management.\",[1166,1167,1168],{\"_11\":1175,\"_118\":1176,\"_13\":1177},{\"_11\":1172,\"_118\":1173,\"_13\":1174},{\"_11\":1169,\"_118\":1170,\"_13\":1171},\"Meet enterprise security standards with zero-trust principles\",\"Enterprise clients require bulletproof security \u0026 compliance for third-party integrations.\",\"Apply zero-trust principles through minimal privilege requests, continuous authentication, and automated token management. Balance security with user experience by refreshing tokens, while maintaining granular access controls in Logto.\",\"Essential foundation for modern SaaS and productivity tools\",\"Most successful SaaS products rely on third-party integrations to deliver core business value.\",\"Enable your Sa
178aS or productivity tool to connect with essential third-party services that your users depend on. From CRM sync to document management, cross-platform operations are no longer optionalâthey're the foundation of competitive products.\",\"Supercharge AI agent capabilities with secure integrations\",\"AI agents need access to multiple third-party services to deliver automated experiences.\",\"Enable your AI products to securely access user data from Google Suite, GitHub repositories, Slack, and more. Build intelligent automation that respects user privacy while delivering prompt-driven, context-aware experiences.\",\"Layered security. Proven practices.\",\"Logto protects your app with strict password policies, CAPTCHA, lockouts, invite-only sign-ups, and signing key rotation â all built-in.\",\"check_doc\",\"Check doc\",\"critical_role\",{\"_111\":1233,\"_113\":1234,\"_168\":1235},\"like_a_pro\",{\"_111\":1209,\"_113\":1210,\"_199\":1211,\"_201\":1212,\"_203\":1213,\"_780\":1214,\"_855\":1215,\"_857\":1216},\"foundational_security\",{\"_111\":1194,\"_113\":1195,\"_168\":1196},{\"_111\":144,\"_145\":1190},\"Gain greater control over access permissions and improve security with Logto's powerful RBAC (role-based access control)\",[1191],{\"_152\":1192,\"_154\":1193},\"Does Logto support DDoS protection and rate limit?\",\"Yes, Logto provides DDoS protection and rate limiting: For DDoS protection, Logto recommends setting up managed firewalls with notifiers to protect against DDoS attacks. For rate limiting (Logto Cloud only) : While there isn't a strict rate limit, it's recommended to limit activity to approximately 200 requests every 10 seconds to avoid triggering protective measures. This is managed through a general firewall that monitors and manages traffic.\",\"Core security features for all plans\",\"Security is foundational at Logto â beyond advanced features, core protections are built in by default and available to all users, no matter the scale.\",[1197,1198,1199,1200],{\"_11\":1207,\"_13\":1208},{\"_11\":1205,\"_13\":1206},{\"_11\":1203,\"_13\":1204},{\"_11\":1201,\"_13\":1202},\"DoS protection\",\"Defend against flood and application-layer attacks with Cloudflare, Azure firewalls, rate limiting, and Logtoâs scalable infrastructureâall designed to keep your identity system resilient under pressure.\",\"CSRF protection\",\"Protect against CSRF attacks with Logtoâs built-in security measures, including OIDC state checks, PKCE, CORS enforcement, and secure cookie handlingâensuring that only trusted requests can initiate authentication flows.\",\"OIDC back-channel logout\",\"Enable centralized logout to prevent session hijacking and unauthorized access. With OIDC back-channel logout, Logto ensures all connected apps sign out together when a user logs out.\",\"Signing key rotation\",\"Logto secures JWTs and cookies with configurable EC or RSA keys, and makes key rotation easy through CLI, APIs, or the Consoleâensuring ongoing protection and compatibility with legacy systems.\",\"Security that adapts to you\",\"Logto offers a wide range of customizable security featuresâletting you tailor protection to fit your appâs specific requirements.\",{\"_11\":1227,\"_13\":1228,\"_207\":1229},{\"_11\":1225,\"_13\":1226},{\"_11\":1223,\"_13\":1224},{\"_11\":1221,\"_13\":1222},{\"_11\":1219,\"_13\":1220},{\"_11\":1217,\"_13\":1218},\"Suspend users\",\"Temporarily disable user accounts to block access without deleting data or user records.\",\"Invitation-only sign up\",\"Restrict sign-ups to invited users only with secure email magic links. Powered by Logtoâs one-time token feature, this ensures safe and controlled onboardingâperfect for waitlists or sensitive platforms.\",\"Email blocklist\",\"Take control of your user base by blocking disposable email, subaddresses, or unwanted email domains or addresses.\",\"Identifier lockout\",\"Temporarily lock an identifier after repeated failed sign-in attempts to block brute force attacks and protect user accounts.\",\"Configurable password policy\",\"Follow NIST password guidelines and customize your password policy to match your preferred security level.\",\"CAPTCHA\",\"Add CAPTCHA, like Google reCAPTCHA Enterprise or Cloudflare Turnstile, to your sign-in flow to block automated bot attacks and keep malicious traffic out. Works for multiple scenarios:\",[1230,1231,1232],\"Sign in\",\"Sign up\",\"Forgot password\",\"Security you donât have to think about\",\"Logto bakes in enterprise-grade security at every layer of your identity infrastru
178ctureâso you can protect users, reduce risk, and stay focused on building your product.\",[1236,1237,1238],{\"_11\":1243,\"_13\":1244},{\"_11\":1241,\"_13\":1242},{\"_11\":1239,\"_13\":1240},\"Security best practices\",\"Logto automatically applies modern security standardsâlike strong password policies, key rotation, user suspension, and OIDC back-channel logoutâso you donât have to set it up manually or worry about missing anything.\",\"Simplified access management\",\"Logto comes with must-have safeguards like CAPTCHA, identifier lockout, CSRF protection, and DoS defenseâshielding your app from every angle.\",\"Secure your identity infrastructure\",\"Handling authentication in-house increases exposure. A secure identity provider like Logto separates sensitive data from app logic, reducing risk and ensuring safer user authentication.\",\"SAML identity provider for enterprise SSO authentication\",\"Turn Logto into your enterprise SAML identity provider (IdP) to integrate legacy internal applications that require SAML authentication, or enable your B2E products to connect with SaaS applications like Salesforce, AWS, and Slack for unified employee access via SAML SSO.\",{\"_111\":1305,\"_113\":1306,\"_168\":1307},{\"_111\":1280,\"_113\":1281,\"_199\":1282,\"_201\":1283,\"_203\":1284,\"_780\":1285},{\"_111\":1265,\"_113\":1266,\"_168\":1267},{\"_111\":144,\"_145\":1252},\"Unlock enterprise authentication potential with Logto SAML 2.0 identity provider. Secure, scalable, and fully integrated for modern enterprises.\",[1253,1254,1255,1256],{\"_152\":1263,\"_154\":1264},{\"_152\":1261,\"_154\":1262},{\"_152\":1259,\"_154\":1260},{\"_152\":1257,\"_154\":1258},\"What is the difference between SAML, OAuth, and OpenID Connect?\",\"SAML is primarily used for authentication in enterprise environments and supports XML-based assertions for Single Sign-On. OAuth is an authorization framework for API access, while OpenID Connect adds authentication on top of OAuth. SAML is ideal for enterprise SSO scenarios, while OAuth/OIDC are better for API authorization and modern web applications. Logto supports all three protocols to cover different use cases.\",\"Can I customize SAML assertion attributes and user claims?\",\"Yes, Logto provides detailed SAML attribute mapping that allows you to map Logto user properties to custom attribute names expected by your service provider applications. You can include user information like email, name, roles, organizations, custom user attributes, and group memberships in SAML assertions. This flexibility ensures compatibility with diverse enterprise application requirements.\",\"Which enterprise applications support SAML 2.0 integration with Logto?\",\"Logto supports any application that implements SAML 2.0 as a service provider. This includes popular enterprise SaaS applications like Salesforce, AWS Console, Google Workspace, Microsoft 365, Slack, Okta, and thousands of other SAML-compliant business applications. You can also integrate custom enterprise applications that support SAML 2.0 authentication protocol.\",\"What is SAML and how does Logto work as a SAML identity provider?\",\"SAML (Security Assertion Markup Language) is an XML-based open standard for exchanging authentication and authorization data between identity providers and service providers. Logto acts as a SAML 2.0 identity provider (IdP), authenticating users and sending secure XML-based SAML assertions to your applications (service providers). This enables enterprise Single Sign-On where users authenticate once with Logto and gain access to all connected SAML applications.\",\"What makes Logto the preferred SAML identity provider choice?\",\"Enterprise-ready SAML 2.0 IdP solution with modern developer experience and complete identity management.\",[1268,1269],{\"_11\":1275,\"_207\":1276},{\"_11\":1270,\"_207\":1271},\"Developer-friendly SAML implementation\",[1272,1273,1274],\"Easy SAML configuration with automated metadata generation\",\"Comprehensive SAML features from security to compatibility and data mapping\",\"Modern admin console with intuitive SAML application management\",\"Complete enterprise identity platform\",[1277,1278,1279],\"Full-featured SAML, OIDC, and OAuth 2.0 IdP with the omni sign-in experience\",\"Integrated
178with MFA, RBAC, enterprise SSO, and advanced security\",\"Support for organizations, multi-tenant architecture, and identity federation\",\"Complete SAML 2.0 identity provider solution\",\"Full SAML 2.0 protocol compliance with advanced security features for enterprise identity federation.\",{\"_11\":1299,\"_13\":1300,\"_207\":1301},{\"_11\":1294,\"_13\":1295,\"_207\":1296},{\"_11\":1288,\"_13\":1289,\"_207\":1290},{\"_11\":1286,\"_13\":1287},\"Flexible SAML attribute mapping and user claims\",\"Comprehensive attribute mapping capabilities to meet diverse service provider requirements and ensure correct user data exchange.\",\"Advanced SAML security and encryption features\",\"Meet enterprise security requirements with industry-standard cryptographic protection.\",[1291,1292,1293],\"SAML assertion signing with X.509 digital certificates\",\"SAML assertion encryption for enhanced security\",\"Certificate lifecycle management and auto-rotation\",\"Quick SAML integration with broad compatibility\",\"Fast setup with automated metadata generation and broad compatibility across enterprise applications.\",[1297,1298],\"Automated SP configuration with metadata URL\",\"Multiple Name ID format options\",\"Comprehensive identity provider supporting SAML, OIDC, and OAuth 2.0\",\"Integrate any applications without worrying about protocol compatibility or future expansion needs.\",[1302,1303,1304],\"SAML 2.0 for enterprise apps and legacy systems\",\"OpenID Connect for modern web and mobile apps\",\"OAuth 2.0 for API access and third-party integrations\",\"Why choose SAML authentication for enterprise applications?\",\"Deliver enterprise-grade Single Sign-On with SAML 2.0 protocol compliance, ensuring secure authentication and smooth user experiences across your organization.\",[1308,1309,1310],{\"_11\":1317,\"_118\":1318,\"_13\":1319},{\"_11\":1314,\"_118\":1315,\"_13\":1316},{\"_11\":1311,\"_118\":1312,\"_13\":1313},\"Centralized identity management and access control\",\"Manage user identities and access permissions from a \u003cstrong\u003esingle SAML IdP\u003c/strong\u003e across all your enterprise service provider applications.\",\"Streamline IT operations with centralized user provisioning, role-based access control, and straightforward identity federation across your organization.\",\"Fast Single Sign-On (SSO) experience\",\"Users authenticate \u003cstrong\u003eonce\u003c/strong\u003e with your SAML identity provider and gain instant access to all connected SAML and OIDC service provider applications.\",\"Cut out password fatigue and reduce authentication friction with enterprise SSO, enabling users to access multiple applications with a single login session.\",\"Enterprise-grade SAML 2.0 security\",\"SAML provides \u003cstrong\u003eXML-based digital signatures\u003c/strong\u003e and encryption for secure authentication data exchange between identity providers and service providers.\",\"Protect sensitive user data with cryptographic security measures, XML encryption, and digital certificates, ensuring only authorized access to your enterprise applications.\",\"Logto Enterprise SSO: SAML and OIDC for B2B SaaS\",\"Meet every enterprise customer's identity needs with Logto SSO. Connect any SAML or OIDC IdP, with just-in-time provisioning and audit logs.\",\"Enterprise SSO with SAML and OIDC built in\",\"Meet every enterprise customer's identity needs with our SSO solution. Connect to any SAML or OIDC identity provider, with simple configuration and a smooth client experience.\",{\"_111\":1384,\"_113\":1385,\"_168\":1386},{\"_111\":1358,\"_113\":1359,\"_199\":1360,\"_201\":1361,\"_203\":1362,\"_780\":1363},{\"_111\":1336,\"_113\":1337,\"_168\":1338},{\"_111\":144,\"_145\":1329},\"Use Logto to set up SSO and secure identities of your business customers.\",[1330,1331],{\"_152\":1334,\"_154\":1335},{\"_152\":1332,\"_154\":1333},\"Should I choose SAML or OIDC for standard protocol connection?\",\"SAML, based on XML, is better suited for web-based applications. It's an older, established standard widely adopted in enterprises. OIDC, a JSON-based format that uses REST APIs and is built on OAuth 2.0, is a modern, simpler choice for web and mobile applications. We support both protocols so customers can customize any SSO IdP connection.\",\"How can customers self-configure their SSO settings?\",\"You add the Enterprise connector in Logto console, or use our Management API to build SSO configuration directly into your product. Logto SSO lets enterprise users manage employee identities and permissions at the application level. Note: when adding domains, organization admins must verify ownership of the email domain.\",\"What makes Logto the preferred choice?\",\"Build on Logto's secure SAML and OIDC foundation, with a clear configuration process and a smooth SSO client experience.\",[1339,1340,1341],{\"_11\":1351,\"_13\":1352,\"_207\":1353},{\"_11\":1346,\"_207\":1347},{\"_11\":1342,\"_207\":1343},\"Satisfy diverse customer requirement\",[1344,1345],\"Traditional SAML and trendy OIDC for most IdPs\",\"Ensure compatibility with complex enterprise architectures, accommodating different email domains, IdPs, and sync methods for varied scenarios\",\"Easy to integrate\",[1348,1349,1350],\"Avoid the lengthy process of developing your own SSO\",\"Follow Logto's step-by-step guide with minimal effort\",\"Use our Management API for easy customer self-configuration\",\"Enterprise-grade identity and access control\",\"Logto offers a complete solution supporting your growth to enterprise-ready status. Free from security concerns or client limitations, your team can focus on business expansion.\",[1354,1355,1356,1357],\"Multi-Organization and members management\",\"Multi-app integration with different devices or domains\",\"Multi-SSO-connector for your diverse customers\",\"Customize your Register, Sign-in, and MFA processes\",\"Accelerate to enterprise-ready with Logto SSO\",\"Logto's SSO covers what your enterprise customers actually need.\",{\"_11\":1378,\"_13\":1379,\"_207\":1380},{\"_11\":1372,\"_13\":1373,\"_207\":1374},{\"_11\":1366,\"_13\":1367,\"_207\":1368},{\"_11\":1364,\"_13\":1365},\"IdP-initiated SSO\",\"When your enterprise clients use their companyâs central login portal (e.g., Microsoft Entra, Okta, One login), they can access your application instantly. This SSO workflow, initiated directly from the Identity Provider (IdP), simplifies company personnel and resources management.\",\"User-friendly authentication flows for various scenarios\",\"A full SSO experience compatible with universal sign-in. Multiple connections can map to a
178single email domain, and Just-in-Time provisioning auto-creates members on first sign-in.\",[1369,1370,1371],\"SSO Register and sign-in experience\",\"Custom email domain redirection to IdP\",\"Sync profile information policies\",\"Step-by-step integration\",\"Only the parameters you need, with step-by-step instructions. You and your customers can finish a connection quickly.\",[1375,1376,1377],\"Easy-to-follow configuration guide\",\"The simplest settings items\",\"Management API about SSO\",\"Various IdPs support with SAML and OIDC connections\",\"SAML and OIDC protocols connect to any enterprise identity provider. Popular IdP connectors are built in, and we keep adding more.\",[1381,1382,1383],\"SAML connections for typical SSO\",\"OIDC connections for modern SSO\",\"Built-in support for Azure AD, Google workspace, and Okta.\",\"Why should your B2B services provide SSO?\",\"Upgrade to SSO and turn your product into an enterprise-ready authentication system.\",[1387,1388,1389],{\"_11\":1396,\"_118\":1397,\"_13\":1398},{\"_11\":1393,\"_118\":1394,\"_13\":1395},{\"_11\":1390,\"_118\":1391,\"_13\":1392},\"Extremely secure and user-friendly\",\"SSO reduces the business attack, cuts IT support costs, and provides a better authentication experience for employees.\",\"Everyone in the corporation, from administrators and IT staff to employees, can enjoy a smooth product registration, access and manage process, enhancing your brand image and trust.\",\"Plug into enterprise identity stacks\",\"SSO facilitates smoother integration with the complex identity management infrastru
178ctures of large enterprises.\",\"SSO reduces development and maintenance costs to adapt to enterprise needs, freeing your team to innovate and add value to your offerings.\",\"Gain a competitive edge in the enterprise market\",\"64% of large firms use SSO, nearly 50% more than medium-sized companies.\",\"Embrace the growing trend of SSO to position your product as a key player in centralized business identity management, giving you a distinct advantage in attracting and retaining top-tier enterprise clients.\",\"Using organizations to build SaaS multi-tenant app\",\"In multi-tenant SaaS apps, âorganizationâ is used to group users and resources, important for apps serving different clients or companies. This entity simplifies customer identity management and supports effective B2B multi-tenant management.\",\"coming_soon\",\"Coming soon\",\"key_considerations\",{\"_111\":1470,\"_113\":1471,\"_168\":1472},{\"_111\":1442,\"_113\":1443,\"_199\":1444,\"_201\":1445,\"_203\":1446,\"_780\":1447},{\"_111\":1336,\"_113\":1416,\"_168\":1417},{\"_111\":144,\"_145\":1409},\"Leverage Logto organizations feature to master the best practices in creating a multi-tenant application.\",[1410,1411],{\"_152\":1414,\"_154\":1415},{\"_152\":1412,\"_154\":1413},\"How do I choose between organization features and RBAC for authorization?\",\"Role-based access control and organization are key components of Logto's authorization features. As a comprehensive identity management platform, Logto offers tailored solutions for various scenarios and layers, catering to developers and businesses for diverse product architectures. Logto has API RBAC and Organization RBAC to support both B2C and B2B access control needs.\",\"Is SaaS the same as multi-tenant applications?\",\"\u003cp\u003eSaaS, or software as a service, is a concept defined from a business model viewpoint. Multi-tenancy, on the other hand, is a software architecture applicable in various situations, whether in SaaS or other B2B contexts.\u003c/p\u003e\u003cp\u003eThe mix-up between SaaS and multi-tenancy often arises due to a widely recognized industry belief: when you're aiming for enterprise clients, adopting a multi-tenant approach is a must-have approach.\u003c/p\u003e\",\"Logto provides you the best guidance for setting up and configuring multi-tenant IAM systems.\",[1418,1419,1420,1421],{\"_11\":1437,\"_207\":1438},{\"_11\":1432,\"_207\":1433},{\"_11\":1427,\"_207\":1428},{\"_11\":1422,\"_207\":1423},\"Tailor roles and permissions\",[1424,1425,1426],\"Empower organizations with robust governance\",\"Role-based access control within organizations\",\"Easily manage and update\",\"Address a wide range of B2B scenarios\",[1429,1430,1431],\"Organizations also work for multi-app businesses\",\"It can seamlessly integrate with enterprise SSO\",\"Offers a complete end-to-end sign-in user interface\",\"Make identity management easier\",[1434,1435,1436],\"Avoid duplicate identity systems for each client while ensuring tenant isolation.\",\"Keep authentication and authorization strictly separate\",\"Allow flexible member addition and removal\",\"For SaaS builders\",[1439,1440,1441],\"Scalable organization-level role-based access control for all tenants\",\"Work with Enterprise SSO and MFA\",\"Invitation and auto-join for SaaS collaboration\",\"Easily build multi-tenant SaaS\",\"We cater to SaaS builders with an opinionated approach, yet our product remains flexible enough to handle all B2B cases.\",{\"_11\":1465,\"_207\":1466},{\"_11\":1460,\"_207\":1461},{\"_11\":1455,\"_13\":1456,\"_207\":1457},{\"_11\":1448,\"_13\":1449,\"_207\":1450},\"Invitation and just-in-time provisioning\",\"Organization features come with an invitation flow that enhances standard SaaS onboarding processes, boosting conversion rates and promoting product growth.\",[1451,1452,1453,1454],\"Invitations for both new and existing users\",\"Enable org-level MFA to require MFA for a specific organization\",\"Email template for inviting users\",\"Set up email domain-based and SSO-based Just-in-Time provisioning to let members automatically join your organizations\",\"Organization-level access control\",\"Access control is necessary for multi-tenant apps. Logto offers organization-level RBAC, called an organization template, to make setup simple.\",[1458,1459],\"Flexibly create your own roles, not just âadminâ/âmembersâ\",\"Effortlessly update permissions and role design across all organizations.\",\"Mange business customers' identities at scale\",[1462,1463,1464],\"Secure with rigorous access control\",\"A single-user system that is secure with rigorous access control\",\"Best practice for SaaS apps' tenant isolation needs\",\"Logto helps you easily set up B2B identity architecture\",[1467,1468,1469],\"A user can belong to multiple organizations but only keep one identity\",\"A user can hold varying roles within different organizations\",\"You have a single, consolidated pool of identities\",\"How does multi-tenant authentication work?\",\"B2B SaaS apps often use multi-tenant architecture, where each business is a tenant. Within each tenant, there are employees or collaborators, not just consumers.\",[1473,1474,1475],{\"_11\":1480,\"_13\":1481},{\"_11\":1478,\"_13\":1479},{\"_11\":1476,\"_13\":1477},\"Invitations and collaboration to boost B2B Growth\",\"Multi-tenant SaaS apps often come with features like invitations and role-based access control. The
178se features support B2B growth and enhance collaboration.\",\"Enhanced data isolation and privacy\",\"Tenant isolation is fundamental to the design and development of software as a service (SaaS) systems. Using organizations to separate tenants in multi-tenant environments ensures data privacy and compliance with regulations.\",\"A centralized and easier user management\",\"In a multi-tenant app, you can use a single identity system to centralize the identity management by your developers but also give each tenant ability to manage on its own.\",\"Logto MFA: TOTP, WebAuthn, passkeys, SMS \u0026 backup codes\",\"Logto MFA supports TOTP authenticator apps, WebAuthn passkeys, SMS and email codes, plus backup codes. Toggle it on and pick the factors users can enroll.\",\"MFA (Multi-factor authentication) requires at least two verification methods for account access, robustly defending against account hacks. Nearly half of businesses use MFA to secure company data and assets.\",{\"_111\":1539,\"_113\":1540,\"_168\":1541},{\"_111\":1507,\"_113\":1508,\"_199\":1509,\"_201\":1510,\"_203\":1511,\"_780\":1512,\"_855\":1513},{\"_111\":1336,\"_113\":1494,\"_168\":1495},{\"_111\":144,\"_145\":1490},\"By leveraging Logto's MFA options, you not only strengthens your security stance, but also elevate general user experience and boost overall productivity.\",[1491],{\"_152\":1492,\"_154\":1493},\"Is WebAuthn only for 2FA?\",\"Logto now supports WebAuthn for 2FA. You can verify quickly with device biometrics, or use a hardware key or smartphone for cross-device verification, etc. This secure and user-friendly approach is on the rise. Logto will keep improving the user experience and considering adding Passkey for 1FA. Share your feedback if you're interested.\",\"MFA strong the security guide for the complete auth flow solution.\",[1496,1497],{\"_11\":1346,\"_207\":1503},{\"_11\":1498,\"_207\":1499},\"Balance product security \u0026 experience\",[1500,1501,1502],\"Complete MFA sign-in flow without loopholes\",\"WebAuthn supported for effective biometrics, etc.\",\"Free control with different verification policies\",[1504,1505,1506],\"Simple one-click activation without configuration\",\"Robust profile API for users to manage MFA\",\"Varied assurance-level factors for diverse industries\",\"Logto safely supported 2-step verification\",\"Logto offers various authentication factors. It's scalable, safe and flexible.\",{\"_11\":1534,\"_13\":1535,\"_207\":1536},{\"_11\":1529,\"_13\":1530,\"_207\":1531},{\"_11\":1524,\"_13\":1525,\"_207\":1526},{\"_11\":1519,\"_13\":1520,\"_207\":1521},{\"_11\":1514,\"_13\":1515,\"_207\":1516},\"One-click set up MFA\",\"Multiple modern factors empower users to choose their preferred method with freedom. More options and Adaptive MFA policy are coming soon.\",[1517,1518],\"Easily enable MFA with toggle\",\"Customize your MFA policy\",\"Backup codes\",\"Generate a group of one-time recovery code after enabling the primary factor as the recovery mechanism.\",[1522,1523],\"Generate up to 10 backup codes\",\"Verify backup codes at sign-in\",\"SMS / Email verification code\",\"Enable secure verification through SMS or email codes with seamless user experience for both sign-up and MFA setup processes.\",[1527,1528],\"Link phone number to receive verification codes\",\"Link email address to receive verification codes\",\"Authenticator app OTP\",\"Connect with popular software OTP like google authenticator, Microsoft authenticator, Duo, OneLogin, etc. Most adopted by users.\",[1532,1533],\"Add authenticator app during sign-up or sign-in\",\"Verify authenticator app OTP at sign-in\",\"Passkeys (WebAuthn)\",\"Passkey is a phishing-resistant, high-assurance level authentication method that suits modern browsers and aligns with current business trends.\",[1537,1538],\"Create passkeys during sign-up or sign-in\",\"Verify passkey at sign-in\",\"What are the benefits of using MFA?\",\"Stay ahead in the cybersecurity game and attract security-conscious clients by integrating Multi-Factor Authentication into your product today.\",[1542,1543,1544],{\"_11\":1551,\"_118\":1552,\"_13\":1553},{\"_11\":1548,\"_118\":1549,\"_13\":1550},{\"_11\":1545,\"_118\":1546,\"_13\":1547},\"User convenience\",\"MFA strikes a balance between security and user convenience, offering a smoother experience.\",\"User access is no longer impeded by MFA; the inclusion of multiple factors and passkeys has yielded positive results.\",\"Regulatory compliance\",\"Any PII or other personal information â whether self-asserted or validated â requires multi-factor authentication.\",\"Stay compliant with GDPR and NIST for robust user data protection.\",\"Cost-effective security\",\"Using MFA blocks \u003cstrong\u003e99.9%\u003c/strong\u003e of account hacks, especially for password breaches.\",\"MFA adds an extra layer of protection, securing sensitive information or critical actions.\",\"Secure machine-to-machine authentication \u0026 authorization\",\"M2M (Machine-to-Machine) authentication and authorization work together to provide a complete security framework for automated system-to-system communication. Logto machine-to-machine (M2M) applications adopt the Client Credentials Flow.\",\"Check API doc\",\"why_m2m\",{\"_111\":1623,\"_113\":1624,\"_168\":1625}
