Features
- Authentication Flows — OAuth2 authorization code flow, PKCE, client credentials, device authorization
- SPA Authentication — Patterns for securing single-page applications
- Multi-Factor Authentication — TOTP, email, and SMS second factors
- Hooks — Customize the authentication lifecycle with code hooks, webhooks, and form hooks
- Invitations & Tickets — Send Auth0-compatible organization invitations and issue email-verification / password-change tickets
- Account Linking — Consolidate multiple identities into a single user profile
- Impersonation — Allow admins to sign in as another user
- Custom Token Exchange — Exchange a token your backend signed for AuthHero tokens (RFC 8693)
- Session Management — Login sessions, user sessions, and session configuration
- RBAC & Scopes — Detailed guide for implementing role-based access control
- SCIM Provisioning — Provision and deprovision users from Okta or Microsoft Entra ID over SCIM 2.0
- Forms & Flows — Custom forms and server-driven authentication flows
- Multi-Tenant SaaS — Complete guide for setting up multi-tenant authentication
- Tenant Export & Import — Move a tenant's configuration and users between deployments as a single JSON-lines file
- User Creation Flow — How user registration and creation works