Logto blog

Discover Logto and explore plenty of resources on authentication, authorization, identity management, open standards (OAuth, OpenID Connect, SAML), and more.

Featured posts

Cover

Changelogs

  • release
  • email blocklist
  • qq connector

Logto product updates

🎉 Introducing our May release: Email blocklist policy, improved phone number handling, QQ social connector, and more updates!

Yijun
Yijun
Developer
Logto product updates

Tutorial

  • rbac
  • role design
  • rbac implementation

RBAC in practice: Implementing secure authorization for your application

RBAC in practice: Implementing secure authorization for your application

Tech

  • saas development
  • multi-tenant saas
  • saas architecture
  • saas boilerplate

Build a multi-tenant SaaS application: A complete guide from design to implementation

Build a multi-tenant SaaS application: A complete guide from design to implementation

All posts

  • Cover

    Product

    • Magic link
    • Passwordless
    • Authentication
    • Invitation

    Magic link authentication

    Learn to implement magic links for passwordless sign-in, invitation-only registration, and organization member invites using one-time tokens.

    Magic link authentication
  • Cover

    Product

    • Security
    • IAM

    IAM security: from fundamentals to advanced protection (Best practices 2025)

    Master IAM security threats, essential features, and modern best practices. Discover how Logto’s developer-first IAM platform implements secure authN and authZ.

    IAM security: from fundamentals to advanced protection (Best practices 2025)
  • Cover

    Product

    • e-commerce
    • identity
    • gobal

    Behind the E-commerce boom: Why auth and identity management matters

    Global e-commerce brings complex identity challenges. Managing identity is now key to growth, security, and compliance. This article covers essentials like SSO, multi-identifier sign-ups, MFA, and CAPTCHA.

    Behind the E-commerce boom: Why auth and identity management matters
  • Cover

    Changelogs

    • release
    • email blocklist
    • qq connector

    Logto product updates

    🎉 Introducing our May release: Email blocklist policy, improved phone number handling, QQ social connector, and more updates!

    Logto product updates
  • Cover

    Tech

    • agent
    • agent auth
    • ai
    • oauth

    What’s changed and what hasn’t in Auth and Identity for agentic apps

    As AI agents become more capable and connected, building secure and scalable agentic products requires a strong foundation in authentication and identity. This guide breaks down what’s changed, what hasn’t, and what every builder needs to know to navigate the new landscape.

    What’s changed and what hasn’t in Auth and Identity for agentic apps
  • Cover

    Product

    • Logto OSS
    • Logto Cloud

    Auth provider: Logto OSS vs. Logto Cloud

    Looking for an auth provider? Logto lets you choose between a managed SaaS (SOC2/HIPAA compliant, instant scaling) or a self-hosted open-source solution. Free trial & easy migration.

    Auth provider: Logto OSS vs. Logto Cloud
  • Cover

    Product

    • ai
    • doc

    Smarter with AI: Logto’s latest with Inkeep

    We’ve upgraded Logto’s docs with AI to help you find answers more efficiently. You can access it across multiple channels—including our documentation site, Logto Cloud, and the Discord community.

    Smarter with AI: Logto’s latest with Inkeep
  • Cover

    Tech

    • mcp
    • modelcontextprotocol

    Introduce MCP Auth - Plug-and-play auth for MCP servers

    MCP Auth gives you everything you need to add production-ready auth to your MCP server. No weeks spent reading specs or wiring things up.

    Introduce MCP Auth - Plug-and-play auth for MCP servers
  • Cover

    Product

    • open-source
    • auth
    • milesone

    Logto reaches 10,000 GitHub stars and 1 million identities: The open foundation for identity in the AI era

    We’re deeply grateful to have you on this journey. Join us in celebrating Logto’s milestone achievements!

    Logto reaches 10,000 GitHub stars and 1 million identities: The open foundation for identity in the AI era
  • Cover

    Product

    • iam
    • auth solution

    What makes a good identity and access management solution

    Explores the key elements of an effective IAM solution including user experience, security, integration capabilities, documentation, cost-effectiveness, support, and future readiness based on Logto's experience serving developers.