178,\"secure_api_auth\",{\"_111\":1591,\"_113\":1592,\"_199\":1593,\"_201\":1594,\"_203\":1595,\"_780\":1596},\"authn_meets_m2m\",{\"_111\":1564,\"_113\":1565,\"_168\":1566},\"Secure your machine-to-machine communications and unlock the full potential of your API-driven architecture with Logto's powerful M2M authentication and authorization.\",\"Enterprise-grade M2M security for modern applications\",\"Our machine-to-machine solution provides enterprise-grade security and access control for your service communications while maintaining developer-friendly implementation.\",[1567,1568,1569,1570],{\"_11\":1586,\"_207\":1587},{\"_11\":1581,\"_207\":1582},{\"_11\":1576,\"_207\":1577},{\"_11\":1571,\"_207\":1572},\"Scalable and performant\",[1573,1574,1575],\"High-performance token validation and authorization\",\"Distributed architecture support\",\"Built for microservices environments\",\"Developer-friendly implementation\",[1578,1579,1580],\"Simple SDK integration with authorization\",\"Clear documentation and examples\",\"Multiple programming language support\",\"Enterprise-grade security\",[1583,1584,1585],\"OAuth 2.0 and OpenID Connect compliant\",\"Strong cryptographic token handling with scopes\",\"Comprehensive audit logging and access tracking\",\"No human intervention required\",[1588,1589,1590],\"Fully automated authentication and authorization flows\",\"No user interaction needed\",\"Perfect for background services and APIs\",\"What you can do with Logtoâs machine-to-machine?\",\"Explore practical ways to leverage Logtoâs M2M capabilities to connect trusted services, secure API access, and enable automated workflows.\",{\"_11\":1616,\"_13\":1617,\"_207\":1618},{\"_11\":1609,\"_13\":1610,\"_207\":1611},{\"_11\":1603,\"_13\":1604,\"_207\":1605},{\"_11\":1597,\"_13\":1598,\"_207\":1599},\"Multi-tenant SaaS\",\"M2M supports organization-level isolation, enabling secure service-to-service communication in multi-tenant environments.\",[1600,1601,1602],\"M2M apps can be assigned to specific organizations\",\"Apps can have different roles per organization (e.g. Analytics reader in Org A, Notification sender in Org B)\",\"Organization-level isolation prevents cross-tenant access, even for backend services\",\"Machine-to-machine authorization\",\"Role-based access control extends to machine-to-machine applications, ensuring devices can only access functions relevant to their assigned roles.\",[1606,1607,1608],\"Application backend service\",\"Command line interfaces\",\"Hardware and IoT devices\",\"Access Logto Management API with machine-to-machine\",\"For accessing Logto Management API, you would use M2M authentication with Client Credentials Flow for operations like,\",[1612,1613,1614,1615],\"Automated user provisioning\",\"Bulk user updates\",\"Automated role assignments\",\"System monitoring and analytics\",\"Use M2M to securely authenticate non-human apps\",\"Non-interactive apps can securely access the target API using the M2M flow:\",[1619,1620,1621,1622],\"App sends App ID and App Secret to Logto\",\"Logto verifies them\",\"Logto issues an access token\",\"App uses the token to call the API; API validates and grants access.\",\"Secure APIs and services communication\",\"Logto secures your API communications and service integrations with machine-to-machine (M2M) authentication for real-world use cases.\",[1626,1627,1628],{\"_11\":1633,\"_13\":1634},{\"_11\":1631,\"_13\":1632},{\"_11\":1629,\"_13\":1630},\"IoT device communication\",\"M2M authentication and authorization provide secure and reliable communication channels between IoT devices, enabling seamless data exchange and coordinated operations across distributed IoT networks.\",\"Scalable integrations\",\"As your system grows with multiple services and microservices, M2M authentication and authorization provide a scalable way to manage service-to-service communication with proper access controls.\",\"Secure API communication\",\"Machine-to-machine authentication and authorization ensure that only authorized services can access your APIs with appropriate permissions, protecting sensitive data and preventing unauthorized access to your systems.\",\"Logto Management API: users, orgs, roles \u0026 audit via REST\",\"Run every Logto auth operation from code: users, organizations, roles, scopes, and audit logs. OpenAPI 3.1 spec with scoped M2M tokens.\",\"Run every Logto operation through the Management API\",\"Call the same endpoints powering the admin console from your backend code. Authenticate machine-to-machine apps with scoped tokens against a standard OpenAPI 3.1 spec.\",\"when_should_you_use\",{\"_111\":1687,\"_113\":1688,\"_168\":1689}
178,\"enables_achievements\",{\"_111\":1668,\"_113\":1669,\"_199\":1670,\"_201\":1671,\"_203\":1672,\"_780\":1673},{\"_111\":1653,\"_113\":1654,\"_168\":1655},{\"_111\":144,\"_145\":1646},\"Use the Logto Management API to drive every authentication and authorization operation from your own code.\",[1647,1648],{\"_152\":1651,\"_154\":1652},{\"_152\":1649,\"_154\":1650},\"What areas are covered by the Management API?\",\"Everything the admin console does is in the API, plus a few API-only operations such as bulk search and audit log queries. See the API documentation for the full surface area.\",\"Can I access the Logto Management API without a machine-to-machine app?\",\"No. The Management API requires admin-level authentication, which Logto issues only to machine-to-machine apps. Create one and grant it the scopes you need.\",\"What sets the Logto Management API apart\",\"Coverage, transparency, and a calling experience built for production.\",[1656,1657],{\"_11\":1663,\"_207\":1664},{\"_11\":1658,\"_207\":1659},\"Built for production\",[1660,1661,1662],\"Detailed API documentation generated from the OpenAPI 3.1 spec\",\"Public status page with real-time health and performance\",\"Audited security with scoped machine-to-machine tokens\",\"Extensive coverage\",[1665,1666,1667],\"Every console operation is in the API\",\"Our backend is fully open-source\",\"Scales to enterprise identity workloads\",\"What you can build with the Management API\",\"Common scenarios where teams reach for the Management API.\",{\"_11\":1685,\"_13\":1686},{\"_11\":1683,\"_13\":1684},{\"_11\":1676,\"_13\":1677,\"_207\":1678},{\"_11\":1674,\"_13\":1675},\"Machine-to-machine apps for backend integrations\",\"Machine-to-machine apps authenticate as themselves rather than on behalf of a user. Issue them scoped tokens and they can call any Management API endpoint from another service.\",\"Advanced user search\",\"Use the Management API for user-search filters the console does not expose.\",[1679,1680,1681,1682],\"Basic fuzzy search\",\"Specify fields\",\"Changing the joint mode\",\"Exact match and case sensitivity\",\"Ship your own dashboards on Logto's audit logs\",\"Stream real-time audit data out of Logto into your own dashboard or data warehouse, on the schema and retention your team needs.\",\"Implement user profile\",\"Update usernames, emails, avatars, and linked social accounts directly from your backend, so the profile experience fits your product.\",\"When should you use the Management API?\",\"Reach for the Management API when you need programmatic control, language flexibility, or stricter security boundaries.\",[1690,1691,1692],{\"_11\":1697,\"_13\":1698},{\"_11\":1695,\"_13\":1696},{\"_11\":1693,\"_13\":1694},\"For security purposes\",\"Authenticate over machine-to-machine tokens so user credentials never have to travel through a third-party platform.\",\"Multi-services\",\"Spin up machine-to-machine apps to wire your other backend services into Logto without piggybacking on a user session.\",\"Programmatic access\",\"The console handles everyday tasks well, but bulk operations and large-scale data work go faster through the API.\",\"Logto Protected App: no-code authentication for any web app\",\"Logto Protected App adds authentication to any web app via a Cloudflare Workers proxy. Works across all languages and frameworks with no SDK or auth code required.\",\"Drop a sign-in wall on any web app, no code required\",\"Point Logto at your web app and authentication is up in minutes. The Cloudflare-powered proxy handles sign-in for any language or framework, so you ship without writing auth code or session logic.\",{\"_111\":1752,\"_113\":1753,\"_168\":1754},{\"_111\":1733,\"_113\":1734,\"_199\":1735,\"_201\":1736,\"_203\":1737,\"_780\":1738},{\"_111\":1718,\"_113\":1719,\"_168\":1720},{\"_111\":144,\"_145\":1708},\"Use Logto to drop a sign-in wall in front of any app and skip writing auth code.\",[1709,1710,1711],{\"_152\":1716,\"_154\":1717},{\"_152\":1714,\"_154\":1715},{\"_152\":1712,\"_154\":1713},\"How does Logto Protected App ensure stability and security?\",\"\u003col\u003e\u003cli\u003eGlobal Edge Network: Powered by Cloudflare Workers, the Protected App runs on a global edge network with high availability and low latency.\u003c/li\u003e\u003cli\u003eOfficial Integration: Logto develops and maintains the authentication layer in-house, so security patches land directly from us.\u003c/li\u003e\u003cli\u003eSecure Origin Server Connection: The Protected App validates HTTP headers and JWTs before forwarding requests, so only authenticated traffic reaches your origin server.\u003c/li\u003e\u003c/ol\u003e\",\"Does Logto Protected App support authorization features?\",\"Currently, the Protected App does not offer API resource management and RBAC features. However, we're working on expanding the capabilities of our Protected App to match the features available in our other generic app types.\",\"Does the Logto Protected App work for both web and native applications?\",\"Right now, Logto Protected App is built for web applications, both traditional and single-page apps. Native app support isn't available yet.\",\"Build authentication in 3 steps\",\"Here's the quickest path.\",[1721,1722,1723],{\"_11\":1730,\"_113\":1731,\"_13\":1732},{\"_11\":1727,\"_113\":1728,\"_13\":1729},{\"_11\":1724,\"_113\":1725,\"_13\":1726},\"Step 3\",\"Set up email and social connection\",\"\u003cp\u003eUse the pre-built Logto Email Service to enable \u003cstrong\u003epasswordless email sign-in\u003c/strong\u003e.\u003c/p\u003e\u003cp\u003eAdd \u003cstrong\u003eGoogle\u003c/strong\u003e or other social logins with our quick guides.\u003c/p\u003e\",\"Step 2\",\"Customize your sign-in experience\",\"\u003cp\u003eTailor your \u003cstrong\u003eBrand\u003c/strong\u003e and \u003cstrong\u003eContent\u003c/strong\u003e touch points.\u003c/p\u003e\u003cp\u003eChoose \u
178003cstrong\u003eSign-in \u0026 Sign-up\u003c/strong\u003e your way, or enable \u003cstrong\u003eMFA\u003c/strong\u003e to tighten security.\u003c/p\u003e\",\"Step 1\",\"Create your application in Logto\",\"\u003cp\u003eQuick-start your app integration with \u003cstrong\u003eLogto Protected App\u003c/strong\u003e. Setup takes a few minutes.\u003c/p\u003e\",\"Authentication without the boilerplate\",\"Start from scratch with no prerequisites and ship in a few minutes.\",{\"_11\":1750,\"_13\":1751},{\"_11\":1745,\"_13\":1746,\"_207\":1747},{\"_11\":1741,\"_207\":1742},{\"_11\":1739,\"_13\":1740},\"Advanced settings:\\nFine-grained access rules\",\"Adjust authentication rules for different site areas or specific user actions, so each part of your app has the access policy you want.\",\"Quick test and launch\",[1743,1744],\"Test directly by accessing your domain â wow, your site is now auth-protected.\",\"Then customize your domain and add the protection in your service to go live.\",\"Simplest configuration\",\"Proxy the authentication part of your entire website and secure it based on URLs.\",[1748,1749],\"\u003cstrong\u003eOrigin URL\u003c/strong\u003e requiring auth\",\"\u003cstrong\u003eApp domain\u003c/strong\u003e as an auth protection proxy\",\"Protected app workflow\",\"The Protected App handles session state and user information.\\nIf a user isn't authenticated, it redirects them to the sign-in page.\\nAfter authentication, it securely includes user authentication details and forwards the request to the origin server.\",\"Benefits of using Logto Protected App\",\"Instead of writing long lines of code, prioritize your core product.\",[1755,1756,1757],{\"_11\":1762,\"_13\":1763},{\"_11\":1760,\"_13\":1761},{\"_11\":1758,\"_13\":1759},\"Edge-network proxy infrastructure\",\"No authentication servers to run. It runs on Cloudflare's edge network, which gives you automatic scaling and low-latency response times worldwide.\",\"Development freedom: choose what you love\",\"Don't stress over missing SDKs or environments. Logto's Protected App doesn't need an SDK and drops in front of your app as a proxy.\",\"Save time and effort in auth integration\",\"Simplify integrations by separating authentication from your application. After the user is authenticated, the Protected App delivers content from your server.\",\"Automate event-based processes with webhooks\",\"With webhooks, you can receive real-time notifications and triggers about specific events without polling from Logto continuously, such as user registration, sign-in, or reset password. Your app can receive the request and take customized action based on the data, such as sending an email or updating a database entry.\",{\"_111\":1815,\"_113\":1816,\"_168\":1817},{\"_111\":1792,\"_113\":1793,\"_199\":1794,\"_201\":1795,\"_203\":1796},{\"_111\":1336,\"_113\":1778,\"_168\":1779},{\"_111\":144,\"_145\":1771},\"Take your authentication process to the next level and gain more control over user events with Logto's customizable webhook integrations.\",[1772,1773],{\"_152\":1776,\"_154\":1777},{\"_152\":1774,\"_154\":1775},\"Where can I get webhook logs?\",\"The reason webhook logs are stored separately in the \\\"Webhooks\\\" section rather than in the audit logs is due to their unique use cases and specific details. This separation allows for better organization and management of the webhook logs.\",\"Are you planning to include additional webhook events in the future?\",\"Absolutely! Webhook is an efficient tool, and as we continue to enhance our sign-in experience, you can look forward to even more exciting developments in the future.\",\"Logto not only ensures the functionality of webhooks but also offers security assurances and monitoring capabilities.\",[1780,1781],{\"_11\":1787,\"_207\":1788},{\"_11\":1782,\"_207\":1783},\"Easy to check and long-term monitor\",[1784,1785,1786],\"One-click send test payload in web console\",\"View the success rate and request times\",\"Audit logs from the local perspective\",\"Security assurance\",[1789,1790,1791],\"Auto-generated a high-strength signing key\",\"Make sure authenticity of the request payload\",\"Customize headers to meet specific business needs\",\"Webhook features supported in Logto\",\"Logto enables you to confidently utilize and manage webhooks.\",{\"_11\":1810,\"_13\":1811,\"_207\":1812},{\"_11\":1804,\"_13\":1805,\"_207\":1806},{\"_11\":1797,\"_13\":1798,\"_207\":1799},\"Execution and health check\",\"It is easy to monitor the health status of specific webhooks and investigate any issues in detail.\",[1800,1801,1802,1803],\"Auto-retry\",\"Health status via success rate\",\"Independent Request Logs in 24 hours\",\"Disable or reactive a webhook\",\"Easy configuration\",\"The admin console provides a multitude of flexible settings.\",[1807,1808,1809],\"Auto-generated signing key, can be updated\",\"Custom headers\",\"Inspect configuration by test payload examples\",\"Multiple events supported\",\"Logto webhooks facilitate key authentication events, enabling you to automate your workflow.\",[1813,1814,1232],\"Sign-in\",\"Register\",\"What are the benefits of using webhooks?\",\"Webhooks enable real-time communication between applications and automate workflows.\",[1818,1819,1820],{\"_11\":1825,\"_13\":1826},{\"_11\":1823,\"_13\":1824},{\"_11\":1821,\"_13\":1822},\"Easier integration\",\"Developers can easily create custom integrations between applications or micro-services. By leveraging webhooks, you donât need complex coding or deal with proprietary APIs.\",\"Automate workflow\",\"For example, you can use webhooks to send email, send notification, make another API call, or synchronize data to optimize your user experience.\",\"Get real-time updates\",\"With webhooks, the second app is notified immediately when an event occurs in the first application, which eliminates the inefficiency and delays in processing data.\",\"Integrate your IdP by using standard connectors\",\"Logto offers the capability to develop custom standard connectors, going beyond the scope of typical social connectors. It provides support for widely recognized open standard protocols such as OIDC, OAuth 2.0, and SAML. By seamlessly integrating your own identity providers with Logto, you can incorporate it as a professional sign-in method within your authentication flow.\",\"build_oauth\",\"Build your own OAuth 2.0 Connector\",\"build_oidc\",\"Build your own OIDC Connector\",\"build_saml\",\"Build your own SAML Connector\",\"why_open_standards\",{\"_111\":1862,\"_113\":1863,\"_168\":1864},\"incorporate_open_standards\",{\"_111\":1848,\"_113\":1849,\"_199\"
178:1850,\"_201\":1851,\"_203\":1852,\"_780\":1853},{\"_111\":144,\"_145\":1841},\"Logto's support for standard protocols ensures that your authentication process is secure and compliant with industry standards and regulations.\",[1842,1843],{\"_152\":1846,\"_154\":1847},{\"_152\":1844,\"_154\":1845},\"Does Logto support LDAP?\",\"Currently, Logto does not support LDAP for standard connectors. This is because LDAP is primarily used in workforce scenarios, which is not the main focus for Logto at this time. However, as we continue to grow and expand our capabilities, we will explore and address the challenging cases that Logto is committed to solving.\",\"What is the difference between standard protocols vs. standard connectors?\",\"\u003cp\u003eIn Logto, standard protocols such as OAuth 2.0, SAML (Security Assertion Markup Language), and OIDC (OpenID Connect) define the rules and procedures for securely exchanging authentication and authorization data between different parties involved in the CIAM system. These protocols provide a standardized way for applications and services to communicate and validate user identities.\u003c/p\u003e\u003cp\u003eStandard connectors, refer to pre-built or customizable components that facilitate the integration of CIAM systems with various identity providers, databases, or other systems. These connectors are designed to support specific standard protocols (OAuth 2.0, SAML, OIDC) and simplify the implementation process by handling the protocol-specific details. Logto offers a hassle-free experience by providing zero-code configuration and seamless creation of personalized standard connectors.\u003c/p\u003e\",\"Incorporate various open standards\",\"By utilizing open standards like SAML, OAuth, and OIDC, an identity system can expand their work to meet different business requirements.\",{\"_11\":1860,\"_13\":1861},{\"_11\":1858,\"_13\":1859},{\"_11\":1856,\"_13\":1857},{\"_11\":1854,\"_13\":1855},\"Easy and zero-code customization\",\"Logto's zero-code console makes it easy to create personalized standard connectors with user-friendly guidelines. These connectors can be seamlessly integrated with your authentication experience.\",\"Security Assertion Markup Language (SAML)\",\"Like OIDC, SAML is primarily used for authentication, but it is often used in âenterprise environmentsâ, particularly in situations where organizations have a central identity management system.\",\"OpenID Connect (OIDC)\",\"OIDC is a protocol that builds on top of OAuth 2.0 and is primarily used for authentication. It provides a way for users to authenticate with a provider, and receive an identity token that can be used to verify their identity to other services. OIDC is often used in conjunction with OAuth 2.0 to provide both authentication and authorization.\",\"Open Authorization (OAuth) 2.0\",\"OAuth is primarily used for authorization, allowing users to grant third-party applications access to their resources without sharing their credentials. For example, if you see \\\"Sign in with Facebook,\\\" that app is likely using OAuth to get access to your profile information. You can use this protocol to customize and extend social sign in methods.\",\"Why use open standards and standard connectors?\",\"It is derived from the qualities of open standards and the capabilities of standard connectors in Logto\",[1865,1866,1867],{\"_11\":1872,\"_13\":1873},{\"_11\":1870,\"_13\":1871},{\"_11\":1868,\"_13\":1869},\"Bring your own IdP\",\"If certain identity providers lack pre-built connector interfaces, Logto standard connectors offer convenient solutions for configuring and seamlessly integrating with Logto's sign-in process.\",\"Logto is built on open standards\",\"Logto relies on open standards as its foundation. We strictly refuse connectors that do not comply with these open standards, thereby reinforcing the guarantee of security.\",\"Compatible, interoperable and secure\",\"Open standards enable predictable communication and data exchange among components. They are battle-tested and include built-in security features like authentication and encryption.\",\"Logto's thorough audit log enables you to monitor user activity and events, bolster authentication, and establish a robust foundation for a wide range of user management and health check business scenarios and objectives.\",\"cornerstone\",{\"_111\":1909,\"_113\":1910,\"_168\":1911},\"record_of_auth_events\",{\"_111\":1901,\"_113\":1902,\"_199\"
178:1903,\"_201\":1904},{\"_111\":1886,\"_113\":1887,\"_168\":1888},{\"_111\":144,\"_145\":1882},\"Track and monitor user activity and system events with Logto's powerful Audit Logs feature, giving you greater visibility into your authentication process and enhancing your security.\",[1883],{\"_152\":1884,\"_154\":1885},\"What is the retention period for the stored logs?\",\"Logto provides multiple plans with varying retention periods. The free plan allows you to store audit logs for up to 7 days. For more information on retention periods, please refer to the pricing page.\",\"Scenarios for using audit logs\",\"Audit logs can provide valuable insights for monitoring and improving system performance and security.\",[1889,1890],{\"_11\":1896,\"_207\":1897},{\"_11\":1891,\"_207\":1892},\"Get multi-dimensional insights\",[1893,1894,1895],\"No need to introduce another third-party services\",\"Record structured user data from day one\",\"Use as the product logging foundation\",\"Easy troubleshooting\",[1898,1899,1900],\"Easy compliance\",\"Monitor the authentication flow with confidence\",\"Put your sign-in security under control\",\"Provide a record of all authentication events\",\"By keeping a record of these events, organizations can identify potential security threats and take corrective action to prevent unauthorized access to their systems.\",{\"_11\":1907,\"_13\":1908},{\"_11\":1905,\"_13\":1906},\"Perform a detailed analysis at the user level\",\"Logs can also be associated with a user and analyzed in detail by administrators, enabling a thorough investigation of specific events. Itâs super easy to navigate and understand.\",\"Capture user activity at the tenant level\",\"Recording user activity at the tenant level offers a comprehensive view of the tenant's activity, encompassing data such as application, IP, event type, and time. The raw data obtained can also be utilized to manage and secure the system more effectively.\",\"Logs serve as the cornerstone of identity security\",\"Logto's logs provide precise details, making it simple to take further action and maintain customer safety\",[1912,1913,1914],{\"_11\":1919,\"_13\":1920},{\"_11\":1917,\"_13\":1918},{\"_11\":1915,\"_13\":1916},\"Uncover business values\",\"Audit logs provide user insights and data to customer data platforms and analytics tools, or integrate with privacy and marketing systems as a foundational source.\",\"Accountability\",\"With audit logs, user accountability is ensured as they trace unauthorized access or data misuse back to the authentication event. These logs efficiently fulfill compliance requirements.\",\"Prevent breaches\",\"Audit logs aid in detecting potentially malicious login attempts, such as multiple failed attempts from a user or IP address. This can signal an attempted brute-force attack or password guessing etc.\",\"Logto RBAC: roles, scopes \u0026 permissions for your API\",\"Logto RBAC models roles, scopes, and permissions for your APIs, manageable from the console or the Management API and carried in access tokens.\",\"Authorization with granular access control\",\"Design your authorization policy and manage user access with Logto role-based access control for long-term security, quality, and business maturity.\",{\"_111\":1969,\"_113\":1970,\"_168\":1971},{\"_111\":1955,\"_113\":1956,\"_199\":1957,\"_201\":1958,\"_203\":1959},\"authn_to_authz\",{\"_111\":1940,\"_113\":1941,\"_168\":1942},{\"_111\":144,\"_145\":1930},[1931,1932,1933],{\"_152\":1938,\"_154\":1939},{\"_152\":1936,\"_154\":1937},{\"_152\":1934,\"_154\":1935},\"Does Logto support multiple role assignments?\",\"Indeed, Logto RBAC offers support for multi-role assignment, allowing users to have multiple roles simultaneously. This provides a great deal of flexibility in managing access control and ensures robust security measures.\",\"Is RBAC feature available by default?\",\"RBAC is available across all plans, but each plan has a different quota. For more information on the specific quotas and details, please visit our pricing page.\",\"Can Logto be used for attribute-based access control (ABAC)?\",\"Logto's top priority is to implement RBAC, which effectively handles the most common access control scenarios. ABAC, on the other hand, offers a more detailed approach for managing complex scenarios. You can use Logto \u003ccustom_jwt\u003ecustom JWT claims\u003c/custom_jwt\u003e to meet basic ABAC requirements.\",\"From authentication to authorization, Logto has you covered\",\"Don't settle for authentication-only solutions. Our RBAC authorization system offers thorough authorization features, setting us apart from the competition.\",[1943,1944],{\"_11\":1950,\"_207\":1951},{\"_11\":1945,\"_207\":1946},\"Extensive authorization service support\",[1947,1948,1949],\"Highly effective role-based access control features\",\"Detailed tutorial ready\",\"Allowing for a wide range of scenarios\",\"Best developer experience\",[1952,1953,1954],\"From code to no code with smooth workflows\",\"Easy to migrate from Auth0\",\"Adhering to the NIST RBAC model\",\"Take control of access management\",\"Logto offers a range of RBAC features that simplify access control management without causing mental exhaustion\",{\"_11\":1967,\"_13\":1968},{\"_11\":1962,\"_13\":1963,\"_207\":1964},{\"_11\":1960,\"_13\":1961},\"Use RBAC to protect your M2M authentication\",\"Roles can also be assigned to machine-to-machine application, this can protect your API authentication and server to server communication.\",\"Using roles for efficiency and effectiveness\",\"Directly mapping permissions to users is inefficient, which is where roles come in. With RBAC, roles include permissions, and you can efficie
