One identity layer for every app you ship.
Enterprise SSO, SCIM directory sync, MFA and passkeys, RBAC, and a
tamper-evident audit trail — self-hostable, and yours.
-
SAML & OIDC single sign-on
-
SCIM 2.0 directory provisioning
-
Passkeys, TOTP, and magic links
-
Hash-chained, tamper-evident audit