Feature requests

Discover our plans and suggest new improvements.

In Progress

Password reset with magic link

OAuth Client ID Metadata Documents

Planned

SCIM API

Guest mode: Anonymous access

Email allowlist

MFA: Trusted device

Account API audit logs

Adaptive MFA v2: Context-aware MFA rules

Customizable grant TTL per application

LDAP integration

M2M authentication IP allowlist

Granular Management API scopes for M2M applications

Password force reset policy

Allow setting both plaintext & HTML content for e-mail templates

Support extending refresh token TTL up to 1 year for SPA

Logto CLI

Support user search by custom data

Backlog

Account center elements

API authentication

RBAC as code

Organization portal

Authentication policy

Single sign-on application dashboard

Custom content blocks in sign-in experience

Logto Management API key

Support Dynamic Client Registration

Google One Tap for websites

Just-in-time user migration

Custom claims for ID tokens

Unverified email/phone number

Support machine-to-machine access policy

Registration from forgot password

Country code restrictions for phone input

Unverified SSO email verification

Support localization parameter in content URLs

Minimum age limit for sign-up

Allow concurrent Google Workspace and social login

i18n for custom content

Customize account existence visibility

Support Central Authentication Service protocol

Completed

Passkey as a first authentication factor

Profile fulfillment

Out-of-the-box account settings

Adaptive MFA

Redirect URI wildcards

OAuth 2.0 device flow

Username policies

Multiple custom domains

SAML IdP

Account API

Block disposable email registration

Captcha support

Dev to Pro plan production tenant

App-level access control

Customize session TTL & concurrent grant limits

Hide Logto branding

User role change webhook event

Support WebAuthn for mobile SDK

Magic link

Prevent search engine indexing

Account API for MFA

Typed library for Management API

Account API for Passkey

Connectors: Sync unverified email

Sign-up capability improvement

Add custom data to ID token

Account center: security & custom CSS

Secret vault

Add `ui_locales` authentication parameter

Custom CSS per organization

Console UI for Account API

Third-party app for SPA & Native

Call third-party APIs with secret vault

Customize identifier lockout policy

Optional sign-up identifiers for social sign-in

IdP-initiated SAML SSO

Feature requests

Discover our plans and suggest new improvements.

In Progress

Password reset with magic link

OAuth Client ID Metadata Documents

Planned

SCIM API

Guest mode: Anonymous access

Email allowlist

MFA: Trusted device

Account API audit logs

Adaptive MFA v2: Context-aware MFA rules

Customizable grant TTL per application

LDAP integration

M2M authentication IP allowlist

Granular Management API scopes for M2M applications

Password force reset policy

Allow setting both plaintext & HTML content for e-mail templates

Support extending refresh token TTL up to 1 year for SPA

Logto CLI

Support user search by custom data

Backlog

Account center elements

API authentication

RBAC as code

Organization portal

Authentication policy

Single sign-on application dashboard

Custom content blocks in sign-in experience

Logto Management API key

Support Dynamic Client Registration

Google One Tap for websites

Just-in-time user migration

Custom claims for ID tokens

Unverified email/phone number

Support machine-to-machine access policy

Registration from forgot password

Country code restrictions for phone input

Unverified SSO email verification

Support localization parameter in content URLs

Minimum age limit for sign-up

Allow concurrent Google Workspace and social login

i18n for custom content

Customize account existence visibility

Support Central Authentication Service protocol

Completed

Passkey as a first authentication factor

Profile fulfillment

Out-of-the-box account settings

Adaptive MFA

Redirect URI wildcards

OAuth 2.0 device flow

Username policies

Multiple custom domains

SAML IdP

Account API

Block disposable email registration

Captcha support

Dev to Pro plan production tenant

App-level access control

Customize session TTL & concurrent grant limits

Hide Logto branding

User role change webhook event

Support WebAuthn for mobile SDK

Magic link

Prevent search engine indexing

Account API for MFA

Typed library for Management API

Account API for Passkey

Connectors: Sync unverified email

Sign-up capability improvement

Add custom data to ID token

Account center: security & custom CSS

Secret vault

Add `ui_locales` authentication parameter

Custom CSS per organization

Console UI for Account API

Third-party app for SPA & Native

Call third-party APIs with secret vault

Customize identifier lockout policy

Optional sign-up identifiers for social sign-in

IdP-initiated SAML SSO

WordPress plugin integration