178ntly manage access in batches.\",[1965,1966],\"Global roles: Assigned across the Logto tenant\",\"Organization roles: Assigned within an org\",\"Protect your API\",\"By adding permissions to your API resources and incorporating them into your development process, you can exercise granular control over the authorization of the API resource within a minimized scope.\",\"RBAC plays a critical role in achieving business maturity\",\"Role-Based Access Control (RBAC) helps reduce data breaches and security by limiting access to sensitive information and systems based on user roles.\",[1972,1973,1974],{\"_11\":1978,\"_13\":1979},{\"_11\":1241,\"_13\":1977},{\"_11\":1975,\"_13\":1976},\"Widely used mechanism in authorization\",\"Many regulations (e.g., GDPR, HIPAA) require strict access control. RBAC ensures compliance by enforcing structured, role-based access policies. This avoids fines and reputational damage due to non-compliance.\",\"Permissions are assigned to roles, not individual users, making it easier to manage and audit access. This reduces errors in granting or revoking access, ensuring consistent enforcement of security policies.\",\"Principle of least privilege\",\"Users are granted only the permissions they need to perform their specific job functions.This minimizes the risk of accidental or intentional misuse of data by restricting unnecessary access.\",\"Logto User Management: roles, groups \u0026 audit logs included\",\"Logto's user management covers profiles, roles, organizations, groups, and audit logs. Drive everything from the console or the Management API.\",\"Manage your customer identities\",\"From early stage to rapidly expanding businesses, our user management layers offer robust features to help you manage your customers with a few clicks or a few lines of code.\",\"huge_ask\",{\"_111\":2033,\"_113\":2034,\"_168\":2035},\"manage_and_secure\",{\"_111\":2016,\"_113\":2017,\"_199\":2018,\"_201\":2019,\"_203\":2020,\"_780\":2021},\"authn_meets_user_management\",{\"_111\":1991,\"_113\":1992,\"_168\":1993},\"Take control of your user authentication experience and simplify your user management process with Logto's powerful User Management feature.\",\"Logto: where authentication meets user management\",\"Our user management solution stands out from competitors who only focus on authentication, by also providing robust user management and authorization capabilities.\",[1994,1995,1996,1997],{\"_11\":2011,\"_207\":2012},{\"_11\":2008,\"_207\":2009},{\"_11\":2003,\"_207\":2004},{\"_11\":1998,\"_207\":1999},\"Scalable API management\",[2000,2001,2002],\"Full-functional APIs for your management needs\",\"Advanced search APIs to create complex filters\",\"Available in all plans\",\"Comprehensive no-code management\",[2005,2006,2007],\"Simple console operations for management tasks\",\"Intuitive design and seamless operation\",\"Cross-entity management, easy, and efficient\",\"Master RBAC like a pro\",[1947,2010,1949],\"Detailed tutorials ready\",\"You donât need a user table\",[2013,2014,2015],\"No user table in a SQL database\",\"Not just a service provider, but also an identity provider\",\"Use Logto as a single source of truth of user data\",\"Manage and secure your customers from end to end\",\"By utilizing Logto as a single source of truth for customer identities, managing them becomes a straightforward task.\",{\"_11\":2028,\"_13\":2029,\"_207\":2030},{\"_11\":2026,\"_13\":2027},{\"_11\":2024,\"_13\":2025},{\"_11\":2022,\"_13\":2023},\"Manage users through Management API\",\"Beyond managing it through console, you can directly call user API of Logto Management API to support your enterprise readiness.\",\"Checking user logs\",\"The user-level audit log enables you to closely monitor the actions of specific users, ensuring security and providing enhanced user management with confidence. Additionally, it effectively addresses compliance needs.\",\"Roles \u0026 Organizations\",\"Managing roles and organization roles to each user enables fine-grained access control, ensuring that users have the appropriate level of access.\",\"Generic management\",\"Logto offers robust functionalities for user management and maintaining a tidy user database.\",[2031,2032,1676],\"Profile information and custom data\",\"Add, suspend and delete users\",\"Why user management is a huge ask in auth?\",\"User management is a crucial aspect of any authentication \u0026 authorization system\",[2036,2037,2038],{\"_11\":2043,\"_13\":2044},{\"_11\":2041,\"_13\":2042},{\"_11\":2039,\"_13\":2040},\"Developer-driven jobs\",\"Managing user can be a complex and iterative process that requires technical expertise and is closely linked to technology dependencies. Ensuring that these tasks are developer-friendly can help successful implementation and save costs.\",\"Enterprise readiness\",\"This term refers to the ability of a product, service, or technology to meet the demands and expectations of large-scale organizations or enterprises, and having strong user management capabilities can facilitate the process of selling to such clients.\",\"A must for being scalable\",\"A strong and scalable user management tool is essential for growing companies due to the complexity of their identity system, which includes access controls, multi-tenancy architecture, frequent changes in user pools, and audit logs.\",\"Be an open-eco IdP, collaborate with third-party apps\",\"Turn your service into an innovation hub with Logto as your ideal OIDC/OAuth IdP. Provide fluid SSO and permission grants for third-party apps. Enjoy secure interoperability across platforms, devices, and OS.\",{\"_111\":2089,\"_113\":2090,\"_168\":2091}
178,{\"_111\":2074,\"_113\":2075,\"_199\":2076,\"_201\":2077,\"_203\":2078},{\"_111\":2059,\"_113\":2060,\"_168\":2061},{\"_111\":144,\"_145\":2052},\"Discover Logto: your identity provider. Redefine boundaries, expand your business empire.\",[2053,2054],{\"_152\":2057,\"_154\":2058},{\"_152\":2055,\"_154\":2056},\"What distinguishes a third-party app from a first-party app?\",\"\u003col\u003e\u003cli\u003eFirst-party apps are developed and managed by the identity provider itself, ensuring higher security and trust. In Logto, first-party apps share a unified authentication experience within the same domain, using the same user credentials, and automatically granting all permissions based on the access control settings.\u003c/li\u003e\u003cli\u003eThird-party apps are external or partner services not directly affiliated with the identity provider, and thus, they cannot be trusted implicitly. Third-party apps employ their Auth systems and acquire user authentication from the IdP via Single Sign-On (SSO), which necessitates requesting limited permissions from the IdP and requires manual approval by the user during the Auth flow.\u003c/li\u003e\u003c/ol\u003e\",\"When should I use Logto as an IdP for third-party apps?\",\"Using Logto as your IdP can expand business collaborations, offering freedom and security. Here are some typical use cases:\u003col\u003e\u003cli\u003eSocial sign-In: Utilize Logto as the IdP of B2C/B2B services, allowing third-party apps to offer Social Sign-in buttons like Facebook, Google, and Apple.\u003c/li\u003e\u003cli\u003eEnterprise SSO: Utilize Logto as the IdP of B2E services, enabling Enterprise Single Sign-On with providers like Okta, Azure AD, and Google Workspace.\u003c/li\u003e\u003cli\u003eIn-app workflow Integration: Use Logto to enhance automated workflows on platforms like Slack and Raycast, requiring user authentication for efficient operation.\u003c/li\u003e\u003c/ol\u003e\",\"Why Logto stands out?\",\"Logto: A complete, scalable, user-friendly identity solution.\",[2062,2063],{\"_11\":2069,\"_207\":2070},{\"_11\":2064,\"_207\":2065},\"Authorization for multi-tenant product\",[2066,2067,2068],\"Supports complex multi-tenant product structures\",\"Enable requests for organization permissions\",\"Allow users to grant access to designated organizations\",\"Comprehensive IdP infrastru
178cture\",[2071,2072,2073],\"Logto offers a full suite of IdP functionalities\",\"OAuth 2.0 and OpenID Connect protocols\",\"MFA, RBAC, organizations, User management, Audit logs\",\"Share identity, share business\",\"Easy integration, fine-grained permissions, and customizable user consent screen.\",{\"_11\":2087,\"_13\":2088},{\"_11\":2081,\"_13\":2082,\"_207\":2083},{\"_11\":2079,\"_13\":2080},\"Consent screen UI\",\"Elevate user experience with a customizable consent screen UI, featuring your brand and specific information.\\n\\nSupports selecting particular organizations for permissions grants, offering unparalleled flexibility and control.\",\"Permission options\",\"From customer-facing to multi-tenancy B2B services, our platform supports all your authorization needs.\",[2084,2085,2086],\"User data access from OIDC\",\"API resource permissions\",\"Organization permissions\",\"OIDC app integration\",\"Easily expand your business with our universal \u003ca\u003eUniversal OIDC solution\u003c/a\u003e, offering limitless third-party app integration.\\nComing soon: Logto as a SAML IdP.\",\"Benefits of becoming an identity provider\",\"Empower your digital ecosystem: simplify access, enhance security, unite identities.\",[2092,2093,2094],{\"_11\":2099,\"_13\":2100},{\"_11\":2097,\"_13\":2098},{\"_11\":2095,\"_13\":2096},\"Multi-app management\",\"Centralize manage identities and permissions across multiple apps, devices, and OS from a single dashboard. Reduce collaboration costs, simplify operations, and enhance security.\",\"User consent\",\"Allow apps to request and users to grant permissions with precision. This transparency ensures users have full control over their data, fostering trust and compliance with privacy standards.\",\"SSO server\",\"Integrate a one-click SSO feature into your partnered applications for instant access, e.g., Social login or Enterprise SSO. By simplifying user access, boosting user retention and loyalty, and attracting more cooperation.\",\"Internationalization\",\"Internationalization (i18n) is the process of designing and developing software that can be adapted to different languages and cultural contexts without the need for engineering changes. Letâs build your apps for global with Logto from day one.\",\"expand_your_customers\",{\"_111\":2157,\"_113\":2158,\"_168\":2159},\"global_from_day_one\",{\"_111\":2143,\"_113\":2144,\"_199\":2145,\"_201\":2146,\"_203\":2147},{\"_111\":1336,\"_113\":2117,\"_168\":2118},{\"_111\":144,\"_145\":2110},\"Expand your reach and connect with a global audience using Logto's Languages and Internationalization, providing fully localized screens in any language.\",[2111,2112],{\"_152\":2115,\"_154\":2116},{\"_152\":2113,\"_154\":2114},\"What can I do if the language I need is missing?\",\"You can contact our community and contribute to our open-source version. We will incorporate any new or updated languages into our Cloud version.\",\"What can I do if I'm not satisfied with some built-in phrases?\",\"You can use our custom phrases feature to add new values as replacements for the existing Logto options. This will be directly reflected in your sign-in user interface, and you can modify or edit it whenever needed.\",\"With the rise of SaaS and new tech companies across the globe, we aim to address this from day one.\",[2119,2120,2121,2122],{\"_11\":2138,\"_207\":2139},{\"_11\":2133,\"_207\":2134},{\"_11\":2128,\"_207\":2129},{\"_11\":2123,\"_207\":2124},\"Inclusive design\",[2125,2126,2127],\"The phone number area code supported\",\"Caring for accessibility\",\"Globally available social sign-in methods\",\"âKey: Valueâ content management\",[2130,2131,2132],\"Sign-in experience has dynamic keys\",\"Flexibly find and edit the values with confidence\",\"Easily replace and manage in multiple surfaces\",\"Best choice for global audiences\",[2135,2136,2137],\"We cared about culture and inclusiveness\",\"Encompassing both UX and content\",\"Global presence with developers and businesses\",\"We solved the root cause\",[2140,2141,2142],\"Use custom phrases to customize any language\",\"Our community empowers more and more languages\",\"Smart language fallback logic\",\"Make your product global from day one\",\"With Logto, you can focus on building your product while we take care of the rest.\",{\"_11\":2152,\"_13\":2153,\"_207\":2154},{\"_11\":2150,\"_13\":2151},{\"_11\":2148,\"_13\":2149},\"Phone number area code\",\"Our system automatically adapts to global phone number formats, ensuring that users can confidently input the correct phone number based on their platform language.\",\"Customize p
178hrases\",\"It is possible to override the prebuilt phrases or add non-supported language phrases to align with the local context and regulations. This process is straightforward and simple to customize and reference.\",\"Over 15 supported languages\",\"Logto prioritizes i18n and localization, and thanks to the joint efforts of our community and the official team, we have expanded our support to more than 15 languages and ensure that they are flawlessly displayed on our UI.\",[2155,2156],\"2 language modes: Auto detect and fixed language\",\"Support fallback policies\",\"Expand your customers through i18n\",\"Implement i18n early in the development process to avoid costly and time-consuming re-engineering efforts later on\",[2160,2161,2162],{\"_11\":2169,\"_118\":2170,\"_13\":2171},{\"_11\":2166,\"_118\":2167,\"_13\":2168},{\"_11\":2163,\"_118\":2164,\"_13\":2165},\"Loyalty and trust\",\"Being able to speak to someone in your language â it establishes trust.\",\"Caring about localization makes customers know that the product itself understand them and their needs.\",\"Access to a wider market\",\"Nearly \u003cstrong\u003e90% of consumers\u003c/strong\u003e wonât even consider buying from an English website if they donât speak and canât read English.\",\"Internalization in every touch point can show product inclusiveness in the market.\",\"Expand customer base\",\"\u003cstrong\u003e75%\u003c/strong\u003e of consumers are more likely to purchase from a brand if their product information is available in their native language.\",\"Internalization is not just a multi-language support but also a product strategy.\",\"Branding and custom CSS\",\"Customize the theming of the prebuilt UIs according to your branding guideline, with options such as utilizing Custom CSS, modifying the logo, and enabling dark mode.\",\"stand_out_and_succeed\",{\"_111\":2226,\"_113\":2227,\"_168\":2228},\"distinctive_look_n_feel\",{\"_111\":2211,\"_113\":2212,\"_199\":2213,\"_201\":2214,\"_203\":2215},{\"_111\":1336,\"_113\":2185,\"_168\":2186},{\"_111\":144,\"_145\":2181},\"Take your sign in flow to the next level with Logto's Custom CSS, making it an integral part of your brand experience.\",[2182],{\"_152\":2183,\"_154\":2184},\"Does custom CSS support API?\",\"Certainly! The Management API can also be utilized to apply personalized CSS to the sign-in process, providing an alternative to using our console. For further information, please refer to our documentation.\",\"Our focus at Logto is on you, not just ourselves. We are committed to ensuring that your product and brand experience is exceptional and successful by making it unique and stay professional.\",[2187,2188,2189,2190],{\"_11\":2206,\"_207\":2207},{\"_11\":2201,\"_207\":2202},{\"_11\":2196,\"_207\":2197},{\"_11\":2191,\"_207\":2192},\"Easy customization through CSS\",[2193,2194,2195],\"Create a personalized footer for the disclaimer\",\"Apply a customized background with a gradient effect\",\"Customize with your own font and more\",\"The first player considering dark-mode\",[2198,2199,2200],\"Prebuilt dark mode and compatible with your brand\",\"Auto generate dark mode color based on your brand\",\"Got inspiration from Material Design 3\",\"Preview and interact in real time\",[2203,2204,2205],\"Arrange on the left side and preview on the right side\",\"Conveniently test with multi-language\",\"Conveniently test with dark mode and customize CSS\",\"Modern and fresh\",[2208,2209,2210],\"Responsive and adaptive design\",\"Polished UI design system and components\",\"Your brand logo is present across all points of contact\",\"Lots of choices for a distinctive look and feel\",\"Logto provides the best design practices and allows for flexible customization to enhance your brand and appearance.\",{\"_11\":2224,\"_13\":2225},{\"_11\":2218,\"_13\":2219,\"_207\":2220},{\"_11\":2216,\"_13\":2217},\"Custom CSS to unleash your creativity\",\"Custom CSS offers developers the flexibility to customize their app's visual design with precise style control, including font styles, colors, backgrounds, borders, etc.\",\"Dark mode\",\"The implementation of dark mode can be advantageous for individuals with particular visual impairments or sensitivities, and it can also contribute to distinguishing your product from others.\",[2221,2222,2223],\"Auto generate dark mode theme based on your brand color\",\"Adaptive enablement following user's system\",\"Flexible color token mapping\",\"Customize logo and favicon\",\"By uploading your App Logo and favicon through the console, you can achieve a personalized sign-in experience that seamlessly integrates with your product flow.\",\"Stand out and succeed with a memorable brand identity\",\"Having a distinctive brand identity and aesthetic appearance can have a significant impact over an extended period of time.\",[2229,2230,2231],{\"_11\":2236,\"_13\":2237},{\"_11\":2234,\"_13\":2235},{\"_11\":2232,\"_13\":2233},\"Increase conversion\",\"A consistent brand experience can make the product experience more familiar and recognizable to users.\",\"Brand differentiation\",\"A memorable brand identity can differentiate a brand from its competitors and make it more appealing to users.\",\"Trust and credibility\",\"A well-designed brand identity can help establish trust and credibility with users during the sign-in/register process.\",\"account_management\",{\"_111\":2262,\"_113\":2263,\"_199\"
178:2264,\"_201\":2265,\"_203\":2266},{\"_111\":1336,\"_113\":2248,\"_168\":2249},{\"_111\":2243,\"_145\":2244},\"Build secure, branded account experiences in minutes. No compromise on security or customization.\",\"Is a prebuilt account center available?\",[2245],{\"_152\":2246,\"_154\":2247},\"Is centralized identity system necessary for single-app business?\",\"While Logto currently provides no out-of-box UI, use our Account API to build account management directly into your UI, enabling profile/authentication/social/MFA controls with full brand consistency. Bypass Management API complexity for faster integration.\",\"Security and efficiency engineered for modern apps.\",[2250,2251],{\"_11\":2257,\"_207\":2258},{\"_11\":2252,\"_207\":2253},\"Intelligent secure guardrails\",[2254,2255,2256],\"Set contextual step-up verification rules\",\"Mandatory re-authentication for auth method changes\",\"Time-bound sessions balancing security and UX\",\"Account API for rapid integration\",[2259,2260,2261],\"End-user-facing APIs with minimal integration effort\",\"Admins have full, global control over user access\",\"Complete UI customization using your components\",\"Self-serve account management\",\"Give users control while enforcing security policies.\",{\"_11\":2278,\"_13\":2279,\"_1135\":2280},{\"_11\":2272,\"_13\":2273,\"_207\":2274},{\"_11\":2267,\"_13\":2268,\"_207\":2269},\"Custom account centers via Logto APIs\",\"Build secure, branded account management interfaces using:\",[2270,2271],\"Account API (Recommended): Direct end-user access with granular permissions.\",\"Management API: Full developer control for custom implementations.\",\"Step-up security verification\",\"Require instant identity reconfirmation before high-risk actions (e.g., auth method changes, sensitive data access). Verify legitimate users initiate critical operations.\",[2275,2276,2277],\"Verify email address\",\"Verify phone number\",\"Verify password\",\"Profile \u0026 Account settings\",\"Flexibly add, update, or remove authentication methods under strict sign-in/sign-up rules, maintaining accessibility without losing necessary authentication factors.\",[2281,2282,2283,2284,2285,2286,2287,2288,2289,2290],\"Update identifiers\",\"Set a password\",\"Link social accounts\",\"Enterprise SSO accounts\",\"Add passkeys\",\"Add authenticator app\",\"Generate backup codes\",\"Create personal access token\",\"Edit profile\",\"Delete account\",\"Logto Omni sign-in: web, mobile, desktop, CLI \u0026 IoT\",\"Logto Omni sign-in handles web, mobile, desktop, CLI, and IoT. One user record per person, plus passwordless, social, and SSO methods on each surface.\",\"Make your products cohesive by Omni sign-in experience\",\"Omni sign-in is a unifying feature that allows you to securely authenticate your users across all apps and platforms, for example, perfectly fit for one app to multiple app businesses. This feature lets you maintain consistent and cohesive branding, sign-in methods, and authentication experience.\",\"figma_resources\",\"Figma resources\",\"learn_best_practice\",\"Learn best practice\",\"benefits_of_omni\",{\"_111\":2379,\"_113\":2380,\"_168\":2381},\"exudes_professionalism\",{\"_111\":2339,\"_113\":2340,\"_199\":2341,\"_201\":2342,\"_203\":2343,\"_780\":2344},{\"_111\":1336,\"_113\":2313,\"_168\":2314},{\"_111\":2306,\"_145\":2307},\"Transform the way you authenticate users with Logto's omni sign-in experience, providing seamless, secure and frictionless authentication across all platforms and apps.\",\"Satisfying your top questions\",[2308,2309],{\"_152\":2246,\"_154\":2312},{\"_152\":2310,\"_154\":2311},\"Does Logto provide built-in verification code sender?\",\"Yes, Logto has a built-in verification code sender using Logto credentials. There is no cap limit for the email sender, but the SMS sender has a limit. If you want to use your own credentials and increase the limit, you can configure and add your own credentials.\",\"A centralized identity system may not be needed or a high-priority item for a single-app business right now. However, Logto's architecture can handle a one-app business effortlessly, making it simple to integrate and manage your identities. As
178your business expands, it's inevitable that your single app will grow into multiple apps. So, it's important to consider scalability and sustainability for the future.\",\"The Omni sign-in experience embodies the elegant design of our infrastructure and follows the best practices to address customer identity challenges.\",[2315,2316,2317,2318],{\"_11\":2334,\"_207\":2335},{\"_11\":2329,\"_207\":2330},{\"_11\":2324,\"_207\":2325},{\"_11\":2319,\"_207\":2320},\"Make sign-in experience professional\",[2321,2322,2323],\"Professional and modern design\",\"Support dark mode\",\"Support localization\",\"Configuration in a few clicks\",[2326,2327,2328],\"No code, just click, drag and drop\",\"Edit and preview on the go\",\"Preview the changes in real-time\",\"Highly customizable look and feel\",[2331,2332,2333],\"Custom CSS can achieve lots of things\",\"We have original UI components public\",\"You can also customize the favicon\",\"Design for a centralized identity\",[2336,2337,2338],\"If you have multi-app strategy, go with Logto\",\"Easily manage identities across all apps\",\"Cohesive end customer experience\",\"Omni sign-in exudes professionalism and efficiency\",\"We handle every aspect of your sign-in experience, from the front-end to the back-end.\",{\"_11\":2372,\"_13\":2373,\"_1135\":2374},{\"_11\":2353,\"_168\":2354},{\"_11\":2351,\"_13\":2352},{\"_11\":2345,\"_13\":2346,\"_207\":2347},\"App/Organization-level custom sign-in experience\",\"Easily configure a universal login for all users or create distinct login for specific entities.\",[2348,2349,2350],\"Universal experience\",\"Application-specific experience\",\"Organization-specific experience\",\"Extremely beneficial for a multi-app architecture\",\"As businesses grow, building multiple apps becomes a natural step. The omni sign-in experience applies to all apps within a tenant, eliminating the need to duplicate or transfer authentication, user data, and branding settings to individual apps.\",\"Easy customization for your needs\",[2355,2356,2357],{\"_11\":2368,\"_207\":2369},{\"_11\":2363,\"_207\":2364},{\"_11\":2358,\"_207\":2359},\"Languages and i18n\",[2360,2361,2362],\"Multi-language support\",\"Custom phrases\",\"Auto detect and fallback\",\"Custom content\",[2365,2366,2367],\"Terms and privacy\",\"Support email and website\",\"Email and SMS templates\",\"Custom branding\",[2370,2218,2371],\"Logo and favicon\",\"Custom CSS / Bring your UI\",\"Prebuilt UI, everything you need\",\"Everything you need to onboard your users, stop reinventing the wheels, integrated with your app now.\",[1230,1231,1232,2375,2376,2377,2097,2378],\"Enterprise SSO\",\"Set up MFA\",\"Verify MFA\",\"Collect user profile\",\"Benefits of Omni sign-in\",\"Omni sign-in ensures a centralized identity system, consistent branding and enhances user experience.\",[2382,2383,2384],{\"_11\":2391,\"_118\":2392,\"_13\":2393},{\"_11\":2388,\"_118\":2389,\"_13\":2390},{\"_11\":2385,\"_118\":2386,\"_13\":2387},\"Greater user experience\",\"A complicated sign-in process could cost businesses up to \u003cstrong\u003e58%\u003c/strong\u003e of their potential revenue.\",\"Omni sign-in experience is a critical component of user engagement and retention. A great sign-in can run a long win.\",\"Consistent branding\",\"Consistently present their brand experience across all touch-points can increase their revenue by up to \u003cstrong\u003e20%\u003c/strong\u003e.\",\"Consistent branding can help you differentiate from competitors, and ultimately drive engagement and loyalty.\",\"Centralized identities\",\"With a universal sign-in, users have a consistent identity across all the apps within the multi-app product.\",\"User data can be shared and synchronized seamlessly between apps, enabling a cohesive experience across the entire product suite.\",\"Logto social sign-in: Apple, Google, GitHub \u0026 30+ providers\",\"Logto social sign-in adds Apple, Google, GitHub, Facebook and 30+ OAuth/OIDC providers to your app. Covers sign-up, account linking, and Google One Tap.\",\"Use social sign-in to increase user acquisition\",\"Social sign-in is to let users log in using their existing social media accounts such as Facebook, Apple, Google, etc. This method is not only to accelerate user onboarding but also help developers and businesses obtain valuable user data.\",\"check_case_study\",\"Check our case study\",\"social_is_a_must\",{\"_111\":2470,\"_113\":2471,\"_168\":2472}
178,\"smoothly_integrated\",{\"_111\":2443,\"_113\":2444,\"_199\":2445,\"_201\":2446,\"_203\":2447,\"_780\":2448},{\"_111\":1336,\"_113\":2417,\"_168\":2418},{\"_111\":144,\"_145\":2407},\"With Logto's social sign-in options, integrating social media into your authentication process reduces user friction and improves overall experience.\",[2408,2409,2410],{\"_152\":2415,\"_154\":2416},{\"_152\":2413,\"_154\":2414},{\"_152\":2411,\"_154\":2412},\"What is \\\"connector\\\"? How does it work in Logto?\",\"\u003cp\u003eConnectors are the bridge between Logto and other third-party vendors who provide short message service (SMS), email service, or user information on wildly accepted social media.\u003c/p\u003e\u003cp\u003eLogto provides you with many connectors to give end-users access to third-party providers. Such as Google, GitHub, Facebook, SendGrid mail, etc.\u003c/p\u003e\",\"What is OAuth actually? Is OAuth sign-in same as social sign-in?\",\"OAuth is an open standard protocol for secure authorization and access delegation. It allows users to grant limited access to their resources without sharing login credentials. OAuth sign-in and social sign-in are related but not the same. OAuth sign-in uses OAuth to authenticate and authorize a user, while social sign-in specifically refers to using social media accounts for authentication.\",\"Is social sign-in SSO?\",\"\u003cp\u003e\\\"SSO\\\" stands for \\\"Single Sign-On,\\\" which is a mechanism that allows users to authenticate themselves once with one set of login credentials (such as a username and password), and then be granted access to multiple applications or services without having to re-enter their credentials each time.\u003c/p\u003e\u003cp\u003e\\\"Social SSO\\\" refers specifically to using social media accounts (such as Facebook, Google, or Twitter) to authenticate users and grant them access to various applications and services. In other words, instead of creating a new username and password for each service, users can simply use their existing social media accounts to log in. This can simplify the authentication process for users and reduce the burden of managing multiple sets of credentials.\u003c/p\u003e\",\"Logto's social sign-in experience is human-centered and caters to every individual persona throughout their journey, starting from configuration all the way to the end-user experience.\",[2419,2420,2421,2422],{\"_11\":2438,\"_207\":2439},{\"_11\":2433,\"_207\":2434},{\"_11\":2428,\"_207\":2429},{\"_11\":2423,\"_207\":2424},\"Offering standard connectors\",[2425,2426,2427],\"Support standard protocols\",\"Zero-code configuration\",\"Able to bring your own identity provider\",\"Powerful connector set-up\",[2430,2431,2432],\"Low code and dynamic guide for each connector\",\"Support main-stream social connectors\",\"Built-in connector for test and out-of-box usage\",\"Follow social platform design guidelines\",[2435,2436,2437],\"Compliance with Apple sign-in\",\"Compliance with Google sign-in\",\"Compliance with Facebook sign-in\",\"Edge cases considered\",[2440,2441,2442],\"Avoid duplicated accounts\",\"Sign-in interruption recovery\",\"Account upgrade (sign-in methods change) reconcile\",\"Smoothly integrated with your app flow\",\"Safeguard your users and boost conversion rates with Logto's user-friendly social sign-in solutions.\",{\"_11\":2464,\"_13\":2465,\"_207\":2466},{\"_11\":2459,\"_13\":2460,\"_207\":2461},{\"_11\":2454,\"_13\":2455,\"_207\":2456},{\"_11\":2449,\"_13\":2450,\"_207\":2451},\"Built-in connector or bring your own with OAuth 2.0 or OIDC\",\"Logto has various built-in connectors that cover most popular social identity provider and the number is still increasing. You can also build your own identity providers to match your need with open-standard protocols including OIDC, OAuth 2.0.\",[2452,2453],\"Built-in connectors with no extra set up\",\"Develop custom connectors by following our open-standard protocols\",\"Link accounts\",\"During social sign-in, if another account has already claimed the identifier, our flexible options can help you avoid account switching and merging concerns while reducing customer service expenses.\",[2457,2458],\"Automatically fulfill social verified email or phone numbers\",\"Link the existing account\",\"Google One Tap\",\"Let users authenticate instantly on your site. No more disruptive trips to Googleâs authorization pages. Boost conversions with Google One Tap.\",[2462,2463],\"One
