Authgear

Authgear is an open-source, self-hosted web app and server that provides identity and access management for B2C and B2B applications. It functions as a turnkey solution for consumer authentication, allowing developers to manage user identities and access controls through a centralized system. The software is designed to handle the complexities of user registration, session management, and identity verification for SaaS products and multi-app ecosystems.

The software is deployed as a server and includes a web-based portal for configuration and user management. Developers integrate it into their applications using provided SDKs and a GraphQL Admin API, while end users interact with pre-built authentication flows for signing up and logging in. It can be hosted on private infrastructure or used via a managed cloud service, offering flexibility in how identity data is stored and managed.

Key features

• Passwordless login via magic links or OTP through email, SMS, and WhatsApp
• Support for Passkeys and FIDO2 compliant hardware keys
• Multi-factor authentication including TOTP, SMS, and email
• Pre-built, customizable signup, login, and account settings pages
• Role-based access control using roles and groups
• SSO support for OIDC, OAuth 2.0, and SAML protocols
• Enterprise connections for ADFS and LDAP
• Webhooks and TypeScript hooks for custom logic execution
• Biometric login support for iOS and Android devices

Authgear is built around a core server that manages authentication logic, paired with a Portal for administrative tasks and an AuthUI for the frontend experience. The architecture includes a GraphQL interface that allows developers to programmatically manage resources and authentication configurations. It supports localization through i18n and allows for the customization of email and SMS templates to match brand requirements. For production environments, the project provides a Helm Chart to facilitate deployment on Kubernetes clusters.

It serves as a comprehensive identity provider for developers who require a balance between out-of-the-box functionality and the ability to self-host their authentication infrastructure for better control over user data.