Everything your SaaS needs for auth
Enterprise-grade authentication that you configure, not code. Every feature on every plan.
Management Portal
Everything you need to configure, monitor, and manage your authentication — in one place.
- Application (client) management
- SSO connection configuration
- User directory browser
- SCIM token management
- Branding, billing, domains, and settings
- Built-in sandbox environment for testing
OAuth 2.0 & OpenID Connect
A standards-compliant authorization server, ready to go. No libraries to wire up, no endpoints to build.
- Authorization Code with PKCE
- Client Credentials grants
- Refresh token rotation with configurable lifetimes
- Custom scopes in access and ID tokens
- Per-application token lifetime settings
- Per-application CORS origin management
Enterprise SSO
The feature that closes enterprise deals. Your customers connect their own identity provider — you don't write a line of code.
- SAML 2.0 with one-click metadata import
- OIDC federation — Google Workspace, Azure AD, Okta, and more
- Domain-based routing sends users to their IdP automatically
- Multiple connections per organization
- SP-initiated and IdP-initiated flows
SCIM 2.0 Provisioning
Enterprise IT teams expect automatic user sync. Give it to them without building it yourself.
- User create, update, and deactivate sync
- Group membership sync
- Scoped SCIM tokens with expiration
- Works with Okta, Azure AD, OneLogin, JumpCloud
Multi-Factor Authentication
Security your customers can trust, with enforcement policies you control.
- TOTP authenticator app support (Google Authenticator, Authy, etc.)
- Built-in QR code setup flow
- Per-application MFA policy — disabled, optional, or required
- Account-wide default MFA policy
- Recovery codes for backup access
User Management
The full user lifecycle, handled. Registration, verification, password resets — all built in.
- Registration with email verification
- Password reset with secure token links
- Configurable password complexity rules
- Account lockout after failed attempts
- User directory with search in the portal
Customer Support
A real-time support inbox, built in, not bolted on. Your customers write in their own language, you read and reply in yours, and the AI translates both ways. Most platforms sell support tooling as a paid add-on. Ours is free on every plan.
- Real-time inbox: messages land live, with no refresh button to babysit.
- Two-way AI translation. Customers write in their language, you reply in yours, and everyone can still see the original.
- Language locked from the first message. No dropdowns, no flag pickers, no asking.
- Survives email, fully translated both ways, so the conversation never breaks when it leaves the app.
- Anonymous or signed in. Customers can reach you before they can even log in.
- Included on every plan. No support add-on, no per-seat fee.
Custom Branding
Your customers see your product, not ours. White-label the entire login experience.
- Your logo, colors, and application name
- Custom CSS for full visual control
- Toggle registration and password reset links
- Optional "Powered by" badge
Custom Domains
Serve authentication from your own domain. TLS is handled automatically.
- CNAME-based setup — auth.yourdomain.com
- Automatic TLS certificate provisioning
- Bring your own certificate if you prefer
- DNS verification flow in the portal