178-click sign-in with Google One Tap\",\"Customizable interaction options\",\"Sign in and sign up through social accounts\",\"Logto social sign in cares about the end-to-end flow and can work with email, phone, username, which makes Logto an robust customer experience and no blind spot.\",[2467,2468,2469],\"For both sign in \u0026 create account\",\"Sync profile information from the social identity\",\"Store tokens for third-party APIs access\",\"Social sign-in is a must for modern apps\",\" It simplifies the user registration process, enhances user experience, and provides additional user profile\",[2473,2474,2475],{\"_11\":2232,\"_118\":2482,\"_13\":2483},{\"_11\":2479,\"_118\":2480,\"_13\":2481},{\"_11\":2476,\"_118\":2477,\"_13\":2478},\"Getting quality data\",\"Offering social login alongside a registration form gives you access to verified email addresses and more than \u003cstrong\u003e200\u003c/strong\u003e verified data points for each user.\",\"Getting quality user data is essential for any online business.\",\"Keep retention\",\"\u003cstrong\u003e92%\u003c/strong\u003e of users will leave a
178website if they forget their username or password.\",\"Users prefer to manage as less identities as possible. Users can log in just one tap with social sign-in.\",\"Social sign-in can significantly increase conversion rates, with studies showing an average improvement of \u003cstrong\u003e20%-40%\u003c/strong\u003e.\",\"It reduces friction and leverages the trust that users have in their social network accounts.\",\"Passwordless authentication with OTP, magic link, and passkey\",\"Eliminate password risks while accelerating onboarding. Use email / SMS verification codes, one-click magic links, and phishing-proof passkeys for secure, frictionless sign-in experience.\",\"vote\",\"Vote\",\"love_passwordless\",{\"_111\":2552,\"_113\":2553,\"_168\":2554},\"accessible_solutions\",{\"_111\":2527,\"_113\":2528,\"_199\":2529,\"_201\":2530,\"_203\":2531,\"_780\":2532},{\"_111\":1336,\"_113\":2502,\"_168\":2503},{\"_111\":144,\"_145\":2495},\"Say goodbye to passwords and hello to hassle-free authentication with Logto's email and SMS passwordless sign-in. Give it a try now and discover a simpler and more secure way to acquire and protect your customers.\",[2496,2497],{\"_152\":2500,\"_154\":2501},{\"_152\":2498,\"_154\":2499},\"Is it still possible for me to use password-based sign-in if I prefer it?\",\"Yes, Logto also supports password sign-in. Password sign-in is still important, and Logto emphasizes the importance of balancing security and user experience. You can find more information about password sign-in here.\",\"How does passwordless authentication differ from email \u0026 SMS verification codes?\",\"\u003cp\u003eIn short, email \u0026 SMS verification codes is a subset of passwordless sign-in. Passwordless authentication is a method of logging into an account without using a password. Instead, it relies on alternative forms of verification such as biometrics, physical tokens, or one-time codes sent through a communication channel like email or SMS.\u003c/p\u003eEmail and SMS verification codes require the user to enter a code sent to their email or phone number in order to authenticate their identity. It can work alone as an authentication factor or be pair with setting a password. Some times social sign in can also be c
178onsidered as passwordless sign-in. You can check \\\"\u003cmfa\u003eMFA\u003c/mfa\u003e\\\" \u0026 \\\"\u003csocial_sign_in\u003eSocial sign-in\u003c/social_sign_in\u003e\\\" to learn more.\",\"Logto provides mature, out-of-the-box email and SMS passwordless sign-in solutions, designed with key principles for ease of use.\",[2504,2505,2506,2507],{\"_11\":2522,\"_207\":2523},{\"_11\":2518,\"_207\":2519},{\"_11\":2513,\"_207\":2514},{\"_11\":2508,\"_207\":2509},\"Easy implementation and management\",[2510,2511,2512],\"Audit logs to track sign-in activity\",\"Simple 3-step, 10-minute integration\",\"30+ SDK for quick setup\",\"Flexible and customizable\",[2515,2516,2517],\"Cover over 90% sign-in experience scenarios, proudly\",\"Supports multiple sign-in methods for user choice\",\"Customizable UI for tailored user flows\",\"Put security first\",[2520,2521],\"Expiration times and resend options\",\"Full compliance with OIDC standards\",\"All-in-one solutions\",[2524,2525,2526],\"Ready-to-use user interface and components\",\"Built-in support for i18n and localization\",\"Configurable and API-ready\",\"Logto key features to cover your requirements\",\"Passwordless comes with several touchpoints throughout the user journey. If you build your own, you need to prepare for things like email service, email design, and MFAâbut Logto has those covered.\",{\"_11\":2545,\"_13\":2546,\"_207\":2547},{\"_11\":2539,\"_13\":2540,\"_207\":2541},{\"_11\":2533,\"_13\":2534,\"_207\":2535},{\"_11\":864,\"_13\":865},\"Passkey sign-in\",\"Enable passkey sign-in that reject phishing attempts. Fast, secure access via WebAuthn standards.\",[2536,2537,2538],\"Biometrics (Face ID/Touch ID)\",\"Device-bound security keys\",\"Hardware/software authenticators\",\"Magic link\",\"Send unique, time-sensitive links via email or SMS. Customers join, register, or authenticate instantly. Use magic links to slash your onboarding time.\",[2542,2543,2544],\"Invitation-only sign-ups\",\"Organization member invitation\",\"Instant sign-in / sign-up\",\"Email / SMS OTP\",\"Deploy ready-made, easily tailored email and SMS verification flows for every customer touchpoint. No matter the device.\",[2548,2549,2550,2551],\"Support cross device experience\",\"Sign-in, sign-up, password recovery\",\"Step-up verification, account linking and updating\",\"Customizable email / SMS templates\",\"How does Logto passwordless work\",\"Email and verification code is a secure, user-friendly method that eliminate the need to remember passwords. Here is how the user flow for this process typically unfolds:\",[2555,2556,2557],{\"_11\":2562,\"_13\":2563},{\"_11\":2560,\"_13\":2561},{\"_11\":2558,\"_13\":2559},\"Step 3: Code entered, access granted\",\"Upon enter the code to the interface, the application receives the access token. This token serves as proof of identity and is used to authenticate the user without requiring a password.\",\"Step 2: Code generation and delivery\",\"Once the email is submitted, the system generates a unique code. This verification code is then sent straight to the user inbox.\",\"Step 1: User enter email or phone number\",\"The journey begins when a user lands on the sign-in/up page. Here, they are prompted to enter their email address.\",\"Password isnât dying\",\"Password sign-in has been the most popular method of authentication for mobile apps and websites because it is a widely recognized and familiar authentication method, and it can be easily integrated into most software systems.\",\"password_still_vital\",{\"_111\":2612,\"_113\":2613,\"_2614\":2615,\"_2616\":2617,\"_2618\":2619,\"_2620\":2621,\"_2622\":2623,\"_2624\":2625},\"logto_supported_scenarios\",{\"_111\":2590,\"_113\":2591,\"_199\"
178:2592,\"_201\":2593,\"_203\":2594,\"_780\":2595},{\"_111\":1336,\"_113\":2575,\"_2576\":2577,\"_2578\":2579},{\"_111\":144,\"_152\":2573,\"_154\":2574},\"By leveraging Logto's password sign-in options, you can not only improve your security posture, but also enhance your users' experience and improve overall productivity.\",\"Is password and passwordless an either or thing?\",\"Logto offers the option for both password-based sign-in and passwordless sign-in simultaneously. This means that users can easily switch between the two methods during the sign-in process, providing flexibility and convenience for accessing the product.\",\"While passwords are not perfect, Logto puts in significant effort to find a balanced approach.\",\"card_1\",{\"_11\":2585,\"_207\":2586},\"card_2\",{\"_11\":2580,\"_207\":2581},\"Frictionless and boost user acquisition\",[2582,2583,2584],\"User flow got passed thorough real-user test\",\"Autofill supported\",\"Able to work with other authentication method\",\"Protect password breaches\",[2587,2588,2589],\"Audit log realtime monitor\",\"Argon2 algorithm\",\"Password recovery flow\",\"Logto safely supported password scenarios\",\"Logto offers various password scenarios, itâs scalable, safe and flexible.\",{\"_11\":2607,\"_207\":2608,\"_13\":2609},{\"_11\":2603,\"_207\":2604,\"_13\":2605},{\"_11\":2598,\"_207\":2599,\"_13\":2600},{\"_11\":2596,\"_13\":2597},\"Forgot and reset password\",\"Logto provides a secure end-to-end solution. So forgot password flow is necessary.\",\"Phone number with password\",[2467,2601,2602],\"Options include choosing verification code/password order and enabling password sign-in without a password during sign-up.\",\"Verify phone number during account creation\",\"Users can choose using password or passwordless\",\"Email with password\",[2467,2606,2602],\"Logto offers both password and passwordless configuration to balance convenience and safety.\",\"Verify email addresses during account creation\",\"Custom password policy\",[2610,2611],\"We ensure compliance with regulations for our password requirements and take extra measures to protect passwords through our encrypted algorithm.\",\"Compliance with \u003cnist\u003eNIST 800-63B\u003c/nist\u003e\",\"Customize security level\",\"The password sign-in still remains vital\",\"If we provide a secure and modern user experience, users should be able to enjoy the convenience and flexibility of password authentication.\",\"card_title_1\",\"Password is still there\",\"card_description_1\",\"The global password management market size was valued at $2.05 billion in 2022 \u0026 is projected to grow from $2.35 billion in 2023 to USD 7.13 billion by 2030.\",\"card_title_2\",\"Conventional and friendly\",\"card_description_2\",\"The password is flexible and widely accepted, functioning without phone or email requirements for signing in. It offers convenience and can be secured at varying levels.\",\"card_title_3\",\"Carbon footprint-friendly\",\"card_description_3\",\"Password sign-in is carbon footprint-friendly because it requires less hardware and resources, reducing the environmental impact associated with energy consumption.\",\"The real pay-as-you-go pricing you've expected\",\"Logto provides competitive plan options with transparent and affordable pricing designed for growing companies.\",\"monthly_price\",\"${{price}}/mo\",\"monthly_price_from\",\"From ${{price}}/mo\",\"start_building\",\"Start building\",\"best_value\",\"Best Value\",\"per_month\",\"per month\",\"unlimited_note\",\"* \\\"Unlimited\\\" refers to features without a fixed limit, but is subject to system policies to ensure fair usage, security, and optimal performance.\",\"free\",{\"_11\":3034,\"_113\":3035,\"_3014\":3036},\"pro\",{\"_11\":3018,\"_113\":3019,\"_3014\":3020,\"_3021\":3022,\"_3023\":3024},\"enterprise\",{\"_11\":3012,\"_113\":3013,\"_3014\":3015},{\"_111\":144,\"_145\":2993},\"try_today\",{\"_111\":2992},\"comparing_features\",{\"_111\":2651,\"_2652\":2653,\"_2654\":2655,\"_2656\":2657,\"_2658\":2659,\"_2660\":2661,\"_2662\":2663,\"_2664\":2665,\"_1059\":2666,\"_1061\":266
1787,\"_1077\":2668,\"_1186\":2669,\"_2670\":2671,\"_2672\":2673,\"_2674\":2675,\"_2676\":2677},\"Comparing features\",\"common\",{\"_2985\":2986,\"_2987\":2988,\"_90\":2989,\"_1401\":1402,\"_2990\":2991},\"plans\",{\"_2640\":2969,\"_2642\":2970},\"basics\",{\"_11\":2954,\"_2955\":2956,\"_2957\":2958,\"_2959\":2960},\"applications\",{\"_11\":2935,\"_2936\":2937,\"_2938\":2939,\"_2940\":2941,\"_2942\":2943},\"api_resources\",{\"_11\":2924,\"_2925\":2926,\"_2927\":2928},\"ui_and_branding\",{\"_11\":2897,\"_2898\":2899,\"_2900\":2901,\"_2902\":2903,\"_2904\":2905,\"_2906\":2907,\"_2908\":2909,\"_2910\":2911},\"user_authentication\",{\"_11\":2849,\"_2850\":2851,\"_2852\":2853,\"_1045\":2854,\"_2855\":2856,\"_2857\":2858,\"_2859\":2860,\"_2861\":2862,\"_2863\":2864,\"_2865\":2866,\"_1085\":2867,\"_1075\":2868,\"_2869\":2870,\"_2871\":2872},{\"_11\":2835,\"_1059\":2836,\"_2837\":2838,\"_2839\":2840,\"_2841\":2842},{\"_11\":2825,\"_2747\":2826,\"_2827\":2828,\"_2829\":2830},{\"_11\":2796,\"_2747\":2797,\"_2798\":2799,\"_2800\":2801,\"_2802\":2803,\"_2804\":2805,\"_2806\":2807,\"_2808\":2809,\"_2810\":2811},{\"_11\":2768,\"_2769\":2770,\"_2771\":2772,\"_2773\":2774,\"_2775\":2776,\"_2777\":2778,\"_2779\":2780,\"_2781\":2782,\"_2783\":2784},\"advanced_security_bundle\",{\"_11\":2746,\"_2747\":2748,\"_2749\":2750,\"_2751\":2752,\"_2753\":2754,\"_2755\":2756,\"_2757\":2758},\"developers_and_platform\",{\"_11\":2725,\"_2726\":2727,\"_2728\":2729,\"_2730\":2731,\"_2732\":2733},\"support\",{\"_11\":2691,\"_2692\":2693,\"_2694\":2695,\"_2696\":2697,\"_2698\":2699,\"_2700\":2701,\"_2702\":2703,\"_2704\":2705,\"_2706\":2707},\"compliance\",{\"_11\":2678,\"_2679\":2680,\"_683\":2681,\"_2682\":2683},\"Compliance\",\"standards_privacy\",{\"_2684\":2689,\"_13\":2690},{\"_2684\":2687,\"_13\":2688},\"hipaa\",{\"_2684\":2685,\"_13\":2686},\"name\",\"HIPAA/BAA\",\"Complying with HIPPA/BAA\",\"SOC 2 report\",\"Provides SOC 2 compliance reports\",\"Standards \u0026 Privacy compliant\",\"Complying with legal, and security standards (e.g., SOC 2) to protect user data and privacy\",\"Support\",\"community_chat\",{\"_2684\":2723,\"_13\":2724},\"private_channel\",{\"_2684\":2721,\"_13\":2722},\"email_ticket\",{\"_2684\":2717,\"_13\":2718,\"_2719\":2720},\"premium_support\",{\"_2684\":837,\"_13\":2716},\"developer_onboarding\",{\"_2684\":2714,\"_13\":2715},\"solution_engineer\",{\"_2684\":2712,\"_13\":2713},\"sla\",{\"_2684\":2710,\"_13\":2711},\"private_cloud\",{\"_2684\":2708,\"_13\":2709},\"Private Cloud\",\"Your own dedicated Logto instance, designed to meet your specific security, compliance, and performance needs.\",\"SLA\",\"Defines service standards and response times between you and Logto\",\"Solution engineer\",\"A dedicated engineer to suggest architecture and tech design\",\"Developer onboarding\",\"Logto team works directly with your own developers for quick migration and onboarding\",\"Faster, prioritized assistance for urgent issues\",\"Email ticket support\",\"Directly reach out Logto service team with email communication\",\"response_time\",\"â (48h)\",\"Discord or Slack private channel\",\"Directly reach out Logto service team with a private space\",\"Community chat support\",\"Ask questions and share ideas with others in Discord\",\"Developers and platform\",\"webhooks\",{\"_2684\":2744,\"_13\":2745},\"audit_log\",{\"_2684\":2742,\"_13\":2743},\"custom_token_claims\",{\"_2684\":2740,\"_13\":2741},\"tenant_members\",{\"_2684\":2734,\"_13\":2735,\"_2736\":2737,\"_2738\":2739},\"Tenant members\",\"Number of collaborators who can access and manage the Logto cloud console.\",\"included\",\"1 included\",\"extra_info\",\"$8 each extra\",\"Custom token claims\",\"Allow to add personalized data to a user and machine-to-machine authentication token\",\"Audit log retention\",\"How long user authentication actions are stored for issue resolution, security, and compliance needs\",\"Webhooks\",\"Send real-time data to another system when an event happens\",\"Advanced security bundle\",\"bundleDescription\",\"A bundled add-on with all advanced security features\",\"captcha_and_bot_protection\",{\"_2684\":2766,\"_13\":2767}
178,\"identifier_lockout\",{\"_2684\":2764,\"_13\":2765},\"block_disposable_email\",{\"_2684\":2762,\"_13\":2763},\"block_sub_email_addresses\",{\"_2684\":2760,\"_13\":2761},\"email_blocklist\",{\"_2684\":1221,\"_13\":2759},\"Block users based on specific attributes or domains\",\"Block sub-email addresses\",\"Prevent the use of \\\"+\\\" email addresses\",\"Block disposable email addresses\",\"Block log in attempts from known disposable email services\",\"Identifier lockout (brute-force protection)\",\"Limit login attempts to prevent brute-force attacks\",\"Captcha and bot protection\",\"Provide all kinds of Captcha providers to ensure only real users can sign up\",\"Foundational security\",\"suspend_users\",{\"_2684\":1217,\"_13\":2795},\"invitation_only_sign_up\",{\"_2684\":1219,\"_13\":2794},\"security_verification\",{\"_2684\":2792,\"_13\":2793},\"password_policy\",{\"_2684\":2790,\"_13\":2791},\"rotate_signing_key\",{\"_2684\":2788,\"_13\":2789},\"oidc_back_channel_logout\",{\"_2684\":1205,\"_13\":2787},\"csrf_protection\",{\"_2684\":1203,\"_13\":2786},\"dos_protection\",{\"_2684\":1201,\"_13\":2785},\"Use Cloudflare \u0026 Azure firewall protection, flexible computing resources to prevent flood attacks, application layer attacks, etc.\",\"Use OIDC with âstateâ checks, PKCE, and CORS to prevent CSRF attacks.\",\"Seamless and secure logout across all connected apps\",\"Rotate signing key\",\"Prevents key leaks and token tampering\",\"Password policy\",\"Custom requirements for passwords\",\"Security verification\",\"Allow the app to require step-up authentication for sensitive actions\",\"Restrict users can sign up only by invitation\",\"Suspend users to block their logins\",\"Organizations\",\"A bundled add-on that includes all the organization features\",\"organization\",{\"_2684\":2823,\"_13\":2824},\"users_per_organization\",{\"_2684\":2821,\"_13\":2822},\"invitation\",{\"_2684\":2819,\"_13\":2820},\"organization_roles\",{\"_2684\":2817,\"_13\":2818},\"organization_permissions\",{\"_2684\":2086,\"_13\":2816},\"organization_mfa\",{\"_2684\":2814,\"_13\":2815},\"jit_provisioning\",{\"_2684\":2812,\"_13\":2813},\"JIT provisioning\",\"Assign memberships and roles to users when they first sign in\",\"Organization-level M
178FA\",\"Require all members of an organization to enable MFA\",\"Define customized permissions under organizations\",\"Organization roles\",\"Define customized roles that only apply within an organization, separate from the tenant-wide roles in the RBAC add-on\",\"Invitation (Management API)\",\"Invite members to join the organization themselves\",\"Users per organization\",\"The amount of users under each organization\",\"Organization count\",\"An organization is a group of users. Usually used in multi-tenancy apps\",\"RBAC (Role-based access control)\",\"A bundled add-on that includes all the role-based access control features. These roles apply across the whole tenant and your API resources. For roles scoped to a single organization, see Organizations below.\",\"user_roles\",{\"_2684\":2833,\"_13\":2834},\"m2m_roles\",{\"_2684\":2831,\"_13\":2832},\"Machine-to-machine roles\",\"Define machine-to-machine type roles and manage access to your system\",\"User roles\",\"Define user roles and manage access to your system\",\"User management\",{\"_2684\":2835,\"_13\":2848},\"account_api\",{\"_2684\":2846,\"_13\":2847},\"out_of_box_account_center\",{\"_2684\":2844,\"_13\":2845},\"collect_user_profile\",{\"_2684\":2378,\"_13\":2843},\"Customize sign-up fields to collect additional user information and custom data\",\"Out-of-the-box account center\",\"Quickly integrate out-of-the-box verification and security settings flows with prebuilt UI\",\"Account API\",\"Build a fully custom account center with APIs end users can access directly\",\"Manage user authentication, authorization, and attributes directly\",\"User authentication\",\"omni_sign_in\",{\"_2684\":2895,\"_13\":2896},\"password_sign_in\",{\"_2684\":2893,\"_13\":2894},{\"_2684\":2891,\"_13\":2892},\"email_magic_link\",{\"_2684\":2889,\"_13\":2890},\"passkey\",{\"_2684\":2533,\"_13\":2888,\"_1401\":1402},\"email_connector\",{\"_2684\":2886,\"_13\":2887},\"sms_connector\",{\"_2684\":2884,\"_13\":2885},\"social_connectors\",{\"_2684\":2882,\"_13\":2883},\"enterprise_sso\",{\"_2684\":2375,\"_13\":2880,\"_2738\":2881},{\"_2684\":2878,\"_13\":2879},{\"_2684\":864,\"_13\":2877},\"impersonation\",{\"_2684\":2875,\"_13\":2876},\"personal_access_token\",{\"_2684\":2873,\"_13\":2874},\"Personal access token\",\"Secure token-based access, no credentials required\",\"Impersonation\",\"Act on behalf of another user identity\",\"Passkeys, authenticator app TOTP, SMS, email and backup codes\",\"Secret Vault\",\"Store access and refresh tokens from OAuth/OIDC providers for third-party API access\",\"Enterprise customers log in with their own identity provider, supporting SAML and OIDC\",\"Each connector\",\"Social connectors\",\"Log in through popular social accounts, Google, Github etc\",\"SMS connector\",\"Including SMS services, API Gateway\",\"Email connector\",\"Including pre-built email services, SMTP, HTTPS\",\"Passkey as the first authentication factor\",\"Email magic links\",\"Magic links for organization member invitation, user invitation, or sign-in\",\"Passwordless - Email and SMS\",\"Log in with a one-time code sent via email or SMS\",\"Password sign-in\",\"Log in with a secret password, and the password policy is configurable\",\"Omni sign-in\",\"Multi-app and cross-domain sign in\",\"UI and branding\",\"custom_domain\",{\"_2684\":2922,\"_13\":2923},\"hide_logto_branding\",{\"_2684\":2920,\"_13\":2921},\"custom_css\",{\"_2684\":2918,\"_13\":2919},\"bring_your_ui\",{\"_2684\":2916,\"_13\":2917},\"app_logo\",{\"_2684\":2914,\"_13\":2915},\"dark_mode\",{\"_2684\":2218,\"_13\":2913},\"internationalization\",{\"_2684\":2101,\"_13\":2912},\"Make your product easily adapted to different languages and regions\",\"Enable or disable the dark mode of the sign-in UI\",\"App logo and favicon\",\"Customize the app logo and favicon\",\"Bring your UI\",\"Use and upload your own sign-in UI\",\"Custom CSS\",\"User-defined code that modifies the style and appearance of pre-built Logto sign-in UI\",\"Hide Logto branding\",\"Remove \\\"Powered by Logto\\\" to spotlight your brand exclusively\",\"Custom domains\",\"Use your own unique domains. Supports multiple custom domains.\",\"API resources\",\"resource_count\",{\"_2684\":2931,\"_13\":2932,\"_2736\":2933,\"_2738\":2934},\"permission_per_resource\",{\"_2684\":2929,\"_13\":2930},\"Permission per resource\",\"The detailed permissions defined under API resources\",\"Resource count\",\"The number of API resources registered in Logto\",\"3 included\",\"$4 each extra\",\"Applications\",\"total_applications\",{\"_2684\":2952,\"_13\":2953},\"m2m_apps\",{\"_2684\":2950,\"_13\":2951,\"_2736\":2737,\"_2738\":2739},\"third_party_apps\",{\"_2684\":2947,\"_13\":2948,\"_2738\":2949},\"saml_apps\",{\"_2684\":2944,\"_13\":2945,\"_2738\":2946}
178,\"SAML apps\",\"Logto as a SAML identity provider\",\"Each SAML app\",\"OIDC/OAuth 3rd party apps\",\"OAuth authorization with a consent screen\",\"Each third-party app\",\"Machine-to-machine apps\",\"The application type for M2M authentication\",\"Total applications\",\"The total amount of applications needed for integration\",\"Basics\",\"base_price\",{\"_2684\":2967,\"_13\":2968},\"mau\",{\"_2684\":2965,\"_13\":2966},\"tokens\",{\"_2684\":2961,\"_13\":2962,\"_2736\":2963,\"_2738\":2964},\"Tokens\",\"Only access tokens are counted. Learn what tokens are and how they relate to MAU\",\"100K included\",\"$0.08 per 100 extra\",\"MAU\",\"Maximum number of active users allowed in Logto Cloud platform in a given period (month)\",\"Base price\",\"The standard cost before extra token usage and add-ons\",{\"_2957\":2982,\"_2959\":2983,\"_2728\":2984},{\"_2959\":2971,\"_2938\":2972,\"_2925\":2973,\"_2865\":2974,\"_1075\":2975,\"_2728\":2976,\"_2898\":2977},{\"_2978\":2981,\"_2738\":2964},{\"_2978\":2737,\"_2738\":2739},{\"_2978\":2933,\"_2738\":2934},{\"_2738\":2881},{\"_2738\":2980},\"14 days\",{\"_2978\":2737,\"_2738\":2979},\"content\",\"$48 for up to 10 domains\",\"All factors\",\"50K included\",\"Up to 50K\",\"50K\",\"3 days\",\"unlimited\",\"Unlimited*\",\"expanded\",\"Expanded\",\"Contact\",\"add_on\",\"Add-on\",\"Try Logto today and unlock a great deal!\",[2994,2995,2996,2997,2998,2999],{\"_152\":3010,\"_154\":3011},{\"_152\":3008,\"_154\":3009},{\"_152\":3006,\"_154\":3007},{\"_152\":3004,\"_154\":3005},{\"_152\":3002,\"_154\":3003},{\"_152\":3000,\"_154\":3001},\"What happens if I decide to stop using Logto?\",\"We regret to hear that you have chosen to discontinue using Logto. Before proceeding, please consider the following options:\u003cul\u003e\u003cli\u003eSafely migrate your critical data and resources to an alternative platform or storage solution.\u003c/li\u003e\u003cli\u003eDelete any unnecessary data and the tenant associated with your account.\u003c/li\u003e\u003c/ul\u003eFeel free to reach out to us for expert assistance during this process.\",\"How is my bill calculated if I downgrade?\",\"\u003cp\u003eWhen considering a downgrade to a lower-tier plan, it's important to ensure that you meet certain criteria before making the switch. Once you meet these criteria, you can proceed with the downgrade.\u003c/p\u003e\u003cp\u003eIt's worth noting that both downgrades and upgrades take immediate effect. Your quota will be immediately shifted to the Free plan quota. Your base price will be adjusted proportionately, and any refunds owed to you will be deducted from your current bill.\u003c/p\u003e\",\"Is it possible for me to downgrade to Free plan?\",\"Absolutely! You have the flexibility to manage your plan on your own. However, it's important to note that each plan offers different features and quotas. Prior to downgrading, ensure that you meet the criteria of the lower-tier plan. Once you meet the eligibility requirements, you can proceed with the downgrade. Please be aware that your current billing cycle ends instantly, and it will start a new billing cycle under the new plan.\",\"How can I upgrade to Pro plan?\",\"Within the Logto Cloud Console, you will come across multiple prompts and options suggesting an upgrade if we detect your desire for a higher quota or access to premium features. You can easily navigate to \\\"Settings\\\" and select \\\"Your plan and billing\\\" to choose a suitable plan and proceed with the checkout process.\",\"Should I use organization feature or create multiple Logto tenant?\",\"Logtoâs organization feature is designed for multi-tenant applications.\u003cul\u003e\u003cli\u003eIf you need one universal user pool, where a single identity can access multiple organizations, use the organization feature.\u003c/li\u003e\u003cli\u003eIf you have multiple clients, each requiring a separate user pool, create a Logto tenant for each.\u003c/li\u003e\u003c/ul\u003eOur pricing is based on each Logto tenant. Each Logto tenant starts at $24 + add-ons.\\nMore details: \u003cmore\u003eLogto Pricing \u0026 Billing\u003c/more\u003e\",\"What are tokens and how are they related to MAU?\",\"\u003cp\u003eLogto adopts token-based authentication following the OAuth 2.0 and OpenID Connect standards. Each authentication or authorization request results in Logto issu
