Repolode
Submit
logto-io

logto-io/logto

Open-source authentication and authorization infrastructure built on OIDC and OAuth 2.1, with multi-tenancy, enterprise SSO and RBAC for SaaS and AI apps.

Open-source alternative to:Auth0OktaAWS Cognito

View on GitHubWebsite
Stars
14,729
Forks
1,222
Open issues
153
Last commit
6 hours ago

What is it?

Logto is an auth platform for SaaS and AI applications. It handles sign-up, sign-in and access control so that developers do not have to implement OpenID Connect and OAuth 2.1 flows from scratch. It covers multi-tenancy with organizations, enterprise single sign-on, and role-based access control.

The project offers pre-built sign-in experiences that can be customized, along with SDKs for more than 30 frameworks including React, Next.js, Vue, Flutter and Go. It can connect to external identity providers such as Google, Facebook, Azure AD and Okta, and it supports SAML alongside OIDC. Logto also states support for Model Context Protocol and agent-based architectures.

Logto can be run self-hosted with Docker Compose or Node.js and PostgreSQL, or used through the managed Logto Cloud service.

Key features

  • 01Multi-tenancy with organizations and organization-level RBAC.
  • 02Enterprise SSO and SAML support alongside OIDC and OAuth 2.1.
  • 03Customizable pre-built sign-in flows with social login, MFA and passwordless options.
  • 04SDKs for more than 30 frameworks and languages.
  • 05Connectors for external identity providers such as Google, Okta and Azure AD.
  • 06Self-hosting via Docker Compose or Node.js, or use of the managed cloud.

Use cases

  • Adding login, sign-up and SSO to a multi-tenant SaaS product.
  • Securing APIs and machine-to-machine access with OAuth 2.1 tokens.
  • Providing authentication for AI agent or Model Context Protocol applications.
  • Replacing a commercial hosted auth service with a self-hosted alternative.

Quick start

  1. 1

    Sign up for Logto Cloud (managed, no setup)

  2. 2

    Run the Docker Compose setup from the README (requires Docker Desktop)

  3. 3

    Using Node.js (requires PostgreSQL), create the Logto project

    npm init @logto

Things to know

  • The Node.js setup requires a separate PostgreSQL database.
  • Self-hosting the open-source version takes setup effort compared with Logto Cloud.

Topics

#authentication#authorization#oidc#oauth2#sso#rbac#identity#multi-tenancy#email#jwt

FAQ

What is logto?
Open-source authentication and authorization infrastructure built on OIDC and OAuth 2.1, with multi-tenancy, enterprise SSO and RBAC for SaaS and AI apps. Logto is an auth platform for SaaS and AI applications. It handles sign-up, sign-in and access control so that developers do not have to implement OpenID Connect and OAuth 2.1 flows from scratch. It covers multi-tenancy with organizations, enterprise single sign-on, and role-based access control.
Is logto free to use? What license does it have?
logto is open source under the MPL-2.0 license. Check the license terms before using it in commercial products.
Is logto still maintained?
Actively maintained. The last commit to logto was on Oct 20, 2026.
What can I use logto for?
Adding login, sign-up and SSO to a multi-tenant SaaS product. Securing APIs and machine-to-machine access with OAuth 2.1 tokens. Providing authentication for AI agent or Model Context Protocol applications. Replacing a commercial hosted auth service with a self-hosted alternative.
How do I install logto?
Sign up for Logto Cloud (managed, no setup) Run the Docker Compose setup from the README (requires Docker Desktop) Using Node.js (requires PostgreSQL), create the Logto project: npm init @logto
Where can I get logto?
The source code and installation instructions are on GitHub: https://github.com/logto-io/logto

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects