Logto blog

Discover Logto and explore plenty of resources on authentication, authorization, identity management, open standards (OAuth, OpenID Connect, SAML), and more.

All posts

Tech
- agent
- ai
- login
How Manus handles login state and user credentials in the Cloud Browser
This article covers how Manus manages login sessions in its cloud browser, the security risks of agent-based authentication, and alternatives like OAuth and credential vaults.
6/27/20257 min read
How Manus handles login state and user credentials in the Cloud Browser
Changelogs
- release
- WebAuthn
- Passkey
- jwt
Logto product updates
🎉 Introducing our June release: Account API for Passkeys, access user interaction details in custom JWT, and more updates!
6/27/2025less than a minute read
Logto product updates
Product
- postmortem
Postmortem: Logto auth service outage
On June 12, 2025, Logto services on `logto.app` were briefly disrupted by a Cloudflare outage affecting request routing. The issue was resolved quickly, with no impact on data security or core services.
6/13/2025less than a minute read
Postmortem: Logto auth service outage
Product
- Magic link
- Passwordless
- Authentication
- Invitation
Magic link authentication
Learn to implement magic links for passwordless sign-in, invitation-only registration, and organization member invites using one-time tokens.
6/6/20256 min read
Magic link authentication
Product
- Security
- IAM
IAM security: from fundamentals to advanced protection (Best practices 2025)
Master IAM security threats, essential features, and modern best practices. Discover how Logto’s developer-first IAM platform implements secure authN and authZ.
5/29/20254 min read
IAM security: from fundamentals to advanced protection (Best practices 2025)
Product
- e-commerce
- identity
- gobal
Behind the E-commerce boom: Why auth and identity management matters
Global e-commerce brings complex identity challenges. Managing identity is now key to growth, security, and compliance. This article covers essentials like SSO, multi-identifier sign-ups, MFA, and CAPTCHA.
5/28/20253 min read
Behind the E-commerce boom: Why auth and identity management matters
Changelogs
- release
- email blocklist
- qq connector
Logto product updates
🎉 Introducing our May release: Email blocklist policy, improved phone number handling, QQ social connector, and more updates!
5/27/2025less than a minute read
Logto product updates
Tech
- agent
- agent auth
- ai
- oauth
What’s changed and what hasn’t in Auth and Identity for agentic apps
As AI agents become more capable and connected, building secure and scalable agentic products requires a strong foundation in authentication and identity. This guide breaks down what’s changed, what hasn’t, and what every builder needs to know to navigate the new landscape.
5/22/20256 min read
What’s changed and what hasn’t in Auth and Identity for agentic apps
Product
- Logto OSS
- Logto Cloud
Auth provider: Logto OSS vs. Logto Cloud
Looking for an auth provider? Logto lets you choose between a managed SaaS (SOC2/HIPAA compliant, instant scaling) or a self-hosted open-source solution. Free trial & easy migration.
5/20/20253 min read
Auth provider: Logto OSS vs. Logto Cloud
Product
- ai
- doc
Smarter with AI: Logto’s latest with Inkeep
We’ve upgraded Logto’s docs with AI to help you find answers more efficiently. You can access it across multiple channels—including our documentation site, Logto Cloud, and the Discord community.
5/12/20252 min read
Smarter with AI: Logto’s latest with Inkeep
Tech
- mcp
- modelcontextprotocol
Introduce MCP Auth - Plug-and-play auth for MCP servers
MCP Auth gives you everything you need to add production-ready auth to your MCP server. No weeks spent reading specs or wiring things up.
5/9/2025less than a minute read
Introduce MCP Auth - Plug-and-play auth for MCP servers
Product
- open-source
- auth
- milesone
Logto reaches 10,000 GitHub stars and 1 million identities: The open foundation for identity in the AI era
We’re deeply grateful to have you on this journey. Join us in celebrating Logto’s milestone achievements!
5/8/20253 min read
Logto reaches 10,000 GitHub stars and 1 million identities: The open foundation for identity in the AI era
Product
- security
- auth
- email
- disposable email
Disposable emails: What they are, Why they exist, and how to handle them in your app