178ing tokens that represent the userâs authentication or authorization status â such as access tokens, ID tokens, and refresh tokens.\u003c/p\u003e\u003cp\u003eFor billing purposes, only access tokens are counted (ID tokens and refresh tokens are excluded).\u003c/p\u003e\u003cbr/\u003e\u003csubtitle\u003eAn access token is issued and counted in the following scenarios:\u003c/subtitle\u003e\u003cul\u003e\u003cli\u003eUser sign-in: After a user successfully signs in, an opaque access token is issued. This token can be used to call the UserInfo endpoint or Logto Account API for account management.\u003c/li\u003e\u003cli\u003eBackend API authorization (RBAC): When Role-Based Access Control (RBAC) is enabled to protect your backend APIs, a JWT access token is issued for each resource-specific authorization request following the userâs initial authentication.\u003c/li\u003e\u003cli\u003eOrganization authorization: If the organization feature is enabled, Logto provides organization-level access control by issuing organization access tokens. A separate organization access token is generated for each organization-specific authorization request.\u003c/li\u003e\u003cli\u003eMachine-to-Machine (M2M) authorization: An access token is issued for each client_credentials authorization request (e.g., when accessing the Logto Management API).\u003c/li\u003e\u003cli\u003eToken exchanges: A new access token is issued during personal access token exchanges or user impersonation token exchanges.\u003c/li\u003e\u003cli\u003eRefresh token usage: If offline_access is enabled, a new access token is issued each time a valid refresh token is exchanged after the previous token expires.\u003c/li\u003e\u003c/ul\u003e\u003cbr/\u003e\u003csubtitle\u003eToken vs. MAU and why token-based billing is better\u003c/subtitle\u003e\u003cp\u003eMAU-based billing charges per unique user per month, regardless of activity. Token-based billing instead charges by actual usage: every time an access token is issued.\u003c/p\u003e\u003cp\u003eToken-based billing represents true pay-as-you-go pricing. Unlike MAU-based models that charge for the entire month regardless of usage, you only pay for actual authentication and authorization activities. This approach is budget-friendly for low-frequency users who only access your product occasionally, as they generate fewer tokens, resulting in lower costs compared to flat MAU pricing. This makes Logto more cost-effective than competitors, especially for applications with varied engagement patterns.\u003c/p\u003e\u003cp\u003eFor example, one sign-in may consume 1 access token. Using features like M2M or Organizations can generate additional tokens. To keep track, Logto provides real-time token usage monitoring in Console \u0026gt; Dashboard, which helps you better understand the relationship between MAU and tokens for your specific project.\u003c/p\u003e\",\"Enterprise\",\"For large teams and businesses with enterprise-grade requirements.\",\"features\",[830,828,3016,3017,837,824],\"Logto Private Cloud\",\"Service-level agreement (SLA)\",\"Pro\",\"For production and teams.\",[3029,3030,3031,3032,3033],\"add_on_features\",[3025,3026,3027,2375,3028],\"add_on_title\",\"Add-ons, billed separately\",\"RBAC\",\"Organizations (Multi-tenancy)\",\"MFA\",\"SAML \u0026 third-party apps\",\"50K free tokens, then billed by usage\",\"Unlimited MAU and total applications\",\"Custom claims and user impersonation\",\"Passkey sign-in and collect user profile\",\"Bring your UI and hide Logto branding\",\"Free\",\"For starting out and trying Logto, no credit card required.\",[3037,3038,2849,3039,3040,3041],\"Up to 50,000 MAU\",\"50K tokens\",\"Machine-to-machine app\",\"Account APIs for account settings\",\"Audit logs and user management\",{\"_4021\":4022,\"_4023\":4024,\"_4025\":4026,\"_3223\":4027,\"_4028\":4029,\"_4030\":4031,\"_4032\":4033,\"_4034\":4035,\"_4036\":4037,\"_4038\":4039,\"_4040\":4041,\"_4042\":4043,\"_4044\":2639,\"_4045\":4046,\"_4047\":144,\"_4048\":4049},\"auth0\",{\"_120\":3907,\"_122\":3908,\"_111\":3909,\"_3060\":3910,\"_3062\":3911,\"_3064\":3912,\"_3066\":3913,\"_3068\":3914,\"_3070\":3915,\"_340\":3072,\"_3073\":3916,\"_3075\":3917,\"_3077\":3918,\"_3079\":3919},\"clerk\",{\"_120\":3784,\"_122\":3785,\"_111\":3786,\"_3060\":3787,\"_3062\":3788,\"_3064\":3789,\"_3066\":3790,\"_3068\":3791,\"_3070\":3792,\"_340\":3072,\"_3073\":3793,\"_3075\":3794,\"_3077\":3795,\"_3079\":3796},\"firebase\",{\"_120\":3627,\"_122\":3628,\"_111\":3629,\"_3060\":3630,\"_3062\":3631,\"_3064\":3632,\"_3066\":3633,\"_3068\":3634,\"_3070\":3635,\"_340\":3072,\"_3073\":3636,\"_3075\":3637,\"_3077\":3638,\"_3079\":3639},\"stytch\",{\"_120\":3494,\"_122\":3495,\"_111\":3496,\"_3060\":3497,\"_3062\":3498,\"_3064\":3499,\"_3066\":3500,\"_3068\":3501,\"_3070\":3502,\"_340\":3072,\"_3073\":3503,\"_3075\":3504,\"_3077\":3505,\"_3079\":3506},\"azure-ad-b2c\",{\"_120\":3374,\"_122\":3375,\"_111\":3376,\"_3060\":3377,\"_3062\":3378,\"_3064\":3379,\"_3066\":3380,\"_3068\":3381,\"_3070\":3382,\"_340\":3072,\"_3073\":3383,\"_3075\":3384,\"_3077\":3385,\"_3079\":3386},\"aws-cognito\",{\"_120\":3242,\"_122\":3243,\"_111\":3244,\"_3060\":3245,\"_3062\":3246,\"_3064\":3247,\"_3066\":3248,\"_3068\":3249,\"_3070\":3250,\"_340\":3251,\"_3073\":3252,\"_3075\":3253,\"_3077\":3254,\"_3079\":3255},\"workos\",{\"_120\":3057,\"_122\":3058,\"_111\":3059,\"_3060\":3061,\"_3062\":3063,\"_3064\":3065,\"_3066\":3067,\"_3068\":3069,\"_3070\":3071,\"_340\":3072,\"_3073\":3074,\"_3075\":3076,\"_3077\":3078,\"_3079\":3080},\"WorkOS AuthKit Alternative: Complete B2B + B2C Auth | Logto\",\"Compare Logto with WorkOS AuthKit for B2C and B2B authentication. Logto offers enterprise SSO at $48 per connector per month, an open-source core, self-hosting, and four
178cloud data regions.\",\"WorkOS AuthKit alternative with lower SSO costs and an open-source core\",\"hero\",[3237],\"switch_reasons_intro\",[3235],\"switch_reasons\",[3218,3219,3220,3221,3222],\"differentiators\",[3209,3210,3211],\"fit\",{\"_3177\":3178,\"_3179\":3180},\"table_title\",\"WorkOS vs. Logto: Head-to-head comparison\",\"Based on publicly available information as of July 2026. Please verify with the respective vendor for the latest details.\",\"table_groups\",[3111],\"migration\",{\"_11\":3096,\"_3097\":3098,\"_108\":3099},\"faqs\",[3081,3082,3083,3084,3085],\"disclaimer\",\"WorkOS and AuthKit are trademarks of WorkOS, Inc. Feature comparisons are based on publicly available information as of July 2026. Please verify with the respective vendor for the latest details.\",{\"_152\":3094,\"_154\":3095},{\"_152\":3092,\"_154\":3093},{\"_152\":3090,\"_154\":3091},{\"_152\":3088,\"_154\":3089},{\"_152\":3086,\"_154\":3087},\"Can WorkOS AuthKit be self-hosted?\",\"WorkOS documents support for customer applications deployed on-premises, but those applications still communicate with WorkOS APIs. Air-gapped applications need a separate authentication path. WorkOS does not publicly document a self-hosted AuthKit or User Management backend. Logto supports self-hosting for its open-source authentication platform.\",\"What is the best WorkOS alternative?\",\"Logto fits teams that want B2C and B2B authentication with an open-source backend, regional cloud choices, self-hosting, and lower per-connector SSO pricing. WorkOS fits teams that want to add Enterprise SSO and Directory Sync to an existing authentication system or prefer WorkOS's managed enterprise integration suite. Auth0 and Stytch are other common options.\",\"Is WorkOS open source?\",\"WorkOS publishes AuthKit frontend examples, SDKs, and an OpenAPI specification. Its hosted User Management and authentication backend is proprietary. No self-hosted AuthKit backend is publicly documented. Public user API responses omit password hashes, with no documented export endpoint. Logto publishes its core authentication platform, backend, and sign-in UI under an open-source license. Logto Cloud uses the same core with added managed services.\",\"Is WorkOS AuthKit really free?\",\"AuthKit is free for up to 1M MAUs per
178calendar month. It includes email and password, social OAuth, and Magic Auth. MFA and passkeys are included too. A production Custom Domain add-on for hosted AuthKit costs $99 per month. Enterprise SSO starts at $125 per production connection per month for 1â15 connections. Directory Sync is billed separately at the same published tiers. SIEM streaming costs $125 per SIEM connection per month. For usage above 1M MAUs, WorkOS lists $2,500 per month for each additional 1M MAUs.\",\"What is the difference between WorkOS and AuthKit?\",\"AuthKit is WorkOS's authentication product. It covers hosted and custom sign-in, user management, and sessions. It also includes organizations, roles, MFA, and OAuth or OIDC flows. WorkOS offers standalone Enterprise SSO, Directory Sync, and Audit Logs APIs for products that keep an existing authentication system. Some enterprise features are priced per production connection.\",\"Migrating from WorkOS\",\"paragraphs\",[3100,3101,3102],\"Read the user migration guide â\",[3105,3106,3107],[3104],[3103],\"If hashes are unavailable, password users need a reset or a staged migration. Social and passwordless accounts avoid password-hash migration, but users may still need to sign in again or relink an identity. Test account matching and session cutover before launch. Contact us if you want help reviewing the plan.\",\"WorkOS exposes paginated APIs for users and organizations. Map compatible records into Logto with scripts that call the Management API. User creation is one record at a time and rate-limited. Plan separate work for memberships and roles, linked identities and MFA factors, plus SSO and Directory Sync settings.\",\"WorkOS documents how to import password hashes into AuthKit. Public Get User and List Users responses omit hashes, and \",{\"_106\":3108,\"_3109\":3110},\". Confirm available export options with WorkOS before finalizing the migration plan.\",\"no password-hash export endpoint is publicly documented\",\"isStrong\",true,{\"_11\":3112,\"_3113\":3114},\"Key differences\",\"rows\",[3115,3116,3117,3118,3119,3120,3121,3122,3123,3124],{\"_3125\":3172,\"_13\":3173,\"_3128\":3174},{\"_3125\":3167,\"_13\":3168,\"_3128\":3169},{\"_3125\":3162,\"_13\":3163,\"_3128\":3164},{\"_3125\":3157,\"_13\":3158,\"_3128\":3159},{\"_3125\":3152,\"_13\":3153,\"_3128\":3154},{\"_3125\":3147,\"_13\":3148,\"_3128\":3149},{\"_3125\":3142,\"_13\":3143,\"_3128\":3144},{\"_3125\":3137,\"_13\":3138,\"_3128\":3139},{\"_3125\":3132,\"_13\":3133,\"_3128\":3134},{\"_3125\":3126,\"_13\":3127,\"_3128\":3129},\"feature\",\"Deployment and data residency\",\"Where the authentication service can run\",\"values\",[3130,3131],\"Cloud tenant data regions in EU, US, AU, and JP; Private Cloud; self-hosted\",\"Public materials describe US-based hosting; on-prem customer apps still call WorkOS APIs\",\"Backend self-hosting\",\"Run the user store and authentication service on your infrastructure\",[3135,3136],\"Supported with the open-source platform\",\"No publicly documented self-hosted AuthKit or User Management backend\",\"Open source\",\"What source is public and what can run on your infrastructure\",[3140,3141],\"Core auth platform, backend, and sign-in UI; Cloud adds managed services\",\"Frontend examples, SDKs, and OpenAPI are public; hosted backend is proprietary\",\"Sign-in UI control\",\"Branding, wording, and languages of the sign-in experience\",[3145,3146],\"Editable translations; 15 built-in languages plus 113 additional language tags; Bring Your UI\",\"Hosted UI in about 90 locales with custom copy and CSS; custom frontends through APIs\",\"B2B multi-tenancy\",\"Model business customers as organizations with roles\",[3150,3151],\"Organizations with roles, per-organization SSO, and JIT provisioning\",\"Organizations, roles, and JIT included; SSO and Directory Sync priced per production connection\",\"Pricing model\",\"How the plans are billed\",[3155,3156],\"Pro starts at $24 per month; no fixed MAU limit; access-token usage and add-ons apply\",\"Up to 1M MAUs free; $2,500 per additional 1M; enterprise products priced separately\",\"Enterprise SSO pricing\",\"The cost of each enterprise identity provider connection\",[3160,3161],\"$48 per connector per month on Pro\",\"Starts at $125 per production connection per month for 1â15\",\"Custom domain\",\"Serving hosted sign-in from your own domain\",[3165,3166],\"One included on Free and Pro\",\"Hosted AuthKit add-on: $99 per month\",\"Free tier\",\"What the free plan includes\",[3170,3171],\"Up to 50K MAU and 50K access tokens per month; one custom domain\",\"Up to 1M MAUs; organizations, roles, MFA, and passkeys included\",\"Authentication scope\",\"Consumer, business, and enterprise authentication\",[3175,3176],\"B2C and B2B authentication in one tenant\",\"AuthKit platform plus standalone enterprise APIs\",\"switch_items\",[3193,3194,3195,3196],\"stay_items\",[3181,3182,3183],[3190,3191],[3187,3188],[3184,3185],{\"_106\":3186,\"_3109\":3110},\" WorkOS pairs Directory Sync with an Admin Portal that lets customer IT teams configure enterprise connections.\",\"Directory Sync and customer-led setup are central to your product.\",{\"_106\":3189,\"_3109\":3110},\" AuthKit includes core authentication for up to 1M monthly active users. Organizations, roles, MFA, and passkeys are included. It can cost less when the default authkit.app domain meets your needs and production enterprise connections are not required.\",\"Your app fits within the AuthKit free allowance.\",{\"_106\":3192,\"_3109\":3110},\" WorkOS standalone Enterprise SSO and Directory Sync APIs connect to an existing authentication system without replacing it.\",\"You already have authentication and only need enterprise connectors.\",[3206,3207],[3203,3204],[3200,3201],[3197,3198],{\"_106\":3199,\"_3109\":3110},\" Logto includes one custom domain on Free and Pro. A production Custom Domain add-on for hosted AuthKit costs $99 per month.\",\"You want a hosted custom domain without a separate fee.\",{\"_106\":3202,\"_3109\":3110},\" Logto Cloud offers tenant data regions in Europe, West US, Australia, and Jap
178an. Private Cloud and self-hosting provide more control over deployment location.\",\"A managed data region outside the United States is required.\",{\"_106\":3205,\"_3109\":3110},\" Logto publishes its core platform source and supports self-hosting. WorkOS on-prem guidance still requires customer applications to communicate with WorkOS APIs.\",\"Backend self-hosting is a requirement.\",{\"_106\":3208,\"_3109\":3110},\" Ten Logto Enterprise SSO connectors add $480 per month. With the $24 Pro base price, a tenant starts at $504 before token overages or other add-ons. Ten WorkOS Enterprise SSO connections cost $1,250 at the published 1â15 rate.\",\"The cost of each enterprise SSO connector matters.\",{\"_11\":3216,\"_13\":3217},{\"_11\":3214,\"_13\":3215},{\"_11\":3212,\"_13\":3213},\"Managed and self-hosted options from the same core\",\"The managed service uses the same open-source authentication core available for self-hosting. Choose Europe, West US, Australia, or Japan as the tenant data region. Private Cloud provides a dedicated Azure deployment, with target-region availability confirmed case by case. Self-hosting keeps the service on your infrastructure.\",\"Enterprise pricing you can model before the deal\",\"Pro starts at $24 per month and has no fixed MAU limit, subject to fair-use policies. It includes 50K access tokens per month and one custom domain. Enterprise SSO costs $48 per connector per month. MFA and Organizations are separate $48-per-tenant monthly add-ons. Token overages and other add-ons still affect the bill.\",\"One model for personal accounts and organizations\",\"Logto supports passwords, passkeys, social sign-in, and MFA for personal accounts. The same tenant can also include organizations, organization roles, per-organization enterprise SSO, and just-in-time provisioning. Account-level API roles and organization roles can coexist in one authorization model.\",{\"_3223\":3233,\"_3225\":3234},{\"_3223\":3231,\"_3225\":3232},{\"_3223\":3229,\"_3225\":3230},{\"_3223\":3227,\"_3225\":3228},{\"_3223\":3224,\"_3225\":3226},\"motivation\",\"The hosted authentication backend is proprietary\",\"detail\",\"WorkOS publishes AuthKit frontend examples, SDKs, and an OpenAPI specification. Its User Management and authentication backend is proprietary, and no self-hosted AuthKit backend is publicly documented. Public user API responses omit password hashes, with no documented export endpoint. Logto publishes its core authentication platform, backend, and sign-in UI under an open-source license. Logto Cloud uses the same core with added managed services.\",\"Public materials describe a US-based hosted service\",\"WorkOS on-prem guidance covers customer applications that still communicate with WorkOS APIs. Air-gapped applications need a separate authentication path. Logto Cloud offers tenant data regions in Europe, West US, Australia, and Jap
178an. Logto Private Cloud provides a dedicated Azure deployment, with target-region availability confirmed case by case. Self-hosting keeps the service on your infrastructure.\",\"Different boundaries for hosting and control\",\"AuthKit covers core authentication flows, session controls, and native OAuth or PKCE flows. WorkOS manages its user store and authentication service. Logto covers B2C and B2B authentication through an open-source core that can run in Logto Cloud, Private Cloud, or your own environment.\",\"Enterprise costs rise with each connection\",\"Enterprise SSO starts at $125 per production connection per month for 1â15 connections. Directory Sync uses the same published tiers and is billed separately. At the entry tier, one SSO connection plus one Directory Sync connection costs $250 per month. WorkOS lowers the rate as volume rises, reaching $50 per connection for 101â200. Logto Enterprise SSO is a $48-per-connector monthly add-on on Pro.\",\"A large free MAU allowance with paid production add-ons\",\"AuthKit includes email and password, social OAuth, and Magic Auth for up to 1M monthly active users. MFA and passkeys are included too. A production Custom Domain add-on for hosted AuthKit costs $99 per month. Enterprise SSO, Directory Sync, and SIEM streaming are priced separately, so a team can start paying for production and enterprise requirements before its usage exceeds the MAU allowance.\",[3236],\"WorkOS started with standalone Enterprise SSO and Directory Sync APIs, then launched AuthKit in November 2023. AuthKit is now a full authentication platform. It supports hosted or custom sign-in, user management, organizations, and roles. It also includes MFA, passkeys, and session controls. The differences are in pricing, deployment, and control. WorkOS charges separately for production enterprise connections, its public materials describe a US-based hosted service, and its User Management backend is not publicly documented as a self-hosted product.\",[3238,3239,3240],\"WorkOS AuthKit and Logto both cover consumer sign-in, organizations, and enterprise SSO. Logto adds \",{\"_106\":3241,\"_3109\":3110},\".\",\"enterprise SSO at $48 per connector per month, a choice of cloud data region, an open-source core, and self-hosting\",\"AWS Cognito Alternative: 50K MAU Free, B2B Built In | Logto\",\"Logto is an AWS Cognito alternative with multi-tenant organizations, enterprise SSO, and 50K MAU free. Reconfigure auth anytime, without a user pool rebuild.\",\"AWS Cognito alternative: For teams who've outgrown do-it-yourself auth\",[3370],[3368],[3353,3354,3355,3356,3357],[3344,3345,3346],{\"_3177\":3318,\"_3179\":3319},\"AWS Cognito vs. Logto: Head-to-head comparison\",\"Based on publicly available information as of July 2026; Cognito prices are US East (N. Virginia). Please verify with the respective vendor for the latest details.\",[3279],{\"_11\":3268,\"_3097\":3269,\"_108\":3099},[3256,3257,3258,3259],\"AWS, Amazon Cognito, and Amazon Web Services are trademarks of Amazon.com, Inc. or its affiliates. Feature comparisons are based on publicly available information as of July 2026. Please verify with the respective vendor for the latest details.\",{\"_152\":3266,\"_154\":3267},{\"_152\":3264,\"_154\":3265},{\"_152\":3262,\"_154\":3263},{\"_152\":3260,\"_154\":3261},\"What is the best AWS Cognito alternative?\",\"It depends on why you're leaving. If your apps need temporary AWS credentials for services like S3, Cognito identity pools remain the native path. If you want built-in B2B organizations, enterprise SSO without per-user federation fees, and pricing that doesn't change underneath you, Logto is a strong choice. Auth0, Firebase Auth, and Keycloak are also commonly evaluated.\",\"Does AWS Cognito support B2B multi-tenancy?\",\"Not as a built-in feature. AWS documents multi-tenancy patterns you implement yourself: a user pool per tenant, an app client per tenant, or groups within one pool. Each has documented trade-offs, from high development and operations effort to users signing up separately for each tenant. Logto models this directly with organizations: each business customer gets its own members, roles, and enterprise SSO connection.\",\"What changed in AWS Cognito pricing?\",\"Three changes in two years. May 2024: AWS introduced per-token billing for machine-to-machine auth, with a 12-month exemption for existing accounts that ended in May 2025. November 2024: Cognito was restructured into Lite, Essentials, and Plus tiers, the free tier for new accounts dropped from 50,000 to 10,000 MAU, and new user pools default to Essentials at $0.015 per MAU. November 2025: AWS removed the per-app-client M2M fee while keeping per-token charges.\",\"Is AWS Cognito free?\",\"Partly. Accounts created after November 22, 2024 get 10,000 MAU free per month on the Lite or Essentials tier; older accounts keep 50,000 free MAU on Lite. The Plus tier has no free allowance. Machine-to-machine token requests are always billed, users federated through SAML or OIDC are free only up to 50 MAU, and SMS messages are billed separately through Amazon SNS.\",\"Migrating from AWS Cognito: What to expect\",[3270,3271,3272],[3275,3276,3277],[3274],[3273],\"For password users, plan either a one-time reset or a staged rollout. The right approach depen
178ds on your user base, so tell us about your setup and we'll help you plan the cutover.\",\"Everything else moves cleanly. Export user profiles through the Cognito APIs and bulk-import them with Logto's Management API. Users who sign in with social providers or passwordless methods won't notice the switch at all.\",\"Here's the honest part: Cognito doesn't let you export password hashes, so no vendor can promise a bulk migration where every existing password silently keeps working. \",{\"_106\":3278,\"_3109\":3110},\": its own bulk import makes users reset their password on first sign-in.\",\"Cognito itself doesn't accept imported hashes either\",{\"_11\":3112,\"_3113\":3280},[3281,3282,3283,3284,3285,3286,3287],{\"_3125\":3167,\"_13\":3168,\"_3128\":3315},{\"_3125\":3310,\"_13\":3311,\"_3128\":3312},{\"_3125\":3306,\"_13\":3148,\"_3128\":3307},{\"_3125\":3157,\"_13\":3302,\"_3128\":3303},{\"_3125\":3297,\"_13\":3298,\"_3128\":3299},{\"_3125\":3142,\"_13\":3293,\"_3128\":3294},{\"_3125\":3288,\"_13\":3289,\"_3128\":3290},\"Deployment options\",\"Where the auth service can run\",[3291,3292],\"Cloud, private cloud, or self-hosted\",\"AWS-hosted only\",\"Branding, wording, and languages of the hosted pages\",[3295,3296],\"Custom phrases in any language; bring your own UI\",\"Colors and logo only; text not editable; 12 languages (Essentials and up)\",\"Identity schema changes\",\"Adjusting sign-in identifiers and attributes later\",[3300,3301],\"Reconfigurable anytime; schemaless custom data\",\"Sign-in identifiers, case sensitivity, and custom attributes locked at creation\",\"Users signing in through SAML or OIDC federation\",[3304,3305],\"Connectors configured in the console; MAU-based plans\",\"50 federated MAU free, then $0.015 per user on every tier\",\"B2B / multi-tenancy\",[3308,3309],\"Unlimited*; organizations with roles and per-org SSO\",\"No built-in organization model; DIY pool or group patterns\",\"Machine-to-machine auth\",\"Service-to-service tokens via client credentials\",[3313,3314],\"Included; only access tokens count toward billing\",\"No free allowance; every token request billed, from $0.00225\",[3316,3317],\"Up to 50K MAU and 50K tokens\",\"10K MAU on Lite and Essentials; no free tier on Plus\",[3328,3329,3330,3331],[3320,3321],[3325,3326],[3322,3323],{\"_106\":3324,\"_3109\":3110},\" Accounts from before November 2024 keep a 50,000 MAU free tier on Lite. If built-in flows cover your needs and your pool was configured right the first time, Cognito remains the cheap default inside AWS. For what it's worth, Logto's free plan also covers 50K MAU.\",\"You're grandfathered and the basics are enough.\",{\"_106\":3327,\"_3109\":3110},\" Cognito identity pools hand clients temporary IAM credentials for direct access to services like S3 and DynamoDB. That capability is native to AWS, and a third-party CIAM won't replace it.\",\"Your apps need AWS credentials.\",[3341,3342],[3338,3339],[3335,3336],[3332,3333],{\"_106\":3334,\"_3109\":3110},\" Logto lets you edit every phrase, add languages beyond the built-in set with 113 language tags, or replace the whole experience with your own UI.\",\"Your sign-in page needs your words and your languages.\",{\"_106\":3337,\"_3109\":3110},\" Cognito bills every M2M token request with no free allowance, from $0.00225 each (US East). Logto's free plan includes 50K tokens a month, and only access tokens count toward billing.\",\"Machine-to-machine traffic is real money for you.\",{\"_106\":3340,\"_3109\":3110},\" Organizations, per-organization enterprise SSO, and just-in-time provisioning are product features in Logto, not architecture patterns you assemble and operate yourself.\",\"You're building B2B SaaS.\",{\"_106\":3343,\"_3109\":3110},\" Cognito's free tier for new accounts is 10,000 MAU. Logto's free plan covers up to 50K MAU, and development tenants include every premium feature free of charge.\",\"You're starting a new project.\",{\"_11\":3351,\"_13\":3352},{\"_11\":3349,\"_13\":3350},{\"_11\":3347,\"_13\":3348},\"Pricing that holds still, and an exit that stays open\",\"Logto's free plan covers 50K MAU and 50K tokens a month, machine-to-machine included, and Pro is $24 per month with unlimited MAU. Rate limits are per tenant, and raising them for a growing workload is a conversation with support, not a capacity purchase. Logto Cloud is a fully managed service, and it runs the same codebase as Logto's open-source version (13k+ GitHub stars). If the pricing or the roadmap ever stops working for you, you can self-host and keep going.\",\"Multi-tenant B2B out of the box\",\"Logto organizations give each business customer its own members, roles, and enterprise SSO connection, with just-in-time provisioning when their users first sign in. What Cognito's best-practices guide leaves you to assemble from pools, app clients, and groups is a first-class product surface in Logto.\",\"Auth that stays reconfigurable\",\"Logto doesn't lock your identity schema at setup. Sign-in identifiers are settings you change in the console, and user profiles carry schemaless custom data. When requirements shift from email-only to phone or passkeys, you flip the configuration; you don't rebuild the tenant and migrate every user.\",{\"_3223\":3366,\"_3225\":3367},{\"_3223\":3364,\"_3225\":3365},{\"_3223\":3362,\"_3225\":3363},{\"_3223\":3360,\"_3225\":3361},{\"_3223\":3358,\"_3225\":3359},\"The sign-in page isn't really yours\",\"Managed login gives you a visual editor for colors and logos, but AW
178S is explicit: you can't modify or localize the text, and only 12 built-in languages exist. The Lite tier is limited to the older classic hosted UI, which supports a logo and a fixed set of CSS values, with no localization at all. And a custom domain requires a certificate in US East (N. Virginia), wherever your users live.\",\"B2B is a do-it-yourself project\",\"Cognito has no organization model. The official multi-tenancy guidance offers patterns to assemble yourself from user pools, app clients, or groups, and concedes that with pool-per-tenant \\\"the development and operation effort\\\" is high and \\\"each user must sign up individually for each tenant\\\". On top of that, every enterprise user signing in through SAML or OIDC costs $0.015 per month after the first 50, on every tier.\",\"One rate-limit pool for your whole account\",\"Cognito request quotas apply per AWS account per region, shared across every user pool you run, so a sign-in spike in one product can throttle all of them. Raising the adjustable categories means buying provisioned capacity on top of MAU pricing. Others are fixed: password recovery is capped at 30 requests per second and machine-to-machine token issuance at 150, no matter what you pay.\",\"Settings you can never change\",\"In Cognito, sign-in identifiers, username case sensitivity, and required attributes are locked when a user pool is created, and custom attributes can never be modified or deleted. Get one wrong and the official remedy is blunt: \\\"migrate your users to a new user pool\\\". Auth requirements evolve; your pool configuration can't.\",\"Pricing that keeps moving\",\"In May 2024, AWS introduced billing for machine-to-machine auth that had been free; existing accounts got a 12-month exemption, and those bills arrived in May 2025. In November 2024, new tiers cut the free allowance for new accounts from 50,000 to 10,000 MAU, and new user pools now default to Essentials at $0.015 per MAU, nearly three times the Lite rate. In November 2025, AWS dropped the per-app-client M2M fee but kept charging for every token request. Each change was announced. None of them asked.\",[3369],\"Cognito earned its place in the AWS stack: it lives next to your infrastructure, identity pools can hand your apps temporary AWS credentials, and the Lite tier stays cheap at scale. But auth rarely stays a checkbox. When sign-up requirements change, when business customers arrive, or when the bill changes shape again, teams realize they're maintaining a toolkit instead of shipping a product. That's usually when they start comparing.\",[3371,3372,3240],\"Looking for an AWS Cognito alternative? Logto gives you multi-tenant organizations, enterprise SSO, and a sign-in experience you fully control \",{\"_106\":3373,\"_3109\":3110},\"without Lambda glue code or a new user pool every time requirements change\",\"Azure AD B2C Alternative: Migrate on Your Terms with Logto\",\"Azure AD B2C is closed to new customers. Logto is a CIAM alternative with enterprise SSO, multi-tenant organizations, no XML policies, and 50K MAU free.\",\"Azure AD B2C alternative: For teams planning their next move\",[3490],[3488],[3476,3477,3478,3479],[3468,3469,3470],{\"_3177\":3442,\"_3179\":3443},\"Azure AD B2C vs. Logto: Head-to-head comparison\",[3408],{\"_11\":3399,\"_3097\":3400,\"_108\":3099},[3387,3388,3389,3390],\"Microsoft, Azure, and Microsoft Entra are trademarks of the Microsoft group of companies. Feature comparisons are based on publicly available information as of July 2026. Please verify with the respective vendor for the latest details.\",{\"_152\":3397,\"_154\":3398},{\"_152\":3395,\"_154\":3396},{\"_152\":3393,\"_154\":3394},{\"_152\":3391,\"_154\":3392},\"What is the best Azure AD B2C alternative?\",\"Microsoft's own successor is Entra External ID, which makes sense for teams deeply invested in the Microsoft ecosystem. If you want multi-tenant B2B features, enterprise SSO without custom policies, and the option to self-host instead of betting on another proprietary lifecycle, Logto is a strong choice. Auth0 and other CIAM vendors are also worth evaluating.\",\"Do I have to migrate off Azure AD B2C?\",\"Not immediately. Existing tenants are supported until at least May 2030, and Microsoft's stated commitments for B2C cover security, availability, and reliability. New feature work happens in Entra External ID. Since moving there is itself a migration project, many teams treat this as the moment to evaluate the whole CIAM market rather than default to the in-family upgrade.\",\"What is the difference between Azure AD B2C and Microsoft Entra External ID?\",\"They are separate products, and Microsoft states that Exter
