What is this?
Logto is open-source authentication and authorization infrastructure for SaaS and AI apps — a server that handles sign-in, identity, and access control for you, built on OIDC, OAuth 2.1, and SAML.
Logto is open-source authentication and authorization infrastructure for SaaS and AI apps — a server that handles sign-in, identity, and access control for you, built on OIDC, OAuth 2.1, and SAML.Is Logto a library I import, or a service I run?Neither — it's a server you self-host or consume as managed Logto Cloud, and your apps talk to it through SDKs for 30+ frameworks like React, Next.js, Vue, Flutter, Go, and Python.
Neither — it's a server you self-host or consume as managed Logto Cloud, and your apps talk to it through SDKs for 30+ frameworks like React, Next.js, Vue, Flutter, Go, and Python.How do I run it for the first time?Try it instantly by launching Logto OSS in GitPod — it starts in seconds and prints an 'App is running at' URL — or follow the full OSS installation guide for local development.
Try it instantly by launching Logto OSS in GitPod — it starts in seconds and prints an 'App is running at' URL — or follow the full OSS installation guide for local development.What do I need installed to self-host it?Node.js ^22.14.0 with pnpm ^9 or ^10; npm and yarn are blocked by a preinstall check. Docker and docker-compose files also ship in the repo.
Node.js ^22.14.0 with pnpm ^9 or ^10; npm and yarn are blocked by a preinstall check. Docker and docker-compose files also ship in the repo.Any pitfalls when setting it up locally?The strict part is the toolchain — pnpm on Node 22 is mandatory. The rest is pitched as turnkey: the README claims production-ready auth with no workarounds for multi-tenancy, SSO, and RBAC.
The strict part is the toolchain — pnpm on Node 22 is mandatory. The rest is pitched as turnkey: the README claims production-ready auth with no workarounds for multi-tenancy, SSO, and RBAC.What kinds of apps can I secure with it?Anything that speaks OIDC or OAuth: SPAs, web apps, mobile apps, APIs, machine-to-machine services, and CLI tools.
Anything that speaks OIDC or OAuth: SPAs, web apps, mobile apps, APIs, machine-to-machine services, and CLI tools.What comes pre-built in the sign-in experience?Sign-up, sign-in, social login, Google One Tap, MFA, and SSO flows ship ready-made with customizable UIs, so you don't build auth screens yourself; clear guides promise SDK setup in minutes.
Sign-up, sign-in, social login, Google One Tap, MFA, and SSO flows ship ready-made with customizable UIs, so you don't build auth screens yourself; clear guides promise SDK setup in minutes.How does it fit multi-tenant B2B SaaS products?Organizations are first-class: organization RBAC, member invites, and just-in-time provisioning, so each customer company gets its own members, roles, and access on top of general multi-tenancy.
Organizations are first-class: organization RBAC, member invites, and just-in-time provisioning, so each customer company gets its own members, roles, and access on top of general multi-tenancy.Why choose Logto over wiring OAuth by hand?The pitch: it removes the protocol pain of OIDC, OAuth 2.1, and SAML, ships SDKs for 30+ frameworks, and gives multi-tenancy, enterprise SSO, and RBAC without workarounds.
The pitch: it removes the protocol pain of OIDC, OAuth 2.1, and SAML, ships SDKs for 30+ frameworks, and gives multi-tenancy, enterprise SSO, and RBAC without workarounds.What are similar projects?zitadel, casdoor, django-allauth, supertokens-core, cas, hydra, keycloak, authentik
zitadel, casdoor, django-allauth, supertokens-core, cas, hydra, keycloak, authentikWhich topics is it in?mfa, login, openid-connect, identity, password, totp, saml, sms, authorization, multi-tenant, jwt, sso
mfa, login, openid-connect, identity, password, totp, saml, sms, authorization, multi-tenant, jwt, sso