# Logto

> Logto is an identity and access management (IAM) platform for developers. It handles sign-up, sign-in, single sign-on (SSO), multi-factor authentication (MFA), and role-based access control (RBAC) for web, mobile, and machine-to-machine applications, built on OpenID Connect (OIDC), OAuth 2.1, and SAML.

Logto is built by Silverhand Inc. Logto Cloud is the hosted service, and its free plan includes 50,000 monthly active users. The core is open source at github.com/logto-io/logto for teams that want to self-host. Documentation lives at docs.logto.io, implementation guides at blog.logto.io, and auth-wiki.logto.io is an encyclopedia of authentication and authorization concepts.

## Product

- [Pricing](https://logto.io/pricing): Plan comparison and full feature list
- [Enterprise SSO](https://logto.io/products/enterprise-sso): SAML and OIDC single sign-on for enterprise customers
- [Organizations](https://logto.io/products/organizations): Multi-tenant organizations for B2B and SaaS apps
- [Multi-factor authentication](https://logto.io/products/mfa): MFA with TOTP authenticator apps, passkeys (WebAuthn), SMS and email codes, and backup codes
- [Role-based access control](https://logto.io/products/rbac): Roles and permissions for users and machine-to-machine apps
- [Machine-to-machine](https://logto.io/products/machine-to-machine): Service-to-service authentication with client credentials
- [Passwordless](https://logto.io/products/passwordless): Email and SMS verification codes, magic links, and passkey sign-in
- [Social sign-in](https://logto.io/products/social-sign-in): Sign-in with Google, GitHub, Apple, and other social identity providers
- [Management API](https://logto.io/products/management-api): Programmatic access to every Logto resource
- [AI and MCP auth](https://logto.io/ai): Auth for AI agents, MCP servers, and AI apps

## Solutions

- [B2B and B2C unified](https://logto.io/solutions/b2b-b2c-unified): One auth system serving both business and consumer users
- [SaaS product](https://logto.io/solutions/saas-product): Multi-tenant auth for SaaS, from sign-in to organization management
- [Multi-app product](https://logto.io/solutions/multi-app-product): Shared sign-in across multiple applications
- [Enterprise-ready](https://logto.io/solutions/enterprise-ready): SSO and access control for landing enterprise customers

## Comparisons

- [Logto vs Auth0](https://logto.io/compare/auth0)
- [Logto vs Clerk](https://logto.io/compare/clerk)
- [Logto vs Firebase Authentication](https://logto.io/compare/firebase)
- [Logto vs Stytch](https://logto.io/compare/stytch)
- [Logto vs Azure AD B2C](https://logto.io/compare/azure-ad-b2c)
- [Logto vs Amazon Cognito](https://logto.io/compare/aws-cognito)

## Documentation

- [Docs](https://docs.logto.io): Product documentation, from quick starts to advanced guides
- [Quick starts](https://docs.logto.io/quick-starts): Integration guides for web, mobile, and backend frameworks
- [AI and MCP docs](https://docs.logto.io/use-cases/ai): Add auth to MCP servers and AI agents
- [API reference](https://openapi.logto.io): REST API reference for Logto

## Resources

- [Blog](https://blog.logto.io): Guides on authentication, authorization, and identity management
- [Auth Wiki](https://auth-wiki.logto.io): Encyclopedia of authentication and authorization concepts, from OIDC to JWT
- [GitHub](https://github.com/logto-io/logto): Open-source core repository
- [Open source](https://logto.io/open-source): Self-hosting overview
- [Customers](https://logto.io/customers): Customer stories
- [Trust and security](https://logto.io/trust-and-security): Security practices and compliance

## Free tools

- [JWT decoder](https://logto.io/jwt-decoder): Decode and inspect JSON Web Tokens
- [Base64 decoder](https://logto.io/base64-decoder): Decode and encode Base64 strings
- [OAuth providers explorer](https://logto.io/oauth-providers-explorer): Browse OAuth provider capabilities and endpoints