178nal ID is not a new name for Azure AD B2C. External ID is Microsoft's next-generation CIAM platform, and its migration guidance points existing B2C customers there. It does not support XML custom policies; Microsoft has promised a migration path for existing custom policies, but it has not shipped as of July 2026.\",\"Is Azure AD B2C deprecated?\",\"Microsoft doesn't use the word \\\"deprecated\\\", but effective May 1, 2025, Azure AD B2C is no longer available to purchase for new customers, and the Premium P2 tier was discontinued on March 15, 2026. Microsoft states it will continue supporting existing tenants until at least May 2030.\",\"Migrating from Azure AD B2C: What to expect\",[3401,3402,3403],[3405,3406,3240],[3404],[3273],\"Everything else moves cleanly. Export user profiles through the Microsoft Graph API and bulk-import them with Logto's Management API. Users who sign in with social providers or passwordless methods won't notice the switch at all.\",\"Here's the honest part: Azure AD B2C doesn't let you export password hashes, so no vendor can promise a bulk migration where every existing password silently keeps working. \",{\"_106\":3407,\"_3109\":3110},\"Microsoft's own External ID guidance works around the same constraint\",{\"_11\":3112,\"_3113\":3409},[3410,3411,3412,3413,3414,3415,3416],{\"_3125\":3437,\"_13\":3438,\"_3128\":3439},{\"_3125\":3432,\"_13\":3433,\"_3128\":3434},{\"_3125\":2375,\"_13\":3428,\"_3128\":3429},{\"_3125\":3306,\"_13\":3148,\"_3128\":3426},{\"_3125\":3421,\"_13\":3422,\"_3128\":3423},{\"_3125\":3288,\"_13\":3289,\"_3128\":3419},{\"_3125\":3167,\"_13\":3168,\"_3128\":3417},[3316,3418],\"First 50K MAU free\",[3291,3420],\"Microsoft-hosted only\",\"SPA sessions\",\"Keeping single-page app users signed in\",[3424,3425],\"Rotating refresh tokens with configurable lifetime\",\"SPA refresh tokens capped at 24 hours\",[3308,3427],\"No built-in organization model\",\"Enterprise customers sign in with their own identity provider\",[3430,3431],\"SAML and OIDC connectors configured in the console\",\"SAML federation requires custom policies\",\"Advanced customization\",\"How you go beyond the built-in sign-in flows\",[3435,3436],\"Console and APIs; custom JWT claims and webhooks\",\"XML custom policies (Identity Experience Framework)\",\"Product lifecycle\",\"Whether the product is open to new customers and actively developed\",[3440,3441],\"Actively developed; one product line\",\"Closed to new customers since May 2025; new features land in a separate product\",[3452,3453,3454,3455],[3444,3445],[3449,3450],[3446,3447],{\"_106\":3448,\"_3109\":3110},\" If your workforce runs on Microsoft Entra ID and your compliance story is built on Azure, moving to Entra External ID keeps you inside one vendor relationship, and simple user-flow setups migrate with the least friction.\",\"You're all-in on Microsoft.\",{\"_106\":3451,\"_3109\":3110},\" If built-in user flows cover your needs, B2C remains effectively free and supported until at least May 2030. There's no forced action today. For what it's worth, Logto's free plan also covers 50K MAU.\",\"You run on user flows and stay under 50K MAU.\",[3465,3466],[3462,3463],[3459,3460],[3456,3457],{\"_106\":3458,\"_3109\":3110},\" Use the managed cloud today, and keep the option to self-host the same open-source codebase tomorrow.\",\"You never want to be stranded by a deprecation again.\",{\"_106\":3461,\"_3109\":3110},\" The flows you hand-built in policy XML, like branded sign-in, MFA rules, and custom claims, are product features in Logto.\",\"You're done with the Identity Experience Framework.\",{\"_106\":3464,\"_3109\":3110},\" Onboarding each customer's IdP is console configuration in Logto: per-organization SAML or OIDC connections with just-in-time provisioning, no XML.\",\"Your enterprise SSO list keeps growing.\",{\"_106\":3467,\"_3109\":3110},\" You can't buy Azure AD B2C anymore, so you're comparing successors either way. Logto's free plan covers up to 50K MAU, and development tenants include every premium feature free of charge.\",\"You're starting a new CIAM project.\",{\"_11\":3474,\"_13\":3475},{\"_11\":3349,\"_13\":3473},{\"_11\":3471,\"_13\":3472},\"A platform you can't be stranded on\",\"You've seen what happens when a proprietary identity platform reaches end of sale. Logto Cloud is a fully managed service, and it runs the same codebase as Logto's open-source version (13k+ GitHub stars). If the economics or the roadmap ever stop working for you, you can self-host and keep going. No permission needed.\",\"Logto organizations give each business customer its own members, roles, and enterprise SSO connection, with just-in-time provisioning when their users first sign in. What B2C leaves you to model by hand with custom attributes is a first-class product surface in Logto.\",\"Configuration instead of XML engineering\",\"Sign-in experience, MFA, passkeys, and enterprise SSO are configured in the Logto Console or through the Management API. Branding, custom JWT claims, and webhooks cover the scenarios teams used to hand-build in policy XML. Changes take a toggle or an API call, not a policy upload and an Application Insights session.\",{\"_3223\":3486,\"_3225\":3487},{\"_3223\":3484,\"_3225\":3485},{\"_3223\":3482,\"_3225\":3483},{\"_3223\":3480,\"_3225\":3481},\"Enterprise SSO means hand-editing XML\",\"In B2C, federating a SAML i
178dentity provider is available only through custom policies. Every enterprise customer you onboard means hand-written claims-provider XML, certificate uploads, and metadata exchanged by hand. There is no self-service portal and no per-customer SSO model to lean on.\",\"Custom policies are a dead end\",\"Advanced B2C scenarios live in the Identity Experience Framework: multiple XML files referencing each other in an inheritance chain, no local debugging, and troubleshooting through Application Insights logs. Microsoft's own FAQ concedes that customers found custom policies \\\"too hard to build and manage\\\". That expertise doesn't transfer anywhere.\",\"The upgrade path is not a drop-in replacement\",\"Entra External ID drops XML custom policies entirely, and identity providers configured through custom policies are not supported in a direct migration. Moving there means a new tenant, do-it-yourself user migration scripts against the Graph API, and an app-by-app cutover. If that's the price of the default upgrade, it makes sense to evaluate the whole market instead.\",\"A product in wind-down mode\",\"Since May 1, 2025, Azure AD B2C is no longer available to new customers, and the Premium P2 tier was discontinued on March 15, 2026. Microsoft commits to supporting existing tenants \\\"until at least May 2030\\\". That leaves time to plan, but every new feature you build on B2C deepens your investment in a platform Microsoft itself has moved past.\",[3489],\"Azure AD B2C earned its place: a generous free tier, the Azure compliance umbrella, and a 99.99% SLA. But Microsoft has closed it to new customers and now points CIAM projects to Microsoft Entra External ID, a next-generation platform that doesn't run the custom policies teams spent years building. When we talk to teams leaving B2C, the story is rarely one bug. It's a platform that stopped moving while their product kept growing.\",[3491,3492,3240],\"Looking for an Azure AD B2C alternative? Logto gives you enterprise SSO, multi-tenant organizations, and MFA \",{\"_106\":3493,\"_3109\":3110},\"without XML custom policies or a rebuild on someone else's timeline\",\"Stytch Alternative: Unify B2C and B2B Auth with Logto\",\"Logto is a Stytch alternative that unifies B2C and B2B auth in one project: modular enterprise SSO, self-hosting when you need it, no forced re-architecture.\",\"Stytch alternative: One auth platform for both B2C and B2B\",[3623],[3621],[3606,3607,3608,3609,3610],[3597,3598,3599],{\"_3177\":3571,\"_3179\":3572},\"Stytch vs. Logto: Head-to-head comparison\",[3535],{\"_11\":3525,\"_3097\":3526,\"_108\":3099},[3507,3508,3509,3510,3511,3512],\"Stytch is a trademark of its respective owner. Feature comparisons are based on publicly available information as of July 2026. Please verify with the respective vendor for the latest details.\",{\"_152\":3523,\"_154\":3524},{\"_152\":3521,\"_154\":3522},{\"_152\":3519,\"_154\":3520},{\"_152\":3517,\"_154\":3518},{\"_152\":3515,\"_154\":3516},{\"_152\":3513,\"_154\":3514},\"What does the Twilio acquisition mean for Stytch customers?\",\"Twilio's acquisition of Stytch closed in November 2025, and the product now runs as Stytch by Twilio with a stated focus on AI agent identity and Twilio's communication channels. Stytch said there were no immediate changes to contracts or pricing at the time. The long-term direction is an open question, which is why some teams now weigh vendor independence in their evaluation.\",\"Is Logto open-source?\",\"Yes. Logto Cloud is a fully managed service, and it runs the same MPL-2.0 open-source codebase (13k+ GitHub stars). Start on the cloud and self-host later if your requirements change, or the other way around.\",\"Can I start with consumer auth and add B2B later on Logto?\",\"Yes. Logto uses one identity model for both. Enable organizations on your existing project when you need multi-tenancy, and your users keep their accounts while joining organizations with organization-scoped roles and permissions. No SDK swap or user migration required.\",\"Does Logto support passwordless sign-in like Stytch?\",\"Yes. Logto supp
178orts passkeys (WebAuthn) as both a first factor and an MFA method, one-time codes over email and SMS, and magic links, alongside social and enterprise SSO. Switching away from Stytch does not mean giving up passwordless.\",\"How does Logto pricing compare to Stytch at scale?\",\"Stytch's free tier covers 10K MAU; Logto's covers 50K. Beyond that, Stytch bills MAU, M2M tokens, and SSO or SCIM connections separately, with connections at $125 each per month after the first five. Logto bills by tokens issued, with enterprise SSO at $48 per connection. For a B2B app with dozens of enterprise customers, the connection fees usually dominate the difference.\",\"What is the best Stytch alternative?\",\"It depends on what pushed you to look. If the B2C/B2B split, per-connection SSO fees, or the Twilio acquisition are the concern, Logto gives you one platform for both models with modular pricing and the option to self-host. If you mainly need enterprise SSO glue for an existing app, WorkOS is worth a look. Auth0 remains the incumbent with the largest integration catalog.\",\"Migrating from Stytch\",[3527,3528,3529],[3534],[3531,3532,3240],[3530],\"Because Logto follows standard OIDC, your application code moves to thin, standards-based SDKs rather than another proprietary integration.\",\"For password users, Logto imports hashes directly in Bcrypt, Argon2, MD5, SHA1, SHA256, and PBKDF2, plus a legacy option for any other format Node.js supports, so switching \",{\"_106\":3533,\"_3109\":3110},\"doesn't force a mass password reset\",\"Stytch leans passwordless, and that works in your favor during a migration. Users who sign in with one-time codes, magic links, or social accounts have no credentials to move: import their profiles through the Management API and they keep signing in the same way.\",{\"_11\":3112,\"_3113\":3536},[3537,3538,3539,3540,3541,3542,3543],{\"_3125\":3566,\"_13\":3567,\"_3128\":3568},{\"_3125\":3157,\"_13\":3158,\"_3128\":3563},{\"_3125\":3152,\"_13\":3153,\"_3128\":3560},{\"_3125\":3555,\"_13\":3556,\"_3128\":3557},{\"_3125\":3137,\"_13\":3551,\"_3128\":3552},{\"_3125\":3288,\"_13\":3289,\"_3128\":3549},{\"_3125\":3544,\"_13\":3545,\"_3128\":3546},\"Vendor independence\",\"Who sets the product direction\",[3547,3548],\"Independent company\",\"Part of Twilio since November 2025\",[3291,3550],\"Cloud only\",\"The source code is publicly available and auditable\",[3553,3554],\"Open-source core; 13k+ GitHub stars\",\"Closed source, proprietary SaaS\",\"Authorization\",\"Roles and permissions beyond sign-in\",[3558,3559],\"RBAC at user and organization level; custom token claims\",\"Organization-scoped RBAC on the B2B product\",[3561,3562],\"Token-based; free up to 50K MAU\",\"Pay as you go; MAU, connections, and M2M metered separately\",[3564,3565],\"$48 per connection, modular add-on\",\"5 included, then $125 per connection monthly\",\"B2C and B2B architecture\",\"How consumer and multi-tenant auth fit together\",[3569,3570],\"One project; organizations are a built-in feature\",\"Separate Consumer and B2B products, APIs, and SDKs\",[3581,3582,3583,3584],[3573,3574],[3578,3579],[3575,3576],{\"_106\":3577,\"_3109\":3110},\" Stytch's device fingerprinting is a genuine strength, with bot detection and account-takeover protection wired into the auth flow. Logto covers CAPTCHA and identifier lockout, but fingerprint-based fraud scoring is not part of the product.\",\"You need built-in fraud and bot detection.\",{\"_106\":3580,\"_3109\":3110},\" If your product already leans on Twilio for SMS, voice, or email, Stytch by Twilio will likely integrate with those channels more deeply over time.\",\"You are betting on the Twilio ecosystem.\",[3594,3595],[3591,3592],[3588,3589],[3585,3586],{\"_106\":3587,\"_3109\":3110},\" Token-based billing with flat add-ons replaces Stytch's parallel meters for MAU, connections, and M2M tokens.\",\"You want one predictable bill.\",{\"_106\":3590,\"_3109\":3110}
178,\" Logto Cloud runs in the EU, US, Australia, and Japan. Private Cloud gives you a dedicated instance in the region of your choice, and self-hosting is always on the table.\",\"You need self-hosting or data residency.\",{\"_106\":3593,\"_3109\":3110},\" Enterprise SSO at $48 per connection instead of $125 changes the margin math on every mid-market deal.\",\"You are onboarding enterprise customers at volume.\",{\"_106\":3596,\"_3109\":3110},\" You want personal accounts and multi-tenant organizations in one system, without picking a data model on day one or migrating between two products later.\",\"Your product blurs the B2C/B2B line.\",{\"_11\":3604,\"_13\":3605},{\"_11\":3602,\"_13\":3603},{\"_11\":3600,\"_13\":3601},\"Enterprise features without the fee cliff\",\"Enterprise SSO on Logto is a modular add-on at $48 per connection, not $125. MFA, organizations, and advanced security are flat monthly add-ons on top of token-based billing: one usage meter instead of three. And the free plan covers 50K MAU, five times what Stytch includes.\",\"A managed cloud with a built-in exit strategy\",\"Logto Cloud is a fully managed service, and it runs the same open-source codebase you can inspect on GitHub (13k+ stars, MPL-2.0). Strict OAuth 2.1, OIDC, and SAML compliance keeps your integration portable. If your requirements ever change, you can self-host the exact same platform.\",\"One project for B2C and B2B\",\"Logto uses a single identity model. Start with email, social, or passwordless sign-in for c
178onsumers, then enable organizations when your first enterprise deal lands. Same project, same APIs, same SDKs. Users keep their personal accounts and can join any number of organizations, with roles and permissions handled natively at both the user and organization level.\",{\"_3223\":3619,\"_3225\":3620},{\"_3223\":3617,\"_3225\":3618},{\"_3223\":3615,\"_3225\":3616},{\"_3223\":3613,\"_3225\":3614},{\"_3223\":3611,\"_3225\":3612},\"Gaps as you move upmarket\",\"Stytch's RBAC is organization-scoped, with no attribute-based policies. Built-in B2B MFA accepts only SMS and authenticator app TOTP as second factors, so passkeys can't serve as a step-up method, and adaptive MFA depends on the paid device fingerprinting product. None of these block you on day one, but teams report more glue code as enterprise requirements stack up.\",\"Cloud-only, closed source\",\"Stytch does not offer a self-hosted option, and there is no open-source version of the platform. For products with data sovereignty requirements, or software that ships to customer infrastructure, that is a hard blocker rather than an inconvenience.\",\"The Twilio acquisition\",\"Twilio acquired Stytch in November 2025, and the product now runs as Stytch by Twilio with a stated focus on AI agent identity and Twilio's communication channels. The service keeps operating, but its roadmap is set inside a much larger company. For teams making a multi-year identity bet, analysts have already drawn the parallel to Auth0 after the Okta acquisition.\",\"Per-connection enterprise fees\",\"The pay-as-you-go plan includes 5 SSO or SCIM connections, then charges $125 per connection per month. Onboard 50 enterprise customers that each need SSO and SCIM, and connection fees alone reach $11,875 a month. MAU, M2M tokens, and connections are all metered separately, which makes cost forecasting harder as you grow.\",\"The B2C/B2B split\",\"Stytch makes you pick a Consumer or B2B data model when you create a project. Each has
178its own APIs and SDKs, and the two can't be combined. If you start B2C and add team features later, Stytch's own guide describes the move as a formal migration: remap every user to a member and exchange active sessions along the way.\",[3622],\"Stytch built its reputation on clean APIs and a strong passwordless feature set. But passwordless is table stakes now: passkeys, one-time codes, and magic links all ship with Logto too. The real friction sits elsewhere: in how the product is split, how enterprise features are priced, and who has owned the roadmap since late 2025.\",[3624,3625,3240],\"Looking for a Stytch alternative? Logto runs consumer and B2B auth in the same project, so you can add organizations and enterprise SSO \",{\"_106\":3626,\"_3109\":3110},\"without migrating your auth stack midway\",\"Firebase Auth Alternative: Go from B2C to B2B with Logto\",\"Logto is a Firebase Auth alternative with enterprise SSO, multi-tenant organizations, RBAC, and EU data residency. Move from B2C to B2B without a rebuild.\",\"Firebase Auth alternative: For apps going from B2C to B2B\",[3780],[3778],[3766,3767,3768,3769],[3757,3758,3759],{\"_3177\":3731,\"_3179\":3732},\"Firebase Auth vs. Logto: Head-to-head comparison\",[3662,3663],{\"_11\":3652,\"_3097\":3653,\"_108\":3099},[3640,3641,3642,3643],\"Firebase is a registered trademark of Google LLC. Feature comparisons are based on publicly available information as of July 2026. Please verify with the respective vendor for the latest details.\",{\"_152\":3650,\"_154\":3651},{\"_152\":3648,\"_154\":3649},{\"_152\":3646,\"_154\":3647},{\"_152\":3644,\"_154\":3645},\"Can I self-host Firebase Auth?\",\"No. Firebase Auth is a proprietary managed service tightly coupled with Google Cloud. Logto, by contrast, is open-source and can be self-hosted on any infrastructure.\",\"Where does Firebase Auth store user data?\",\"As of July 2026, Firebase Auth stores user data exclusively in the United States. If you require EU data residency for GDPR compliance, consider an alternative like Logto that offers EU cloud regions or self-hosting.\",\"Does Firebase Auth support SAML or enterprise SSO?\",\"Not in its base version. You must upgrade to Firebase Auth with Identity Platform to access SAML and multi-tenancy, which changes the pricing structure and still lacks native RBAC and organization management.\",\"What is the best Firebase Auth alternative?\",\"If you are staying entirely within the Google ecosystem for a simple B2C app, you may not need an alternative at all. But if you are building a B2B SaaS, need EU data residency, or want the freedom to self-host, Logto is a strong choice. Depending on your needs, Supabase Auth and WorkOS are also worth evaluating.\",\"Migrating from Firebase: Handling the scrypt challenge\",[3654,3655,3656],[3661],[3660],[3657,3658,3240],\"For password users, Firebase's custom hash needs specific handling. Export your Firebase password hash parameters and reach out to our team, and we'll guide you through importing your users securely \",{\"_106\":3659,\"_3109\":3110},\"without forcing a mass password reset\",\"Migration is still entirely possible. Logto supports bulk-importing users via the Management API with a wide range of standard hash algorithms, and users signing in through social or passwordless methods migrate cleanly with no extra work.\",\"Migrating from Firebase Auth is notoriously tricky because Firebase stores passwords with a customized version of the scrypt hashing algorithm.\",{\"_11\":3694,\"_3113\":3695},{\"_11\":3664,\"_3113\":3665},\"Platform and deployment\",[3666,3667,3668,3669,3670,3671],{\"_3125\":3689,\"_13\":3690,\"_3128\":3691},{\"_3125\":2678,\"_13\":3685,\"_3128\":3686},{\"_3125\":3137,\"_13\":3551,\"_3128\":3683},{\"_3125\":3678,\"_13\":3679,\"_3128\":3680},{\"_3125\":3167,\"_13\":3168,\"_3128\":3676},{\"_3125\":3152,\"_13\":3672,\"_3128\":3673},\"How the paid plans are billed\",[3674,3675],\"Token-based; pay for actual auth activity\",\"MAU-based with Identity Platform\",[3316,3677],\"Up to 50K MAU (Spark plan)\",\"Self-hosting\",\"Run the auth service on your own infrastru
178cture\",[3681,3682],\"â\",\"-\",[3553,3684],\"Proprietary Google service\",\"Certifications and agreements for regulated industries\",[3687,3688],\"SOC 2 Type II; HIPAA/BAA available on Enterprise\",\"SOC 1/2/3; HIPAA BAA only via Identity Platform\",\"Data residency\",\"Where user identity data is stored\",[3692,3693],\"EU, US, AU, and JP regions; private cloud or self-hosting anywhere\",\"US only\",\"B2B and enterprise readiness\",[3696,3697,3698,3699,3700,3701,3702],{\"_3125\":3726,\"_13\":3727,\"_3128\":3728},{\"_3125\":2375,\"_13\":3722,\"_3128\":3723},{\"_3125\":3717,\"_13\":3718,\"_3128\":3719},{\"_3125\":866,\"_13\":3713,\"_3128\":3714},{\"_3125\":864,\"_13\":2877,\"_3128\":3710},{\"_3125\":3705,\"_13\":3706,\"_3128\":3707},{\"_3125\":3310,\"_13\":2951,\"_3128\":3703},[3704,3682],\"1 included; $8 each extra\",\"Multi-app single sign-on\",\"Users sign in once and stay signed in across all your apps\",[3708,3709],\"Central session shared by every registered app\",\"Per-app client state; keychain sharing on Apple platforms only\",[3711,3712],\"$48; All factors\",\"SMS only; requires Identity Platform\",\"Define roles and manage access for users and machines\",[3715,3716],\"Unlimited*; $32 Global RBAC add-on\",\"Manual implementation in Firestore\",\"Multi-tenant organizations\",\"Model B2B customers as organizations with roles and permissions\",[3720,3721],\"Unlimited*; $48 Organizations add-on\",\"Multi-tenancy requires Identity Platform; no organization roles\",\"Enterprise customers log in with their own identity provider\",[3724,3725],\"$48; Each connector\",\"Requires Identity Platform upgrade\",\"Target audience\",\"The customer segments the product is designed to serve\",[3729,3730],\"B2C, B2B, and multi-tenant SaaS\",\"Primarily B2C\",[3741,3742,3743,3744],[3733,3734],[3738,3739],[3735,3736],{\"_106\":3737,\"_3109\":3110},\" If you never plan to offer multi-tenancy or enterprise login and your app is built entirely around the Firebase console, switching may not be worth the effort. For what it's worth, Logto's free plan matches the 50K MAU allowance.\",\"You have zero B2B requirements.\",{\"_106\":3740,\"_3109\":3110},\" If your app is built around Firestore, Cloud Functions, and Firebase Hosting, the native integration of Firebase Auth is hard to beat.\",\"You are building a simple B2C app on Google Cloud.\",[3754,3755],[3751,3752],[3748,3749],[3745,3746],{\"_106\":3747,\"_3109\":3110},\" Firebase auth state lives inside each app, and web sessions stick to a single domain. Logto gives every app you register, web or native, one central sign-in session.\",\"You run more than one app.\",{\"_106\":3750,\"_3109\":3110},\" Tired of maintaining two separate authentication systems for different user types? Logto handles both gracefully.\",\"You want to unify B2C and B2B.\",{\"_106\":3753,\"_3109\":3110},\" Logto's EU region, private cloud, or self-hosted deployment solves GDPR data residency immediately.\",\"You need EU data residency.\",{\"_106\":3756,\"_3109\":3110},\" Enterprise clients expect SAML SSO, organization management, and RBAC. Logto ships all of them out of the box.\",\"You are moving upmarket.\",{\"_11\":3764,\"_13\":3765},{\"_11\":3762,\"_13\":3763},{\"_11\":3760,\"_13\":3761},\"Open standards, no lock-in\",\"Logto is built on OAuth 2.1, OIDC, and SAML, and doesn't tie your identity layer to a specific database or cloud. The open-source core means you can always take authentication in-house.\",\"Global data residency\",\"Unlike Firebase Auth's US-only storage, Logto Cloud runs in the EU, US, Australia, and Jap
178an, with new public regions added as demand grows. Need a specific location? Logto Private Cloud gives you a dedicated instance in the region of your choice. You can also self-host on your own infrastructure.\",\"Native B2B capabilities\",\"Logto includes first-class support for multi-tenant organizations. Model complex B2B hierarchies, assign organization-level roles, and enforce enterprise SSO policies without writing custom database logic.\",{\"_3223\":3776,\"_3225\":3777},{\"_3223\":3774,\"_3225\":3775},{\"_3223\":3772,\"_3225\":3773},{\"_3223\":3770,\"_3225\":3771},\"Ecosystem lock-in\",\"Firebase Auth is deeply coupled with Google Cloud and Firestore. If you ever need to migrate your database or backend, untangling the authentication layer becomes a serious engineering project.\",\"The split architecture\",\"Teams often end up running Firebase Auth for B2C users, a second provider for B2B organizations, and sometimes a third product just for enterprise SSO. Each platform brings its own user store, SDK, and session logic. The whole setup gets harder to keep in sync with every release.\",\"Data residency and compliance\",\"For teams serving European clients, data residency is critical. Firebase Auth stores user data exclusively in the US, which can create significant GDPR compliance hurdles.\",\"The B2B feature gap\",\"As your app targets larger clients, they demand enterprise SSO (SAML/OIDC), role-based access control, and organization-level management. Firebase Auth lacks native RBAC and organization management, even with the Identity Platform upgrade, so you end up building workarounds in Firestore.\",[3779],\"Firebase Auth is fantastic for launching a weekend project or a simple B2C mobile app: it's fast, well documented, and tightly integrated with the Google ecosystem. But when we talk to teams migrating away, the story is almost always about hitting a wall when their business model matures.\",[3781,3782,3240],\"Looking for a Firebase Auth alternative? Logto helps you add enterprise SSO, multi-tenant organizations, and role-based access control \",{\"_106\":3783,\"_3109\":3110},\"without rebuilding your identity layer from scratch\",\"Clerk Alternative: Lightweight, Standards-Based Auth by Logto\",\"Logto is a Clerk alternative with lightweight SDKs and standards-compliant OIDC: a standalone managed auth service, with self-hosting when you need it.\",\"Clerk alternative: Lightweight auth built on open standards\",[3903],[3901],[3886,3887,3888,3889,3890],[3877,3878,3879],{\"_3177\":3852,\"_3179\":3853},\"Clerk vs. Logto: Head-to-head comparison\",[3818],{\"_11\":3808,\"_3097\":3809,\"_108\":3099},[3797,3798,3799,3800],\"Clerk is a registered trademark of Clerk, Inc. Feature comparisons are based on publicly available information as of July 2026. Please verify with the respective vendor for the latest details.\",{\"_152\":3806,\"_154\":3807},{\"_152\":3515,\"_154\":3805},{\"_152\":3803,\"_154\":3804},{\"_152\":3801,\"_154\":3802},\"Can I use Logto for B2B applications?\",\"Absolutely. Logto includes native support for multi-tenant organizations, role-based access control (RBAC), and Enterprise SSO (SAML/OIDC), making it well suited for complex B2B SaaS architectures.\",\"Does Logto support Next.js App Router?\",\"Yes. Logto provides SDKs and documentation for Next.js, including App Router support, without the heavy bundle size overhead.\",\"Yes. Logto Cloud is a fully managed service, and it runs the same codebase as Logto's open-source version (13k+ GitHub stars). You can start on the cloud and self-host later, or the other way around.\",\"What is the best Clerk alternative?\",\"If you want a similarly modern developer experience with more architectural control (standards-based SDKs, a standalone auth service, and the option to self-host), Logto is a top choice. Other alternatives include Supabase Auth (if you also need a Postgres backend) or Auth0 (for legacy enterprise integrations).\",\"Migrating from Clerk\",[3810,3811,3812],[3817],[3814,3815,3240],[3813],\"Once users are imported, swap Clerk's components for Logto's lightweight SDKs and take back control over your application's UI and performance.\",\"Logto imports password hashes in multiple algorithms (Bcrypt, Argon2, MD5, SHA1, SHA256, and PBKDF2, plus a legacy option for other Node.js-supported formats), so you can usually migrate your users \",{\"_106\":3816,\"_3109\":3110}
