logto-io/logto

Project overview

The project addresses the complexity of building production-ready authentication by providing multi-tenancy, organization RBAC, enterprise SSO, and pre-built sign-in flows with SDKs for over 30 frameworks, while also working for agent-based AI architectures via Model Context Protocol support.

Deployment

Refer to project documentation

License

MPL-2.0

Best for

• Developers building SaaS applications who need multi-tenancy, organization RBAC, and enterprise SSO.
• Enterprise teams requiring SSO support via OIDC, OAuth 2.1, and SAML.
• Developers working with agent-based AI architectures that use Model Context Protocol.

Key capabilities

• Provides ready-to-use multi-tenancy, organization RBAC, member invites, and just-in-time provisioning.
• Supports enterprise SSO with full support for OIDC, OAuth 2.1, and SAML.
• Offers customizable UIs and pre-built flows for sign-up, sign-in, social login, Google One Tap, MFA, and SSO.
• Provides developer-first SDKs for 30+ frameworks including React, Next.js, Angular, Vue, Flutter, Go, and Python.
• Works for Model Context Protocol and agent-based AI architectures.

Limitations and risks

• A PostgreSQL database is required for the Node.js setup path.
• A paid hosted service is available; the cost dependency depends on whether the hosted option is used versus self-hosting.

Getting started

• Fetch the docker-compose.yml via a curl command, run docker compose up, then access the web GUI.