Learn what disposable emails are, why they exist, the risks they pose to applications, and the key strategies you can use to detect and block them for stronger security and cleaner user data.
4/28/20253 min read
Disposable emails: What they are, Why they exist, and how to handle them in your app
Product
- iam
- auth solution
What makes a good identity and access management solution
Explores the key elements of an effective IAM solution including user experience, security, integration capabilities, documentation, cost-effectiveness, support, and future readiness based on Logto's experience serving developers.
4/28/20256 min read
What makes a good identity and access management solution
Changelogs
- release
- captcha
- sentinel
- magic link
Logto product updates
🎉 Introducing our April release: Security center, identifier lockout (sentinel), CAPTCHA, magic link support, and explore more updates!
4/27/20252 min read
Logto product updates
Tutorial
- Idp
- apache answer
- community
Logto in action: Integrate Apache Answer to launch a community for your users
Demonstrates how to leverage Logto's 3rd-party app feature to integrate Apache Answer, creating a unified community platform where users can seamlessly access support using their existing accounts.
4/23/20255 min read
Logto in action: Integrate Apache Answer to launch a community for your users
Product
- japan
- logto-cloud
- region
Announcing the Logto Cloud Japan region
Logto Cloud now supports a new region in Japan, offering low-latency access and local data residency compliance for users in the Asia-Pacific region.
4/22/2025less than a minute read
Announcing the Logto Cloud Japan region
Tech
- ai
- OAuth 2.0
- OIDC
- agent
Why your product needs OAuth 2.0 and OIDC — Especially in the AI era
Learn why OAuth 2.0 and OpenID Connect (OIDC) are important for modern authentication, especially in the age of AI, agents, and smart devices. This article covers key use cases, when to implement these protocols, and how to choose the right auth provider for scalability and security.
4/18/20258 min read
Why your product needs OAuth 2.0 and OIDC — Especially in the AI era
Tech
- A2A
- AI
- MCP
A2A vs MCP: Two complementary protocols for the emerging agent ecosystem
This article introduces A2A and MCP — two emerging protocols shaping the future of AI agent systems. It explains how they work, how they differ, and why understanding this architecture matters for developers, designers, and AI product builders.
4/11/20259 min read
A2A vs MCP: Two complementary protocols for the emerging agent ecosystem
Tech
- mcp
- mcp-auth
- oauth
In-Depth review of the MCP authorization spec (2025-03-26 edition)
Deeply analyzes the MCP Authorization Specification, examining MCP Server's dual roles as Authorization and Resource Server, Dynamic Client Registration mechanisms, and practical considerations for implementing this protocol in real-world scenarios.
4/8/20259 min read
In-Depth review of the MCP authorization spec (2025-03-26 edition)

Logto blog

Featured posts

Logto product updates

RBAC in practice: Implementing secure authorization for your application

Build a multi-tenant SaaS application: A complete guide from design to implementation

All posts

How Manus handles login state and user credentials in the Cloud Browser

Logto product updates

Postmortem: Logto auth service outage

Magic link authentication

IAM security: from fundamentals to advanced protection (Best practices 2025)

Behind the E-commerce boom: Why auth and identity management matters

Logto product updates

What’s changed and what hasn’t in Auth and Identity for agentic apps

Auth provider: Logto OSS vs. Logto Cloud

Smarter with AI: Logto’s latest with Inkeep

Introduce MCP Auth - Plug-and-play auth for MCP servers

Logto reaches 10,000 GitHub stars and 1 million identities: The open foundation for identity in the AI era

Disposable emails: What they are, Why they exist, and how to handle them in your app

What makes a good identity and access management solution

Logto product updates

Logto in action: Integrate Apache Answer to launch a community for your users

Announcing the Logto Cloud Japan region

Why your product needs OAuth 2.0 and OIDC — Especially in the AI era

A2A vs MCP: Two complementary protocols for the emerging agent ecosystem

In-Depth review of the MCP authorization spec (2025-03-26 edition)