logto: Build Authentication and Authorization for Apps

Overview

Logto is authentication and authorization infrastructure for SaaS and AI applications. It helps teams implement identity and access management using standards such as OIDC, OAuth 2.1, and SAML, rather than building those protocol flows themselves.

It is suited to products that need user sign-in as well as organization-aware access control, enterprise identity integrations, or authentication for APIs and machine-to-machine clients. Teams can use the open-source deployment or choose Logto Cloud.

Key Features

• Pre-built sign-up and sign-in flows with customizable user interfaces.
• OIDC, OAuth 2.1, and SAML support.
• Multi-tenancy and organization features, including organization RBAC and member invitations.
• Enterprise single sign-on and connections to external identity providers.
• Authentication options including social login and multi-factor authentication.
• SDKs for more than 30 frameworks, with support for web, mobile, API, and machine-to-machine integrations.
• Integrations for Model Context Protocol and agent-based AI architectures.

Use Cases

• SaaS teams adding account sign-in and organization-level roles for customers and their members.
• Product teams offering enterprise customers SSO and connecting their existing identity providers.
• Developers securing APIs and machine-to-machine services with standards-based identity flows.
• Teams building AI or agent-based applications that need user authentication and access controls.

Project Facts

• Language: TypeScript
• License: MPL-2.0
• Stars: 14.6k
• Forks: 1.2k
• Topics: authentication, authorization, email, identity, jwt, login, logto, mfa, oauth2, openid-connect, password, passwordless, rbac, saml, signup, sms, social-login, sso, totp, typescript
• Archived: No

Getting Started

For a local setup with Docker Compose, run:

curl -fsSL https://raw.githubusercontent.com/logto-io/logto/HEAD/docker-compose.yml | docker compose -p logto -f - up

This requires Docker Desktop. For Node.js setup, cloud access, and full installation instructions, see the README and OSS installation guide.

Considerations

• The Docker Compose quick start requires Docker Desktop. The Node.js option requires PostgreSQL.
• Authentication and authorization infrastructure is security-sensitive. Review configuration, deployment, and integration choices against your application's requirements.
• The repository is licensed under MPL-2.0; check the license terms when incorporating or modifying the project.
• Logto Cloud is a separate managed option; using the repository for self-hosting involves setup and operations.

Repository: logto-io/logto. Project site: logto.io.