178,\"without forcing them to reset their passwords\",\"Migrating from Clerk to Logto is straightforward thanks to Logto's standards-based architecture. Export your user data from Clerk and import it into Logto with the Management API.\",{\"_11\":3112,\"_3113\":3819},[3820,3821,3822,3823,3824,3825,3826],{\"_3125\":3847,\"_13\":3848,\"_3128\":3849},{\"_3125\":3842,\"_13\":3843,\"_3128\":3844},{\"_3125\":3705,\"_13\":3706,\"_3128\":3840},{\"_3125\":3152,\"_13\":3153,\"_3128\":3838},{\"_3125\":3306,\"_13\":3834,\"_3128\":3835},{\"_3125\":3829,\"_13\":3830,\"_3128\":3831},{\"_3125\":3288,\"_13\":3289,\"_3128\":3827},[3828,3550],\"Managed cloud, private cloud, or self-hosted\",\"Machine-to-machine (M2M)\",\"Auth between services, APIs, and machines\",[3832,3833],\"First-class support\",\"Limited focus\",\"How the provider models organizations and tenants\",[3836,3837],\"Native organization-centric architecture\",\"User-centric architecture\",[3561,3839],\"MAU-based with feature add-ons\",[3708,3841],\"Satellite domains; web only, within one application\",\"Standard OIDC compliance\",\"How closely the provider follows the specifications\",[3845,3846],\"Strict adherence to OAuth 2.1 and OIDC\",\"Limited; missing standard logout endpoints\",\"SDK architecture\",\"How the SDK integrates with your application\",[3850,3851],\"Thin, standards-based clients for a standalone auth service\",\"Frontend-heavy, pre-built UI components\",[3862,3863,3864,3865],[3854,3855],[3859,3860],[3856,3857],{\"_106\":3858,\"_3109\":3110},\" Clerk renders the entire flow in-app with its components. Logto follows the standard OAuth 2.1 redirect flow instead: users sign in on a hosted page, because collecting credentials directly in your app (the old ROPC grant) is formally deprecated for security reasons.\",\"You need sign-in to happen inside your app.\",{\"_106\":3861,\"_3109\":3110},\" If your top priority is dropping pre-built React components into a Next.js project with zero configuration, Clerk's developer experience in that ecosystem is excellent.\",\"You want Next.js \\\"magic\\\" out of the box.\",[3874,3875],[3871,3872],[3868,3869],[3866,3867],{\"_106\":3747,\"_3109\":3110},\" Logto is built for multi-app businesses: every app you register, web or native, shares one central sign-in session. Sign in once, signed in everywhere.\",{\"_106\":3870,\"_3109\":3110},\" You are optimizing your frontend bundle size and need a lightweight authentication SDK.\",\"Performance is critical.\",{\"_106\":3873,\"_3109\":3110},\" You need deep control over machine-to-machine auth, custom API resources, and organization-level roles and permissions.\",\"You are building complex B2B architectures.\",{\"_106\":3876,\"_3109\":3110},\" Maybe it's strict compliance requirements. Maybe you package authentication inside a product deployed to your customers' infrastru
178cture. Clerk has no answer for either.\",\"You need to self-host.\",{\"_11\":3884,\"_13\":3885},{\"_11\":3882,\"_13\":3883},{\"_11\":3880,\"_13\":3881},\"Standards-compliant by default\",\"Logto strictly adheres to OAuth 2.1, OIDC, and SAML. Standard discovery documents, standard logout endpoints, standard assertions. Logto behaves the way the spec says it should, so integrations with enterprise systems stay smooth.\",\"Deploy your way: cloud or your own infrastructure\",\"Most teams run on Logto Cloud and never think about infrastructure. But if you sell software that enterprises deploy on-premise, you can't hard-depend on a third-party auth cloud. Logto's open-source core runs as a single lightweight server you can package inside your product.\",\"Lightweight SDKs, standalone service\",\"Logto runs as an independent auth service, fully decoupled from your product. Its SDKs are thin, standards-based OAuth 2.1/OIDC clients that simply connect your app to that service. Nothing embeds a UI-and-session runtime inside your application bundle, so you get modern authentication without sacrificing frontend performance.\",{\"_3223\":3899,\"_3225\":3900},{\"_3223\":3897,\"_3225\":3898},{\"_3223\":3895,\"_3225\":3896},{\"_3223\":3893,\"_3225\":3894},{\"_3223\":3891,\"_3225\":3892},\"Multi-app sign-in as an afterthought\",\"Sharing one login across your own apps is where Clerk gets awkward. Satellite domains only cover web apps under one Clerk application on a short list of frameworks, and sign-in still happens on the primary domain. Separate Clerk applications have no way to share users or sessions, and for native apps there is no documented path at all.\",\"Standard protocol deviations\",\"Developers integrating with enterprise systems run into idiosyncrasies in Clerk's implementation of standard protocols, such as missing standard OIDC logout endpoints.\",\"No self-hosting option\",\"Clerk is a proprietary, cloud-only SaaS. If you ship software that runs on-premise for enterprise clients, or you need full control over your infrastructure, Clerk simply isn't an option.\",\"Rigid session architecture\",\"Clerk acts as the source of truth for user sessions. When you build complex B2B applications that need custom tenant routing or machine-to-machine communication, working around a user-centric architecture gets frustrating.\",\"SDK bloat and performance\",\"Clerk's pre-built React components are convenient, but they embed a heavy UI-and-session runtime in your bundle. The cost is publicly documented: a 2023 issue on Clerk's GitHub measured the full clerk-js package at 1.2 MB, and Clerk's own comparison article acknowledges its main bundle \\\"can represent up to 50% of total application size\\\" when using pre-built components.\",[3902],\"Clerk has built a reputation for excellent developer experience, particularly in the Next.js ecosystem. But as applications scale and architectural requirements get more complex, teams often find that a tightly coupled, frontend-heavy approach becomes a liability.\",[3904,3905,3240],\"Looking for a Clerk alternative? Logto delivers modern authentication \",{\"_106\":3906,\"_3109\":3110},\"without bloated SDKs, rigid session architectures, or vendor lock-in\",\"Auth0 Alternative: Why Growing Teams Switch to Logto\",\"Logto is an Auth0 alternative with token-based pricing: no MAU growth tax, a free plan up to 50K MAU, modular B2B add-ons, and migration without password resets.\",\"Auth0 alternative: Why teams switch to Logto when predictable costs matter\",[4017],[4015],[4003,4004,4005,4006],[3995,3996,3997],{\"_3177\":3965,\"_3179\":3966},\"Auth0 vs. Logto: Head-to-head comparison\",[3942],{\"_11\":3932,\"_3097\":3933,\"_108\":3099},[3920,3921,3922,3923],\"Auth0 is a registered trademark of Okta, Inc. Feature comparisons are based on publicly available information as of July 2026. Please verify with the respective vendor for the latest details.\",{\"_152\":3930,\"_154\":3931},{\"_152\":3928,\"_154\":3929},{\"_152\":3926,\"_154\":3927},{\"_152\":3924,\"_154\":3925}
178,\"Does Logto support Enterprise SSO?\",\"Yes. Logto supports both SAML and OIDC enterprise SSO connections, available as a modular add-on. No custom enterprise contract required.\",\"Can I self-host Logto?\",\"Yes. Most teams use Logto Cloud, the fully managed service. But unlike Auth0, Logto also has an open-source version you can self-host on your own infrastructure as a single lightweight service.\",\"Is Logto cheaper than Auth0?\",\"In most growth scenarios, yes. Logto's free plan covers up to 50K MAU, and paid plans charge by access tokens issued rather than monthly active users, so you don't pay a tax for dormant users. Exact costs depend on your usage patterns and the enterprise features you need.\",\"What is the best Auth0 alternative?\",\"The \\\"best\\\" alternative depends on your needs. For teams looking for transparent, usage-based pricing with the flexibility to self-host, Logto is a strong contender. Teams deeply embedded in the Microsoft ecosystem may consider Entra External ID, while purely Next.js-focused projects often look at Clerk.\",\"Migrating from Auth0 without resetting passwords\",[3934,3935,3936],[3941],[3940],[3937,3938],\"When users log in for the first time after the migration, Logto validates the old password hash and automatically re-hashes it with the modern Argon2 algorithm. \",{\"_106\":3939,\"_3109\":3110},\"Your users won't notice a thing.\",\"Logto supports importing password hashes directly, including Bcrypt, Argon2, MD5, SHA1, SHA256, and PBKDF2. A legacy option accepts any other hash format supported by Node.js. Export your user data from Auth0 and bulk-import it into Logto with the Management API.\",\"The biggest fear when switching auth providers is the dreaded \\\"please reset your password\\\" email. With Logto, your users never need to see one.\",{\"_11\":3112,\"_3113\":3943},[3944,3945,3946,3947,3948,3949],{\"_3125\":3152,\"_13\":3153,\"_3128\":3963},{\"_3125\":3137,\"_13\":3551,\"_3128\":3962},{\"_3125\":3288,\"_13\":3289,\"_3128\":3961},{\"_3125\":3306,\"_13\":3957,\"_3128\":3958},{\"_3125\":3829,\"_13\":3830,\"_3128\":3954},{\"_3125\":2922,\"_13\":3950,\"_3128\":3951},\"Use your own unique domains\",[3952,3953],\"Available as a modular add-on\",\"Locked behind paid tiers\",[3955,3956],\"First-class support; flexible add-ons\",\"Metered tokens with strict limits on standard plans\",\"Organizations and enterprise connections for B2B apps\",[3959,3960],\"Unlimited organizations; modular SSO add-ons\",\"Tier-specific, with enterprise connection limits\",[3291,3550],[3553,3554],[3561,3964],\"MAU-based; billed per monthly active user\",[3979,3980,3981,3982],[3967,3968,3969],[3976,3977],[3973,3974],[3970,3971],{\"_106\":3972,\"_3109\":3110},\" If a free tier covers your needs and you expect no B2B growth, switching providers may not be worth the effort. That said, Logto's free plan also includes up to 50K MAU.\",\"Your setup is small and stable.\",{\"_106\":3975,\"_3109\":3110},\" If your workforce identity is already managed by Okta, staying within its CIAM ecosystem may offer synergies. That said, if you just need Okta users to sign in to your app, Logto ships an Okta enterprise SSO connector.\",\"You are deeply embedded in the Okta ecosystem.\",{\"_106\":3978,\"_3109\":3110},\" Auth0 has a massive marketplace of integrations for older enterprise systems that Logto may not support out of the box.\",\"You need complex legacy integrations.\",[3992,3993],[3989,3990],[3986,3987],[3983,3984],{\"_106\":3985,\"_3109\":3110},\" Logto development tenants give you every premium feature free of charge: MFA, organizations, Enterprise SSO. Integrate and test everything before you pay for a production plan.\",\"You want full features while you build.\",{\"_106\":3988,\"_3109\":3110},\" Get the convenience of a managed cloud today, with the security of knowing you can self-host the same open-source codebase tomorrow.\",\"You want a built-in exit strategy.\",{\"_106\":3991,\"_3109\":3110},\" Logto gives you unlimited organizations and modular Enterprise SSO connections without custom contracts.\",\"You are building multi-tenant B2B apps.\",{\"_106\":3994,\"_3109\":3110},\" Logto's token-based model typically offers significant savings for growing user bases.\",\"You have 10k+ MAU and feel the billing pressure.\",{\"_11\":4001,\"_13\":4002},{\"_11\":3602,\"_13\":4000},{\"_11\":3998,\"_13\":3999},\"Modular B2B capabilities\",\"Enterprise SSO, MFA, and multi-tenant organizations are flexible add-ons rather than a massive enterprise bundle. You pay only for the enterprise features you actually need to close your next deal.\",\"Logto Cloud is a fully managed service, and it runs the same codebase as Logto's community-driven open-source version (13k+ GitHub stars). Start on the cloud for c
178onvenience, knowing you can self-host later if your compliance or economics ever demand it.\",\"Token-based pricing that reflects true usage\",\"Instead of charging for every user sitting in your database, Logto's paid plans are billed by actual usage: only access tokens count, while ID and refresh tokens are excluded. If a user doesn't log in, you don't pay for them. And the free plan covers up to 50K MAU.\",{\"_3223\":4013,\"_3225\":4014},{\"_3223\":4011,\"_3225\":4012},{\"_3223\":4009,\"_3225\":4010},{\"_3223\":4007,\"_3225\":4008},\"Metered M2M tokens\",\"Machine-to-machine (M2M) tokens are strictly metered: 1,000 per month on Free and Essentials plans, 5,000 on Professional, and more only through paid add-ons. One misconfigured batch job can burn through the whole allowance and turn into a surprise bill or an interrupted service.\",\"Hard limits on B2B growth\",\"Auth0's self-service B2B plans include only 3â5 enterprise SSO connections ($100/month each beyond that, hard-capped at 30), and each Auth0 organization can enable at most 10 connections. Multi-brand and B2B2C companies with dozens of connections end up splitting customers into duplicate organizations, or they get pushed into a custom Enterprise contract.\",\"Forced feature bundling\",\"Auth0's tiered pricing often means paying for an entire suite of features just to access one specific capability, like custom domains or a few more enterprise connections.\",\"The MAU \\\"growth tax\\\"\",\"As your monthly active users (MAU) grow, your bill grows with them, even if most users only log in once a month. Teams often face steep price jumps when moving off the free tier or crossing MAU thresholds.\",[4016],\"When we talk to teams migrating away from Auth0, the conversation rarely starts with technology. Auth0 is a stable, mature product, and everyone knows it. The complaints start with pricing models and structural limits.\",[4018,4019,3240],\"Looking for an Auth0 alternative? Logto helps growing teams build secure, enterprise-ready authentication \",{\"_106\":4020,\"_3109\":3110},\"without the MAU growth tax or forced feature bundling\",\"start_free\",\"Start free\",\"talk_to_us\",\"Talk to us\",\"switch_reasons_title\",\"Why teams look for {{vendorName}} alternatives\",\"Motivation\",\"in_practice\",\"What it looks like in practice\",\"differentiators_title\",\"How is Logto different from {{vendorName}}?\",\"fit_title\",\"Is Logto the right {{vendorName}} alternative for you?\",\"fit_intro\",\"We believe in honest positioning. Logto isn't the perfect fit for every {{vendorName}} customer.\",\"switch_list_title\",\"When you should switch to Logto\",\"stay_list_title\",\"When {{vendorName}} might be a better fit\",\"features_column_label\",\"Features\",\"table_aria_label\",\"Comparing features with {{vendorName}}\",\"unlimited_footnote\",\"migration_contact\",\"Every migration is a little different. If the guide doesn't cover your case, \u003ca\u003etalk to us\u003c/a\u003e and tell us what you need.\",\"faq_title\",\"cta_title\",\"Building your projects with Logto Cloud\",\"{{name}} customer story\",\"Read how {{name}} uses Logto to boost their productivity and business.\",\"aside_cta_description\",\"Looking for something similar?\",\"aside_cta_button\",\"Our customers\",\"Logto is trusted by teams building SaaS, AI, and enterprise apps worldwide. Explore how they leverage Logto for authentication and authorization.\",\"Trusted by teams building SaaS, AI, and enterprise apps worldwide.\",\"read_story\",\"Read story\",\"main_cards\",{\"_4161\":4162},{\"_4063\":4064,\"_4065\":4066,\"_4067\":4068,\"_4069\":4070,\"_4071\":4072,\"_4073\":4074,\"_4075\":4076,\"_4077\":4078,\"_4079\":4080,\"_4081\":4082,\"_4083\":4084,\"_4085\":4086,\"_4087\":4088,\"_4089\":4090,\"_4091\":4092,\"_4093\":4094,\"_4095\":4096,\"_4097\":4098,\"_4099\":4100,\"_4101\":4102},\"AF Gruppen\",{\"_4103\":4159,\"_13\":4160},\"Agile Heroes\",{\"_4103\":4156,\"_13\":4157},\"AI Bob\",{\"_4103\":4154,\"_13\":4155},\"Cheqd\",{\"_4103\":4152,\"_13\":4153},\"DeepCognition\",{\"_4103\":4150,\"_13\":4151},\"Everstar\",{\"_4103\":4147,\"_13\":4148},\"Flux\",{\"_4103\":4144,\"_13\":4145},\"maildoso\",{\"_4103\":4141,\"_13\":4142},\"MedSimples\",{\"_4103\":4138,\"_13\":4139},\"Menumal\",{\"_4103\":4136,\"_13\":4137},\"NZ Trade Group\",{\"_4103\":4133,\"_13\":4134},\"Octrace\",{\"_4103\":4130,\"_13\":4131},\"OpenWallet\",{\"_4103\":4127,\"_13\":4128},\"Orb\",{\"_4103\":4124,\"_13\":4125},\"Pilot Institute\",{\"_4103\":4120,\"_13\":4121},\"Reki\",{\"_4103\":4118,\"_13\":4119},\"SMARTSEER\",{\"_4103\":4115,\"_13\":4116},\"Stockarea\",{\"_4103\":4112,\"_13\":4113},\"Wallex\",{\"_4103\":4108,\"_13\":4109},\"Whitelist Pro\",{\"_4103\":4104,\"_13\":4105}
178,\"tags\",[4106,4107],\"Whitelist Pro supports media buyers managing ad accounts and budgets, secured by Logto sign-in.\",\"Adtech\",\"SaaS\",[4110,4111],\"Wallex lets businesses manage cross-border payments and currencies, protected by Logto authentication.\",\"Fintech\",\"Payments\",[4114,4107],\"Stockarea streamlines logistics and warehousing in India, relying on Logto for account security.\",\"Logistics\",[4117,4107],\"SMARTSEER delivers AI-powered decisioning tools to businesses, using Logto for sign-in.\",\"AI\",[4110,4107],\"Reki guides users through non-dilutive funding steps, with secure Logto-powered access.\",[4122,4123],\"Pilot Institute provides top-rated online pilot training; Logto handles student authentication and authorization.\",\"EdTech\",\"Aviation\",[4107,4126],\"Logto powers authentication for Orb, giving users secure access to internet monitoring tools on any device.\",\"Networking\",[4110,4129],\"OpenWallet protects digital asset management and investment with Logtoâs secure sign-in.\",\"Web3\",[4117,4132],\"Octrace lets users tap into AI-driven trigger event insights, secured by Logto authentication.\",\"Sales\",[4135,3012],\"NZ Trade Group connects electrical professionals nationwide, with Logto ensuring safe platform access.\",\"Construction\",[4107],\"Menumal lets businesses manage and customize digital menus at scale, using Logto for user authentication.\",[4110,4140],\"MedSimples brings financial solutions to medical professionals, powered by Logtoâs authentication and authorization.\",\"Healthcare\",[4107,4143],\"Maildoso streamlines outbound email campaign management with Logto securing account access.\",\"Marketing\",[4146,4107],\"Flux connects real estate professionals to up-to-date property valuation data, secured by Logto.\",\"Real estate\",[4117,4149],\"Everstar enables secure entry to advanced AI tools for nuclear tech development with Logto.\",\"Nuclear\",[4117,4107],\"Logto manages authentication for DeepCognition, letting users transform complex documents into structured data.\",[4107,4129],\"Creds by Cheqd relies on Logto for sign-in, unlocking personalized community insights and gamification.\",[4135,4117],\"AI Bob gives property teams quick, secure entry to building regulation tools via Logto.\",[4107,4158],\"Agile Heroes accelerates SaaS product growth by handling authentication through Logto.\",\"Professional training\",[4135,3012],\"AF Gruppen (OSE: AFG; FRA: AF8) integrates multiple SSO providers with Logto, simplifying sign-in for their workforce.\",\"Landing AI\",{\"_13\":4163},\"Logto powers authentication for VisionAgent and LandingLens, giving Landing AI users instant access to visual AI tools.\",\"mission\",{\"_111\":4175,\"_118\":4176,\"_4171\":4177,\"_4178\":4179,\"_4180\":4181,\"_4182\":4183,\"_4184\":4185,\"_4186\":4187},\"team\",{\"_111\":4173,\"_4171\":4174},\"investor\",{\"_111\":4170,\"_4171\":4172},\"Our first investor\",\"details\",\"Silverhand is grateful for the backing of various venture capitalists, but we would like to express our special gratitude to our first investor, \u003csite\u003edaimajia\u003c/site\u003e.\\nWe started this magical relationship from a \u003cpr\u003epull request\u003c/pr\u003e, and we truly acknowledge and appreciate their recognition and support, as we wouldn't be where we are today without them.\",\"Our team\",\"Silverhand is a remote-first company that highly values and embraces open source culture. Our engineering and product team is composed of skilled builders who bring their expertise from reputable tech giants, including Airbnb, Sequoia, Dropbox, IBM, and other industry leaders.\",\"Our mission\",\"We believe outstanding software development tools have the power to transform the industry and drive meaningful progress.\",\"Silverhand Inc. focuses on creating well-designed technological solutions that are open-source. Our main focus is consumer identity because we believe that organizations and developers worldwide have been facing difficulties with sign-in processes for a long time. Since Logto open-source was launched, we have received tremendous support and appreciation from developers all over the globe.\",\"stars\",{\"_11\":4194,\"_4189\":4195},\"downloads\",{\"_11\":4193},\"members\",{\"_11\":4191,\"_4189\":4192},\"countries\",{\"_11\":4188,\"_4189\":4190},\"about_cloud\",\"We have expanded Logto by making it accessible on the cloud, providing an easier and faster solution that eliminates worries about operation and management. Now, Logto Cloud is available for everyone to use and enjoy.\",\"Used by teams worldwide\",\"value\",\"{{value}}
178+ countries\",\"Active dev community\",\"{{value}}+ members\",\"Downloads\",\"Open-source on GitHub\",\"{{value}}+ stars\",\"Auth and identity for AI apps, agents, and MCP servers\",\"For AI-native systems. MCP and OAuth 2.1 supported out of the box.\",\"pill\",{\"_4417\":4418,\"_106\":4419},{\"_111\":4415,\"_13\":4416},{\"_4413\":4414,\"_4023\":4024},\"toc\",{\"_4397\":420,\"_111\":4398,\"_258\":4399},\"dynamic_app\",{\"_4365\":4366,\"_4367\":4368,\"_4369\":4370,\"_4371\":4372,\"_4373\":4374,\"_4375\":4376,\"_4377\":4378,\"_4379\":4380,\"_4381\":4382,\"_4383\":4384,\"_4385\":4386,\"_4387\":4388},\"walls\",{\"_111\":4348,\"_4349\":4350,\"_4351\":4352,\"_4353\":4354},\"use_cases\",{\"_4251\":4252,\"_1083\":4253,\"_4254\":4255,\"_4256\":4257,\"_4258\":4259,\"_4260\":4261},\"reads\",{\"_111\":4216,\"_4217\":4218,\"_4219\":4220,\"_4221\":4222,\"_4223\":4224,\"_4225\":4226},\"final_cta\",{\"_111\":4214,\"_13\":4215},\"Ship agent-ready auth \u003ccaveat\u003ethis afternoon\u003c/caveat\u003e.\",\"AI surfaces keep changing. Your identity layer does not have to: point the one you already trust at whatever comes next.\",\"See it running, then build yours.\",\"proof\",{\"_4243\":4244,\"_4245\":4246,\"_108\":4247,\"_4248\":4249,\"_13\":4250},\"ours_title\",\"How we built ours\",\"ours_cards\",[4235,4236],\"yours_title\",\"How to build yours\",\"yours_cards\",[4227,4228],{\"_140\":4232,\"_11\":4233,\"_13\":4234},{\"_140\":4229,\"_11\":4230,\"_13\":4231},\"Open your server to agents\",\"Enable third-party AI agent access to your MCP server\",\"Open your MCP server to third-party AI agents: client registration, user consent, and scoped access tokens.\",\"Add auth to your server\",\"Enable auth for your MCP-powered a
178pps with Logto\",\"Integrate Logto with your MCP server: authenticate users and retrieve their identity with the standard OpenID Connect flow.\",{\"_140\":4240,\"_11\":4241,\"_13\":4242},{\"_140\":4237,\"_11\":4238,\"_13\":4239},\"Read the token strategy\",\"How an MCP server calls your API on behalf of users: a production token strategy\",\"Why token passthrough, M2M, and PAT all fell short, and how subject tokens with org-scoped access keep AI inside each userâs permissions.\",\"Read the build story\",\"Remote MCP server in action: a new entry point for SaaS products in the AI era\",\"How to build a remote MCP server for your SaaS product: MCP vs Agent Skills, OAuth integration, and MCP tools design.\",\"claim\",\"Logto MCP Server runs on this exact stack.\",\"intro\",\"It is live in production today.\",\"Logto MCP Server docs\",\"tenancy\",\"That includes the hard part for B2B products: multi-tenancy. Every token an agent gets is scoped to one organization and to that userâs role in it.\",\"Watch what it can do, then build the same for your product with the guides below.\",\"chatbots\",{\"_140\":4333,\"_111\":4334,\"_13\":4335,\"_4336\":4337,\"_251\":4338},{\"_140\":4326,\"_111\":4327,\"_13\":4328,\"_251\":4329},\"cli\",{\"_111\":4299,\"_13\":4300,\"_140\":4301,\"_4302\":4303,\"_4304\":4305,\"_251\":4306},\"mcp_server_access\",{\"_140\":4289,\"_111\":4290,\"_13\":4291,\"_4265\":4292,\"_251\":4293},\"agent_friendly_apps\",{\"_140\":4277,\"_111\":4278,\"_13\":4279,\"_4265\":4280,\"_251\":4281},\"third_party_apis\",{\"_140\":4262,\"_111\":4263,\"_13\":4264,\"_4265\":4266,\"_251\":4267},\"Read the Secret Vault docs\",\"Connect your agent to third-party APIs and MCP servers\",\"Enable your agent to act on behalf of users with third-party APIs. No manual token juggling, no storing secrets in plain text.\",\"flow\",{\"_4271\":4272,\"_4273\":4274,\"_11\":4275,\"_13\":4276},[4268,4269,4270],\"Get and refresh access tokens for Google, GitHub, or MCP endpoints via Logtoâs APIs.\",\"Exchange tokens securely without exposing secrets in your agent codebase.\",\"Focus on workflows; Logto manages the auth dance.\",\"source\",\"Your AI agent or client\",\"target\",\"Third-party APIs or MCP servers\",\"Logto Secret Vault\",\"to manage tokens and secrets\",\"Read the third-party app tutorial\",\"Make your app agent-friendly\",\"Open your app or API to AI agents with access you choose. Logto manages authentication, scope, and tokens behind the scenes.\",{\"_4271\":4285,\"_4273\":4286,\"_11\":4287,\"_13\":4288},[4282,4283,4284],\"Register agents as third-party apps, just like any other OAuth client.\",\"Agents request user consent with specific scopes.\",\"Logto handles access and refresh tokens, so agents call your APIs securely.\",\"AI agent or MCP client\",\"Your app or API\",\"Logto as identity provider\",\"to secure API access\",\"Read the MCP server tutorial\",\"Enable AI agent access to your MCP server\",\"Turn your MCP server into a resource server and give AI agents scoped access, with user sign-in and explicit consent.\",{\"_4271\":4285,\"_4273\":4297,\"_11\":4287,\"_13\":4298},[4294,4295,4296],\"Two ways to register clients: enable Dynamic app so any MCP client can connect, with CIMD under the hood; or pre-register each client as a third-party app when your security review demands it.\",\"Agents request scopes; users approve or deny.\",\"Full audit logs of every grant and revocation.\",\"Your MCP server\",\"to manage agent access and consent\",\"Authentication flows built for the terminal\",\"AI coding tools and agents ship as CLIs. Give them real sign-in: device code when there is no browser, authorization code with PKCE when there is.\",\"Explore the cli-auth library\",\"learn\",\"Learn how to get CLI auth right\",\"terminal\",{\"_4310\":4311,\"_4312\":4313,\"_4314\":4315,\"_4316\":4317,\"_4318\":4319,\"_4320\":4321,\"_4322\":4323,\"_4324\":4325},[4307,4308,4309],\"Device code flow covers SSH boxes, containers, and headless machines; users approve from any browser.\",\"Authorization code with PKCE opens the browser when one is available and returns straight to the terminal.\",\"Tokens are stored, refreshed, and locked across processes, with keychain integration built in.\",\"command\",\"agent login\",\"browser_opening\",\"Opening your browserâ¦\",\"browser_done\",\"â Signed in as [email protected]\",\"headless_comment\",\"# headless box? device code\",\"device_hint_prefix\",\"Visit\",\"device_hint_url\",\"example.com/device\",\"device_hint_code\",\"AH7-3K9P\",\"device_done\",\"â Token saved to keychain\",\"Explore the security docs\",\"Stop bots and abuse before it starts\",\"Built-in security that is more than a CAPTCHA: layered protection right inside your sign-in experience. Logto brings security practices from SaaS to the agent world.\",[4330,4331,4332],\"Dynamic CAPTCHA challenges suspicious traffic, only when needed.\",\"Rate limits and blacklists stop repeat abusers.\",\"MFA, short-lived tokens, and revocation controls for anything sensitive.\",\"Explore end-user auth docs\",\"Authentication flows built into chat\",\"Embed sign-in and SSO directly into your chatbot flow. Users are prompted when needed, and sent right back to the chat once signed in.\",\"conversation\",{\"_4342\":4343,\"_4344\":4345,\"_4346\":1230,\"_1079\":4347},[4339,4340,4341],\"Prompt users in the chat and redirect to Logto for secure sign-in.\",\"Passwordless, social, and enterprise SSO out of the box.\",\"Step-up auth or MFA for high-value actions.\",\"from_user\",\"Can you show me my balance?\",\"from_agent\",\"Sure! I can help you with that. Please sign in first.\",\"sign_in\",\"SSO\",\"One product. Three auth walls.\",\"