    What makes a good identity and access management solution
  • Cover

    Product

    • security
    • auth
    • email
    • disposable email

    Disposable emails: What they are, Why they exist, and how to handle them in your app

    Learn what disposable emails are, why they exist, the risks they pose to applications, and the key strategies you can use to detect and block them for stronger security and cleaner user data.

    Disposable emails: What they are, Why they exist, and how to handle them in your app
  • Cover

    Changelogs

    • release
    • captcha
    • sentinel
    • magic link

    Logto product updates

    🎉 Introducing our April release: Security center, identifier lockout (sentinel), CAPTCHA, magic link support, and explore more updates!

    Logto product updates
  • Cover

    Tutorial

    • Idp
    • apache answer
    • community

    Logto in action: Integrate Apache Answer to launch a community for your users

    Demonstrates how to leverage Logto's 3rd-party app feature to integrate Apache Answer, creating a unified community platform where users can seamlessly access support using their existing accounts.

    Logto in action: Integrate Apache Answer to launch a community for your users
  • Cover

    Product

    • japan
    • logto-cloud
    • region

    Announcing the Logto Cloud Japan region

    Logto Cloud now supports a new region in Japan, offering low-latency access and local data residency compliance for users in the Asia-Pacific region.

    Announcing the Logto Cloud Japan region
  • Cover

    Tech

    • ai
    • OAuth 2.0
    • OIDC
    • agent

    Why your product needs OAuth 2.0 and OIDC — Especially in the AI era

    Learn why OAuth 2.0 and OpenID Connect (OIDC) are important for modern authentication, especially in the age of AI, agents, and smart devices. This article covers key use cases, when to implement these protocols, and how to choose the right auth provider for scalability and security.

    Why your product needs OAuth 2.0 and OIDC — Especially in the AI era
  • Cover

    Tech

    • A2A
    • AI
    • MCP

    A2A vs MCP: Two complementary protocols for the emerging agent ecosystem

    This article introduces A2A and MCP — two emerging protocols shaping the future of AI agent systems. It explains how they work, how they differ, and why understanding this architecture matters for developers, designers, and AI product builders.

    A2A vs MCP: Two complementary protocols for the emerging agent ecosystem
  • Cover

    Tech

    • mcp
    • mcp-auth
    • oauth

    In-Depth review of the MCP authorization spec (2025-03-26 edition)

    Deeply analyzes the MCP Authorization Specification, examining MCP Server's dual roles as Authorization and Resource Server, Dynamic Client Registration mechanisms, and practical considerations for implementing this protocol in real-world scenarios.

    In-Depth review of the MCP authorization spec (2025-03-26 edition)
  • Cover

    Product

    • AI
    • MCP
    • Agent
    • IdP

    What you need to have in place for AI Agent and MCP Integration for your product

    In this piece, we explore the latest AI breakthroughs that underscore the urgency of secure agent and MCP integration. We highlight OAuth-based authentication as an important measure for protecting user credentials and explain how Logto can help your product serve as both an MCP server and an identity provider in the rapidly growing AI ecosystem.

    What you need to have in place for AI Agent and MCP Integration for your product
  • Cover

    Changelogs

    • release
    • sign-up identifiers
    • wordpress

    Logto product updates

    🎉 Introducing our March release: Create your ideal sign-up flow with multiple identifiers, connect with WordPress in minutes, and explore more updates!

    Logto product updates
  • Cover

    Product

    • Firebase Auth
    • Pricing

    2025 Firebase Authentication’s latest pricing explained and the best alternatives

    This article provides an overview and breaks down the key details of Firebase Authentication. It covers what Firebase Auth is, a summary of its pricing, and the best alternatives to Firebase Auth.

    2025 Firebase Authentication’s latest pricing explained and the best alternatives