A set of framework-agnostic web components that can interact with Account API.

A set of APIs and rules that allow end-users to update their identifiers and profile.

Use Logto as a SAML identity provider.

Collect mandatory and optional profile fields during user registration.

Support RFC 8628: OAuth 2.0 Device Authorization Grant.

Then no password is required for sign-in.

Customize policies to control authentication, such as username rules, IP blacklist / whitelist, verification code expiration, etc.

Authenticate users via API. No redirection needed.

Support multiple custom domains and render different sign-in experience brandings according to the domain.

Allow to use code-based configuration to provision role-based access control, for example, a YAML file.

A set of framework-agnostic web components that can interact with Experience API.

Duplicate dev tenant configurations (connectors, roles, resources, etc.) to a new production tenant.

A set of framework-agnostic UI elements that can be customized and integrated within your apps.

Trigger MFA according to the current risk level, e.g. a new device.

An out-of-the-box solution that allows org admins to manage identities, organization profiles, and set up enterprise SSO themselves.

System for cross-domain identity management APIs.

Support Client Initiated Backchannel Authentication (CIBA) Flow.

Implement RFC 9396 and provide some useful feature around it.