178inbound\",{\"_4355\":4362,\"_111\":4363,\"_118\":4364},\"human_in_the_loop\",{\"_4355\":4359,\"_111\":4360,\"_118\":4361},\"outbound\",{\"_4355\":4356,\"_111\":4357,\"_118\":4358},\"direction\",\"Outbound\",\"Your agent acts elsewhere\",\"âYour agent needs the userâs Google Calendar. A token in a .env file is how incidents start.â\",\"Human in the loop\",\"Users sign in inside AI\",\"âSign-in has to happen mid-conversation, without kicking the user out of the chat. Your CLI has no browser to redirect to. And half your new âusersâ are scripts hammering the sign-up page.â\",\"Inbound\",\"Agents reach your product\",\"âClaude just returned 401 on your server. An enterprise prospect is asking whether agent access respects their SSO. And the spec moved to CIMD while you were building.â\",\"headline_line1\",\"Enable Dynamic app.\",\"headline_line2\",\"Your whole identity stack now works for agents.\",\"lede\",\"Dynamic app is CIMD (Client ID Metadata Document) under the hood, the client registration model the MCP spec recommends first. There is no parallel auth system to build and no spec to chase.\",\"built_title\",\"What you already built in Logto\",\"built_items\",[4393,2375,4394,4395,4396],\"switch_label\",\"Enable Dynamic app\",\"switch_footnote\",\"CIMD under the hood\",\"switch_alt\",\"Prefer to vet every client yourself? Register them as third-party apps instead.\",\"docs_cta\",\"Dynamic app docs\",\"third_party_cta\",\"Third-party app docs\",\"applies_title\",\"Now applies to\",\"applies_items\",[4389,4390,4391,4392],\"Every MCP client and AI agent\",\"Scoped, per-user access tokens\",\"Consent your users can see and undo\",\"Audit logs of every grant\",\"Sign-in experience\",\"MFA \u0026 step-up\",\"RBAC \u0026 scopes\",\"Organizations (multi-tenancy)\",\"eyebrow\",\"Start with the problem you came with.\",[4400,4401,4402,4403,4404,4405],{\"_118\":4412,\"_4273\":4376},{\"_118\":4410,\"_4273\":4411},{\"_118\":4409,\"_4273\":4299},{\"_118\":4408,\"_4273\":4363},{\"_118\":4407,\"_4273\":4360},{\"_118\":4406,\"_4273\":4357},\"âMy agent needs the userâs Google Calendar.â\",\"âUsers need to sign in inside the chat.â\",\"âClaude canât connect to my MCP server.â\",\"âMy AI product ships as a CLI. How do users sign in?â\",\"âIâm building my own MCP server. How to do it right, including multi-tenant B2B?â\",\"See it running, then build yours\",\"âI donât want to build auth twice for agents.â\",\"get_started\",\"Get started\",\"Make your product \u003ccaveat\u003eAI-ready\u003c/caveat\u003e,\u003cbr /\u003ewithout a second auth stack\",\"Your AI apps, agents, and MCP servers inherit everything you already built in Logto: sign-in, enterprise SSO, MFA, RBAC, and Organizations. Ship AI features enterprises can actually adopt, in an afternoon.\",\"tag\",\"NEW\",\"Logto now supports CIMD. MCP clients connect without pre-registration.\",{\"_68\":4618,\"_4619\":4620},\"trusted_worldwide\",{\"_111\":4611,\"_13\":4612,\"_4613\":4614,\"_619\":4615,\"_4616\":4617},\"main_content\",{\"_4511\":4512,\"_111\":4513,\"_13\":4514,\"_1045\":4515,\"_4516\":4517,\"_1043\":4518,\"_2850\":4519,\"_4520\":4521,\"_2865\":4522,\"_1077\":4523,\"_4524\":4525,\"_4526\":4527,\"_1061\":4528,\"_2869\":4529,\"_4530\":4531},\"simplify_development\",{\"_111\":4503,\"_4504\":4505,\"_4506\":4507,\"_4508\":4509,\"_1071\":4510},\"grow_and_scale\",{\"_111\":4455,\"_4456\":4457,\"_4458\":4459,\"_88\":4460},\"why_logto\",{\"_4439\":4440,\"_4441\":4442,\"_4443\":4444,\"_4445\":4446},\"word_of_mouth\",{\"_11\":4438},\"manage_identities\",{\"_111\":4437},{\"_111\":4436,\"_4413\":4414,\"_619\":620},\"Ship faster with Logto Cloud\",\"Build with Logto Cloud. Focus on your app.\",\"Devs talk. They love Logto.\",\"reason_1\",{\"_11\":4453,\"_13\":4454},\"reason_2\",{\"_11\":4451,\"_13\":4452},\"reason_3\",{\"_11\":4449,\"_13\":4450},\"reason_4\",{\"_11\":4447,\"_13\":4448},\"Built for devs\",\"Open-source. Fast integration. Developer-first support.\",\"No billing surprises\",\"50K MAUs free. Token-based. Pay-as-you-go.\",\"Any a
178pp, anywhere\",\"From local to cloud. From web to mobile. From one app to many.\",\"Protocols that work\",\"OAuth 2.1, OIDC, SAML. Auth, SSO, RBAC.\",\"Grow and scale without security debt\",\"stages\",{\"_4484\":4485,\"_4486\":4487,\"_4488\":4489,\"_4490\":4491,\"_2644\":4492},\"all_lifecycle_stages\",{\"_111\":4478,\"_207\":4479,\"_13\":4480},{\"_111\":4461,\"_4462\":4463,\"_4464\":4465,\"_207\":4466,\"_4467\":4468,\"_130\":4469},\"Built for trust. Audited for security.\",\"security_privacy_compliant\",\"Standards \u0026 Privacy Compliant\",\"soc2_description\",\"Logto is SOC 2 Type II certified: proof we take security, uptime, and data privacy seriously.\",[4470,4471,4472,4473,4474,4475,700,4476,705,4477],\"hosting\",\"Logto Cloud runs in EU ðªðº, Australia ð¦ðº, US ðºð¸, and Japan ð¯ðµ regions. With DevSecOps, advanced encryption, and rock-solid data isolation.\",\"See how we keep you safe\",\"Open-source\",\"Self-hosting ready\",\"Role-Level Security\",\"Argon2 password hashing\",\"High availability\",\"Community-driven\",\"TLS everywhere\",\"Database encryption\",\"Secure identities at every stage of your product\",[4481,4482,4483],\"Launching your first app? Expanding to multi-product? Selling to enterprise? Logto handles auth and SSO. No matter where you are.\",\"Any stage\",\"Any model\",\"Any stack\",\"logto\",{\"_11\":4501,\"_13\":4502},\"poc\",{\"_11\":4499,\"_13\":4500},\"single_app\",{\"_11\":4497,\"_13\":4498},\"multi_app\",{\"_11\":4495,\"_13\":4496},{\"_11\":4493,\"_13\":4494},\"Sell to enterprises\",\"Ready for enterprise. SSO, compliance, and support baked in.\",\"Multi-app structure\",\"Handle multiple apps. Manage everything, scale cleanly.\",\"A single app\",\"Secure your app. Focus on shipping, not auth.\",\"Idea and proof of concept\",\"Build fast. Test faster. Validate your idea with Logto.\",\"Integrate Logto\",\"Add Logto. Up and running in minutes.\",\"Works out of the box with 20+ frameworks and clean Management API\",\"recognized_by_partners\",\"Plugged into the tools you already use\",\"check_out_all_frameworks\",\"Check out all frameworks\",\"no_code\",\"No-code ð\",\"Logto Management API\",\"sections\",{\"_4606\":4393,\"_4607\":4608,\"_4609\":4610},\"For builders who hate rebuilding auth\",\"Tired of duct-taping auth across your SaaS, AI agents, and B2B apps? Logto got you covered.\",{\"_11\":4600,\"_13\":4601,\"_4602\":4603,\"_4604\":4605},\"social_sign_in\",{\"_11\":4598,\"_13\":4599,\"_4588\":4589},{\"_11\":4594,\"_13\":4595,\"_4596\":4597},{\"_11\":4575,\"_13\":4576,\"_4577\":4578,\"_4579\":4580,\"_4581\":4582,\"_4346\":1230,\"_4583\":4584,\"_4585\":4586,\"_4587\":4587,\"_4588\":4589,\"_4590\":4591,\"_4592\":4593},\"multi_factor_auth\",{\"_11\":864,\"_13\":4569,\"_4570\":4571,\"_4572\":4573,\"_4574\":1519},{\"_11\":2375,\"_13\":4567,\"_1079\":4568},{\"_11\":4559,\"_13\":4560,\"_4561\":4562,\"_4563\":4564,\"_4565\":4566},\"idp_3rd_party\",{\"_11\":4544,\"_13\":4545,\"_2684\":4546,\"_4547\":4548,\"_4549\":4550,\"_4551\":4552,\"_4553\":4554,\"_4555\":4556,\"_4557\":4558},\"m2m_authentication\",{\"_11\":4542,\"_13\":4543},{\"_11\":866,\"_13\":4541},{\"_11\":2875,\"_13\":4536,\"_4537\":4538,\"_4539\":4540},\"pat\",{\"_11\":4532,\"_13\":4533,\"_4534\":4535},\"Personal access token (PAT)\",\"PATs for scripts, bots, and pipelines. No messy sign-ins, just clean access.\",\"expires_at\",\"Expires at {{dateTime}}\",\"Troubleshoot like a hero. Safely impersonate users, fix issues fast.\",\"customer_support\",\"Customer support\",\"end_customer\",\"End customer\",\"Set rules, control access. RBAC for global and organization-level resources.\",\"Machine-to-machine authentication\",\"M2M made simple. APIs, microservices, devices, all locked down.\",\"IdP for 3rd-party\",\"Your app. Your ecosystem.\\nBe the IdP with a consent flow that doesnât suck.\",\"Tiana Phillips\",\"request_access\",\"Acme is requesting access to:\",\"personal_information\",\"Your personal information\",\"avatar\",\"Your avatar\",\"email_and_phone_number\",\"Your email address and phone number\",\"cancel\",\"Cancel\",\"authorize\",\"Authorize\",\"Multi-tenancy (organizations)\",\"Multi-tenancy that scales. Group users, manage resources, permission everything.\",\"business\",\"Business {{name}}\",\"multi_tenant_application\",\"Multi-tenant application\",\"tenant\",\"Tenant {{name}}\",\"SSO with Okta, Entra, SAML, any IdP.\\nEnterprise SSO without the enterprise headache.\",\"Single Sign-On\",\"MFA in minutes. Passkeys, authenticator apps, backup codes.\",\"web_authn\",\"WebAuthn (Passkey)\",\"authenticator_app\",\"Authenticator app\",\"backup_codes\",\"Multi-app omni sign-in experience\",\"One sign-in flow. Every app.\\nLooks native. Works everywhere. Zero friction.\",\"sign_in_to_your_account\",\"Sign in to your account\",\"email_username\",\"Email / Username\",\"phone_number\",\"Phone number\",\"no_account\",\"Donât have an account?\",\"create_account\",\"Create account\",\"or\",\"continue_with_google\",\"Continue with Google\",\"continue_with_github\",\"Continue with GitHub\",\"continue_with_discord\",\"Continue with Discord\",\"Password authentication\",\"Still the default. Still what users expect.\",\"at_least_3_types_of_characters\",\"At least 3 types of characters are required.\",\"Social sign-in\",\"Social sign-in, done.\\nGoogle, Apple, Discord, and more.\",\"Email and SMS passwordless\",\"Passwordless that feels obvious: one-time codes via email or SMS.\",\"enter_verification_code\",\"Enter verification code\",\"verification_code_sent_to\",\"The verification code has been sent to your email [email protected]\",\"header_1\",\"header_2\",\"Security and control\",\"header_3\",\"Advanced flows\",\"Millions of identities. Proven reliability.\",\"Trusted by public companies, fast-growing startups, and government agencies.\",\"companies_headline\",\"Built with Logto by teams like\",\"Join the community\",\"join_github\",\"Explore the code\",\"Get started free\",\"work_with_any_framework\",\"Works with any framework plus no-code option\",\"OAuth \u0026 OIDC Providers Explorer\",\"Quickly look up OAuth endpoints and related development resources for popular OAuth \u0026 OIDC providers.\",\"All provider info is sourced from official docs, with links on each page for reference\",\"app_title\",\"OAuth \u0026 OIDC Providers \u003cspan\u003eExplorer\u003c/span\u003e\",\"search_placeholder\",\"Search for a provider (e.g., GitHub, Google, Facebook)\",\"clear_search\",\"Clear search\",\"copy\",\"Copy\",\"copied\",\"Copied to clipboard\",\"back_to_explorer\",\"Back to Explorer\",\"details_title\",\"{{name}} OAuth endpoints\",\"details_description\",\"{{name}} OAuth endpoints and related development resources\",\"oidc_details_title\",\"{{name}} OAuth \u0026 OIDC endpoints\",\"oidc_details_description\",\"{{name}} OAuth \u0026 OIDC endpoints and related development resources\",\"unknown_details_title\",\"Unknown OAuth provider\",\"unknown_details_description\",\"This OAuth provider is not recognized.\",\"documentation_title\",\"{{name}} OAuth documentation and resources\",\"oidc_documentation_title\",\"{{name}} OAuth \u0026 OIDC documentation and resources\",\"authorization_endpoint\",\"{{name}} authorization endpoint\",\"authorization_endpoint_description\",\"The endpoint to redirect users to in order to grant your application access to their account.\",\"token_endpoint\",\"{{name}} token endpoint\",\"token_endpoint_description\",\"The endpoint to exchange the authorization code or refresh token for an access token and a refresh token.\",\"jwks_uri\",\"{{name}} JWKS URI\",\"jwks_uri_description\",\"The URI that provides public keys for verifying JWT tokens. These keys are used to validate the authenticity of tokens issued by the authorization server.\",\"revocation_endpoint\",\"{{name}} revocation endpoint\",\"revocation_endpoint_description\",\"The endpoint used to invali
178date access tokens or refresh tokens before their expiration time, typically used when a user logs out or revokes application access.\",\"userinfo_endpoint\",\"{{name}} userinfo endpoint\",\"userinfo_endpoint_description\",\"The standardized OAuth endpoint that returns authenticated user profile information, including claims about the current user based on the scope of access token.\",\"end_session_endpoint\",\"{{name}} end session endpoint\",\"end_session_endpoint_description\",\"The endpoint used to terminate the user's session at the identity provider, commonly used for implementing single sign-out functionality.\",\"introspection_endpoint\",\"{{name}} introspection endpoint\",\"introspection_endpoint_description\",\"The endpoint that allows authorized parties to check the state and validity of an access token or refresh token, returning detailed token metadata.\",\"oidc_discovery_endpoint\",\"{{name}} OIDC discovery endpoint\",\"oidc_discovery_endpoint_description\",\"The well-known endpoint (.well-known/openid-configuration) that provides OpenID Connect configuration metadata, including all available endpoints and supported features.\",\"issuer\",\"{{name}} issuer URL\",\"issuer_description\",\"A unique identifier URL that identifies the OAuth/OIDC provider and is used to validate tokens\",\"provider_not_found\",\"Provider not found\",\"provider_not_found_description\",\"We couldn't find the OAuth provider you're looking for. It may have been removed or doesn't exist.\",\"Base64 Encoder \u0026 Decoder, Explained | Private, In-Browser\",\"Encode and decode Base64 and Base64URL payloads in the browser. Everything stays on your device. Plus what Base64 is, how it works, and when to use it.\",\"encoder\",\"Encoder\",\"decoder\",\"Decoder\",\"Your data is 100% private -- Base64 is fully encoded and decoded directly on your device.\",\"plain_text_label\",\"Plain text\",\"base64_label\",\"Base64\",\"plain_text_placeholder\",\"Enter text to encode\",\"base64_placeholder\",\"Paste Base64 to decode\",\"url_safe_label\",\"URL-safe (Base64URL)\",\"url_safe_hint\",\"Use `-` and `_` instead of `+` and `/`, and omit `=` padding.\",\"invalid_base64\",\"Invalid Base64 input.\",\"copy_to_clipboard\",\"copy_failed\",\"Failed to copy to clipboard\",\"welcome_sample\",\"Welcome to the Logto Base64 encoder and decoder.\",\"JWT decoder \u0026 encoder | Secure, simple, and user-friendly\",\"Quickly decode and encode JWTs online, and verify their signatures. Explore JWT examples using different algorithms, along with step-by-step JWT implementation guides.\",\"Your data is 100% private -- JWT is fully decoded and encoded directly on your device.\",\"jwt_label\",\"JWT\",\"encoded_jwt_label\",\"Encoded JWT\",\"decoded_header_label\",\"Decoded header\",\"header_label\",\"Header\",\"decoded_payload_label\",\"Decoded payload\",\"payload_label\",\"Payload\",\"signature_verified\",\"Signature verified!\",\"invalid_signature\",\"Invalid Signature!\",\"jwt_editor_placeholder\",\"Paste your JWT here\",\"hmac_secret_placeholder\",\"Enter the HMAC secret\",\"public_key_placeholder\",\"Enter the public key here\",\"private_key_placeholder\",\"Enter the private key here\",\"jwks_endpoint_uri_placeholder\",\"Enter the JWKs endpoint URL\",\"hmac_secret_label\",\"Signing key\",\"jwks_endpoint_uri_label\",\"JWKs endpoint URI\",\"public_key_label\",\"Public key\",\"private_key_label\",\"Private key\",\"base64_encoded_label\",\"Base64 encoded\",\"jwks_endpoint_uri_link\",\"public_key_link\",\"Verify via public key\",\"jwt_examples\",\"JWT examples\",\"share_jwt\",\"Share JWT\",\"URL copied to clipboard\",\"instruction\",{\"_11\":4823,\"_113\":4774,\"_4824\":4825,\"_4826\":4827,\"_4828\":4829,\"_253\":4830,\"_130\":131},\"verify_jwt\",{\"_11\":4805,\"_113\":4806,\"_4807\":4808,\"_4809\":4810,\"_4811\":4812,\"_4813\":4814,\"_4815\":4816,\"_4817\":4818,\"_4819\":4820,\"_4821\":4822},\"related_topics\",{\"_11\":4773,\"_113\":4774,\"_4775\":4776},\"unblock_more_subtitle\",\"Simplify your workflow and ensure secure user management with Logto Cloud. Built on OpenID Connect (OIDC), it leverages JWT to deliver a reliable authentication and authorization system designed to scale with your needs.\",\"Related JWT topics\",\"All information you concern about JWT and step-by-step guide to verify JWT in diverse framework.\",\"blogs\",{\"_4777\":47
17878,\"_4779\":4780,\"_4781\":4782,\"_4783\":4784,\"_4785\":4786,\"_4787\":4788,\"_4789\":4790},\"jwt_algorithm\",{\"_11\":4803,\"_13\":4804},\"id_token_and_access_token\",{\"_11\":4801,\"_13\":4802},\"custom_jwt_token_claims\",{\"_11\":4799,\"_13\":4800},\"opaque_token_vs_jwt\",{\"_11\":4797,\"_13\":4798},\"api_authorization\",{\"_11\":4795,\"_13\":4796},\"jwt_vs_session_authentication\",{\"_11\":4793,\"_13\":4794},\"oauth_oidc_saml\",{\"_11\":4791,\"_13\":4792},\"OAuth 2.0 \u0026 OIDC \u0026 SAML\",\"The fancy terms like OAuth, OpenID Connect (OIDC), SAML, SSO, and JWT are frequently used in the domain of identity and access management (IAM), but what do they mean? How do they work together?\",\"JWT vs. Session authentication\",\"Session-based auth relies on server-side storage to maintain user sessions, whereas token-based auth enables stateless and scalable communication between clients and servers. Discover how JWT is revolutionizing API security and why itâs becoming the preferred choice for modern authentication.\",\"API authorization: API keys vs. Basic authentication vs. OAuth JWT tokens\",\"Explore three common API authorization mechanisms with their pros and cons. Dive into a best practice about for safeguarding your APIs using OAuth JWT tokens.\",\"Opaque token vs. JWT token\",\"Explore the core differences between JWT and Opaque Tokens, and discover why JWT has become the modern choice for authentication with its high performance and scalability.\",\"Custom JWT token claims\",\"How does JWT achieve fine-grained access control? Compare RBAC (Role-Based Access Control) and ABAC (Attribute-Based Access Control) to find the best solution for your application.\",\"ID token \u0026 Access token \u0026 Refresh token\",\"Do you know the specific purposes of ID Tokens, Access Tokens, and Refresh tokens? Understand their roles in authentication and authorization processes from a JWT perspective.\",\"JWT algorithms: EC vs. RSA\",\"Dive into the signature algorithms of JWT, such as EC and RSA, and learn how to choose the most secure and efficient method for your application.\",\"How to verify JWT?\",\"The integrity of a JWT must be verified to ensure its header and payload have not been tampered with. Below are step-by-step examples for verifying JWTs in popular programming environments:\",\"ruby_label\",\"Verify JWT in Ruby\",\"dotnet_label\",\"Verify JWT in .NET\",\"java_label\",\"Verify JWT in Java\",\"php_label\",\"Verify JWT in PHP\",\"python_label\",\"Verify JWT in Python\",\"go_label\",\"Verify JWT in Go\",\"nodejs_label\",\"Verify JWT in Node.js\",\"rust_label\",\"Verify JWT in Rust\",\"Learn about JWT\",\"what_is_jwt\",{\"_11\":4916,\"_13\":4917,\"_207\":4918},\"jwt_structure\",{\"_11\":4905,\"_13\":4906,\"_207\":4907,\"_389\":4908},\"token_claims\",{\"_11\":4852,\"_13\":4853,\"_4854\":4855,\"_4856\":4857,\"_281\":4858},{\"_11\":4831,\"_13\":4832,\"_207\":4833},\"When to use JWT?\",\"JWTs can be particularly beneficial in the following scenarios:\",[4834,4835,4836,4837,4838,4839],{\"_283\":4850,\"_13\":4851},{\"_283\":4848,\"_13\":4849},{\"_283\":4846,\"_13\":4847},{\"_283\":4844,\"_13\":4845},{\"_283\":4842,\"_13\":4843},{\"_283\":4840,\"_13\":4841},\"Serverless architectures\",\"Providing stateless authentication where server-side sessions are challenging.\",\"Cross-origin resource sharing (CORS)\",\"Simplifying authentication across multiple domains.\",\"High-traffic applications\",\" Reducing database load in high-volume environments.\",\"Mobile applications\",\"Efficiently maintaining user sessions across API calls.\",\"Single sign-on (SSO) systems\",\"Enabling access to multiple applications with one authentication.\",\"Microservices architecture\",\"For stateless authentication across multiple services.\",\"Common token claims in JWT\",\"The claims are part of the payload and hold the key information. Here are standardized Registered Claims for your refer:\",\"table\",{\"_4870\":4871,\"_3113\":4872},\"other_token_claims\",{\"_13\":4861,\"_4862\":4863,\"_4864\":4865},{\"_283\":4859,\"_13\":4860},\"Caution\",\"Do not store private or sensitive information in JWT claims. While JWT claims are encoded (using Base64URL), they are not encrypted. This means anyone with the token can decode it and view the claims, even if they cannot alter it without invalidating the signature. Use encryption or other secure methods to safeguard sensitive data when necessary.\",\"Depen
178ding on the specification and the configuration of the authorization server, additional claims may be included in the payload to support specific use cases. You can also add custom claims to JWT to meet unique business requirements.\",\"id_token\",{\"_11\":4868,\"_13\":4869},\"access_token\",{\"_11\":4866,\"_13\":4867},\"Access Token\",\"Used in OAuth 2.0, it grants access to specific resources or APIs on behalf of the user or application.\",\"ID Token\",\"Used in OpenID Connect, it includes claims like profile information (e.g., name, email, etc.) about the authenticated user.\",\"headers\",[4902,4903,4904],[4873,4874,4875,4876,4877,4878,4879],{\"_4243\":4899,\"_4881\":4900,\"_13\":4901},{\"_4243\":4896,\"_4881\":4897,\"_13\":4898},{\"_4243\":4893,\"_4881\":4894,\"_13\":4895},{\"_4243\":4890,\"_4881\":4891,\"_13\":4892},{\"_4243\":4887,\"_4881\":4888,\"_13\":4889},{\"_4243\":4884,\"_4881\":4885,\"_13\":4886},{\"_4243\":4880,\"_4881\":4882,\"_13\":4883},\"jti\",\"full_name\",\"JWT ID\",\"A unique identifier for the token, useful to prevent the same token from being used multiple times (e.g., in replay attacks).\",\"iat\",\"Issued At\",\"When the token was created. This can be used to determine the token's age.\",\"nbf\",\"Not Before\",\"Makes a token valid only after this timestamp. Helpful in situations where clocks are not accessible.\",\"exp\",\"Expiration Time\",\"Sets an expiration time on the token after which it becomes invalid. This helps prevent replay attacks by limiting how long a token remains valid.\",\"aud\",\"Audience\",\"Specifies which recipients can accept and process the token. This can be an array of values for multiple audiences or a single value for a single recipient.\",\"sub\",\"Subject\",\"Identifies the JWT's subject, typically representing the authenticated user.\",\"iss\",\"Issuer\",\"The entity that issued the JWT, like the authorization server.\",\"Claims\",\"Full name\",\"Description\",\"The structure of JWT\",\"A typical JWT is split into three parts, each encoded in Base64URL and separated by periods (.):\",[4909,4910,4911],\"This structure enables JWTs to provide a compact, secure way of transmitting information between parties.\",{\"_283\":4728,\"_13\":4915},{\"_283\":4732,\"_13\":4914},{\"_283\":4912,\"_13\":4913},\"Signature\",\"A hashed combination of the Header, Payload, and secured using a secret key. Its purpose is to ensure the token's integrity and confirm that it has not been altered\",\"Contains the actual data, like user ID, user profile, expiration time, or scopes.\",\"Contains metadata, such as the signing algorithm (e.g., HS256 or RS256) and the tokenâs type (JWT).\",\"What is JWT?\",\"JWT (JSON Web Token) is a self-contained, stateless token that carries information in a structured and readable format. Whether youâre protecting an API or adopting token-based authentication for your application, JWTs are a powerful tool, because they:\",[4919,4920,4921],{\"_283\":4926,\"_13\":4927},{\"_283\":4924,\"_13\":4925},{\"_283\":4922,\"_13\":4923},\"Extensible\",\"The payload of a JWT can contain custom claims, allowing for flexible authorization and info sharing.\",\"Cross-service compatibility\",\"JWTs can be easily shared and verified across different services.\",\"Stateless\",\"JWTs are self-contained and do not require server-side state to validate. JWT can ensure data integrity via signatures.\",\"general\",{\"_5081\":5082,\"_5083\":5084,\"_5085\":5086},{\"_5079\":5080},\"document\",{\"_11\":5076,\"_111\":5077,\"_13\":5078},\"navigation\",{\"_84\":4958,\"_86\":4959,\"_82\":4960,\"_4961\":4962,\"_4963\":4964,\"_4965\":4966,\"_4967\":4968,\"_4937\":4969},\"footer\",{\"_1083\":4951,\"_4952\":4953,\"_4954\":4955,\"_4956\":4957},\"subscribe\",{\"_11\":4939,\"_13\":4940,\"_2684\":4941,\"_657\":4942,\"_645\":646,\"_647\":4943,\"_633\":4944,\"_4945\":4946,\"_4947\":4948,\"_4949\":4950},\"Subscribe Logto newsletters\",\"Stay on top of the latest product updates, development inspirations, blogs, and research prompt.\",\"Name\",\"Email address\",\"Invalid email address.\",\"Subscribe\",\"name_placeholder\",\"Enter your name\",\"email_placeholder\",\"Enter email address\",\"success_message\",\"Submitted successfully. Thank y
178ou!\",\"Security\",\"terms\",\"Terms\",\"privacy\",\"Privacy\",\"status_page\",\"Status\",{\"_11\":5053,\"_5054\":5055,\"_5056\":5057,\"_5058\":5059,\"_1051\":5060,\"_5061\":5062,\"_5063\":3555,\"_1045\":5064,\"_1043\":5065,\"_5066\":5067,\"_1047\":4598,\"_1049\":5068,\"_1053\":2172,\"_5069\":5070,\"_1059\":2835,\"_1063\":860,\"_1061\":3555,\"_1067\":5071,\"_1071\":5072,\"_1055\":2101,\"_1075\":864,\"_1077\":3026,\"_1081\":2944,\"_1079\":2375,\"_1069\":5073,\"_1057\":5074,\"_1083\":4951,\"_1085\":5075},{\"_11\":5039,\"_5040\":5041,\"_5042\":5043,\"_5044\":5045,\"_5046\":5047,\"_72\":4117,\"_4490\":5048,\"_744\":5049,\"_740\":5050,\"_742\":5051,\"_738\":5052},\"Pricing\",\"pricing_plans\",\"Pricing plans\",\"developers\",{\"_11\":5020,\"_5021\":5022,\"_5023\":5024,\"_5025\":5026,\"_5027\":5028,\"_5029\":5030,\"_5031\":5032,\"_5033\":5034,\"_5035\":5036,\"_5037\":5038},\"resources\",{\"_11\":4972,\"_2978\":4973,\"_4974\":4975,\"_4976\":4977,\"_4978\":4979,\"_4980\":4981,\"_4982\":4983,\"_4984\":4985,\"_4986\":4987,\"_80\":4988,\"_4989\":4990,\"_4991\":4992,\"_4993\":4994,\"_4995\":4996,\"_4997\":4998,\"_4999\":5000,\"_5001\":5002,\"_5003\":5004,\"_5005\":5006,\"_5007\":4470,\"_5008\":5009},\"about\",{\"_11\":671,\"_74\":4970,\"_88\":675,\"_76\":4971},\"Subscribe us\",\"About us\",\"Customers\",\"Resources\",\"Content\",\"updates\",\"Updates\",\"blog\",\"Blog\",\"changelogs\",\"Changelogs\",\"roadmap\",\"Roadmap\",\"branding_assets\",\"Branding assets\",\"youtube_channel\",\"YouTube channel\",\"ui_assets\",\"Sign-in experience assets\",\"Compare\",\"compare_auth0\",\"Logto vs. Auth0\",\"compare_clerk\",\"Logto vs. Clerk\",\"compare_stytch\",\"Logto vs. Stytch\",\"compare_firebase\",\"Logto vs. Firebase\",\"compare_azure_ad_b2c\",\"Logto vs. Azure AD B2C\",\"compare_aws_cognito\",\"Logto vs. AWS Cognito\",\"compare_workos\",\"Logto vs. WorkOS\",\"newsletter\",\"Newsletter\",\"self_hosted\",\"Self-hosted\",\"open_source\",\"highlights\",{\"_5010\":5011,\"_5012\":5013,\"_5014\":5015},\"customer_story\",\"Customer story\",\"featured_blog_posts\",\"Featured blog posts\",\"category\",{\"_5016\":5017,\"_5018\":5019},\"logto_customer\",\"Logto customer\",\"technology\",\"Technology\",\"Developers\",\"docs\",\"Documentation\",\"api\",\"API references\",\"sdk\",\"SDK guide\",\"migration_guide\",\"Migration guide\",\"build_x_with_y\",\"Build X with Y\",\"tools\",\"Tools\",\"jwt_decoder_encoder\",\"JWT decoder \u0026 encoder\",\"base64_decoder_encoder\",\"Base64 encoder \u0026 decoder\",\"oauth_providers_explorer\",\"OAuth providers explorer\",\"Solutions\",\"by_use_case\",\"By use case\",\"by_stage\",\"By stage\",\"by_architecture\",\"By architecture\",\"consumer_app\",\"Consumer apps\",\"Multi-app products\",\"B2B + B2C unified\",\"Enterprise-ready\",\"Enterprises\",\"SaaS products\",\"Products\",\"function\",\"Function\",\"user_experience\",\"User experience\",\"installation_connection\",\"Connected apps\",\"Account center\",\"authentication\",\"Authentication\",\"authorization\",\"Passwordless\",\"Password\",\"m2m\",\"Machine-to-machine\",\"Omni sign-in experience\",\"standard\",\"Open standard sign-in\",\"Webhook\",\"Management API\",\"Protected App (Non-SDK)\",\"Third-party apps (OAuth/OIDC)\",\"Secret vault\",\"Logto: Modern auth infrastructure for developers\",\"Modern auth infrastructure for developers\",\"Logto adds multi-tenancy, enterprise SSO, and RBAC to your SaaS or AI apps. All with OIDC and OAuth 2.1 made simple, fast, and developer-friendly.\",\"unknown_server_error\",\"Unknown server error.\",\"required\",\"Required\",\"select_placeholder\",\"Select\",\"page_info\",\"{{min}}-{{max}} of {{max}}\",14649,\"downloadsTotal\",1430109]\n");</script>
178<!--$-->
178<script>window.__reactRouterContext.streamController.close();</script>
178<!--/$--><!--/$--></body></html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.