Feature requests

Discover our plans and suggest new improvements to Logto.

MFA: Trusted device

SCIM API

Guest mode: Anonymous access

Account API audit logs

Customizable grant TTL per application

Adaptive MFA v2: Context-aware MFA rules

LDAP integration

Granular Management API scopes for M2M applications

M2M authentication IP allowlist

Password force reset policy

Allow setting both plaintext & HTML content for e-mail templates

Support extending refresh token TTL up to 1 year for SPA

Support user search by custom data

Logto CLI

Account center elements

API authentication

RBAC as code

Organization portal

Authentication policy

Single sign-on application dashboard

Custom content blocks in sign-in experience

Logto Management API key

Support Dynamic Client Registration

Google One Tap for websites

Just-in-time user migration

Custom claims for ID tokens

Unverified email/phone number

Support machine-to-machine access policy

Registration from forgot password

Country code restrictions for phone input

Unverified SSO email verification

Support localization parameter in content URLs

Minimum age limit for sign-up

Allow concurrent Google Workspace and social login

i18n for custom content

Support Central Authentication Service protocol

Customize account existence visibility

Passkey as a first authentication factor

Profile fulfillment

Redirect URI wildcards

Username policies

Adaptive MFA

Multiple custom domains

SAML IdP

Account API

Block disposable email registration

Captcha support

Dev to Pro plan production tenant

Email allowlist

App-level access control

Password reset with magic link

Customize session TTL & concurrent grant limits

OAuth Client ID Metadata Documents

Hide Logto branding

Magic link

User role change webhook event

Support WebAuthn for mobile SDK

Prevent search engine indexing

Account API for MFA

Typed library for Management API

Account API for Passkey

Connectors: Sync unverified email

Sign-up capability improvement

Secret vault

Add `ui_locales` authentication parameter

Custom CSS per organization

Console UI for Account API

Call third-party APIs with secret vault

Third-party app for SPA & Native

Customize identifier lockout policy

Add custom data to ID token

Optional sign-up identifiers for social sign-in

IdP-initiated SAML SSO

Feature requests

Discover our plans and suggest new improvements to Logto.

MFA: Trusted device

SCIM API

Guest mode: Anonymous access

Account API audit logs

Customizable grant TTL per application

Adaptive MFA v2: Context-aware MFA rules

LDAP integration

Granular Management API scopes for M2M applications

M2M authentication IP allowlist

Password force reset policy

Allow setting both plaintext & HTML content for e-mail templates

Support extending refresh token TTL up to 1 year for SPA

Support user search by custom data

Logto CLI

Account center elements

API authentication

RBAC as code

Organization portal

Authentication policy

Single sign-on application dashboard

Custom content blocks in sign-in experience

Logto Management API key

Support Dynamic Client Registration

Google One Tap for websites

Just-in-time user migration

Custom claims for ID tokens

Unverified email/phone number

Support machine-to-machine access policy

Registration from forgot password

Country code restrictions for phone input

Unverified SSO email verification

Support localization parameter in content URLs

Minimum age limit for sign-up

Allow concurrent Google Workspace and social login

i18n for custom content

Support Central Authentication Service protocol

Customize account existence visibility

Passkey as a first authentication factor

Profile fulfillment

Redirect URI wildcards

Username policies

Adaptive MFA

Multiple custom domains

SAML IdP

Account API

Block disposable email registration

Captcha support

Dev to Pro plan production tenant

Email allowlist

App-level access control

Password reset with magic link

Customize session TTL & concurrent grant limits

OAuth Client ID Metadata Documents

Hide Logto branding

Magic link

User role change webhook event

Support WebAuthn for mobile SDK

Prevent search engine indexing

Account API for MFA

Typed library for Management API

Account API for Passkey

Connectors: Sync unverified email

Sign-up capability improvement

Secret vault

Add `ui_locales` authentication parameter

Custom CSS per organization

Console UI for Account API

Call third-party APIs with secret vault

Third-party app for SPA & Native

Customize identifier lockout policy

Add custom data to ID token

Optional sign-up identifiers for social sign-in

IdP-initiated SAML SSO

WordPress plugin integration