Logto blog

Discover Logto and explore plenty of resources on authentication, authorization, identity management, open standards (OAuth, OpenID Connect, SAML), and more.

All posts

Product
- Personal access token
- Authentication
Simplify API authentication with personal access token: A more secure API token
Explain how personal access tokens (PATs) work, when to use them, how to support PAT features in your services, and how they differ from API keys, API tokens, bearer tokens, OAuth tokens, and passwords.
2/20/20257 min read
Simplify API authentication with personal access token: A more secure API token
Product
- impersonation
- ai
- authentication
- authorization
What is impersonation in cybersecurity and identity management? How can AI agents use it?
Learn how impersonation is used in cybersecurity and identity management, and how AI agents can use this feature.
2/19/20255 min read
What is impersonation in cybersecurity and identity management? How can AI agents use it?
Product
- soc2
- security
- compliance
Logto is now SOC 2 Type II compliant!
Logto is now SOC 2 Type II compliant, proving our commitment to security.
2/16/2025less than a minute read
Logto is now SOC 2 Type II compliant!
Product
- SAML
- SSO
- Identity Provider
Simplify SAML app integration for developers
Learn what SAML is, how to implement SSO, and quick steps to integrate SAML apps as an Identity Provider (IdP) or Service Provider (SP).
2/13/20255 min read
Simplify SAML app integration for developers
Product
- Amazon Cognito
- Pricing
2025 Amazon Cognito's latest pricing explained and the best Amazon Cognito alternatives
This article provides an overview and breaks down the key details of Amazon Cognito. It covers what Amazon Cognito is, a summary of its pricing, and the best alternatives to Amazon Cognito.
2/13/20257 min read
2025 Amazon Cognito's latest pricing explained and the best Amazon Cognito alternatives
Product
- SaaS
- Multi-tenant
- B2B
- Authentication
What is B2B SaaS, and what will the post-SaaS era (2025+) with AI look like?
A concise guide to B2B SaaS, covering key features, metrics (MRR, ARR, CAC, LTV), and the future of AI in SaaS. Get our idea and thoughts on how AI agents and dynamic systems will shape SaaS, and why human control remains essential. Ideal for SaaS developers and AI builders.
2/7/20259 min read
What is B2B SaaS, and what will the post-SaaS era (2025+) with AI look like?
Product
- token
- oidc
- refresh token
- rotation
- security
What is refresh token rotation and why is it important?
Dive in and let's talk about why refresh token rotation is an effective way to protect the safety of your refresh tokens.
12/22/20243 min read
What is refresh token rotation and why is it important?
Product
- pricing-update
Logto plan update: Optimizing token quotas to protect Logto from abuse and ensure reliability
Token changes will only affect Free plan users and new Pro users.
12/18/2024less than a minute read
Logto plan update: Optimizing token quotas to protect Logto from abuse and ensure reliability
Product
- token
- oidc
- refresh token
- access token
- ID token
Understanding access tokens, refresh tokens, and ID tokens in OpenID Connect (OIDC) protocol
The OpenID Connect (OIDC) Protocol, has emerged as a widely adopted standard for identity management. But do you really understand the roles and attributes of these tokens?
12/16/20244 min read
Understanding access tokens, refresh tokens, and ID tokens in OpenID Connect (OIDC) protocol
Product
- pricing
- auth0 alternatives
- auth0
2025 Auth0's latest pricing explained and the best Auth0 alternatives
Auth0 has updated its pricing twice within a year. This article provides an overview and breaks down the key details. It covers what Auth0 is, a summary of its pricing, and the best alternatives to Auth0.
12/11/20246 min read
2025 Auth0's latest pricing explained and the best Auth0 alternatives
Product
- OTP bots
- MFA
- Authentication
- Security
- Passwordless
OTP bots: What they are and how to prevent attacks
Learn what OTP bots are, how they exploit one-time passwords with real cases, and strategies to protect your business from these cyber threats. This guide offers actionable tips for professionals in product development and enterprise management.
12/9/20249 min read
OTP bots: What they are and how to prevent attacks
Product
- authenticator app
- 2FA
- MFA
- TOTP
- Google Authenticator
- Microsoft Authenticator
What is an authenticator app
Learn what an authenticator app is and how it protects your accounts. Includes a detailed explanation of how it works and a step-by-step example guide to use an authenticator app.
12/9/20244 min read
What is an authenticator app
Product
- 404-not-found
- logto-unknown-session
- authorization-code-flow
Why you might see a 404 when signing in to your Logto-integrated app
Have you ever encountered a "404 Not Found" error when you tried to sign in to a Logto-integrated app? This blog post explains why this happens and what you can do to avoid it.
10/28/20242 min read
Why you might see a 404 when signing in to your Logto-integrated app
Product
- webhook
- welcome email
- Sync authorization
Real use cases: Expanding your auth system with webhooks
Discover real-world cases of using Logto webhooks for authentication and authorization, including sending welcome emails, syncing data to your database, updating user roles/permissions in real-time, and integrating with third-party analytics.
10/28/20243 min read
Real use cases: Expanding your auth system with webhooks
Product
- enterprise sso
- customer iam
- workforce iam
- single sign-in
Enterprise SSO: What it is, how it works, and why it matters
Explore the world of Enterprise Single Sign-On (SSO) and discover how it can benefit your business. This guide includes straightforward explanations, real-world examples, and practical tips.
10/10/20244 min read
Enterprise SSO: What it is, how it works, and why it matters
Product
- google
- google one tap
- experience
- account linking
- direct sign in
Set up authentication and maximize Google login conversions with 6 configurations
Learn 6 easy tricks to improve user conversions, including Google One Tap, account linking, embedded sign-in, and more. See real results like 2x increased sign-ups.
9/13/20243 min read
Set up authentication and maximize Google login conversions with 6 configurations
Product
- product
- developers
- growth
5 go-to-market lessons I learned from driving a developer-led growth product
Lessons and practices learned in driving Logto’s growth with developers.
9/9/20245 min read
5 go-to-market lessons I learned from driving a developer-led growth product
Product
- logto
- pricing
- add-on
- explanation
- example
Logto add-on pricing: A simple explanation
In this article, we will explain the add-on pricing in Logto in a simple way with examples.
8/16/20243 min read
Logto add-on pricing: A simple explanation
Product
- branding
- design
- color-palette
- HSL
Color palette in branding: How Logto generate a custom color scheme for your brand
How audiences perceive a brand is strongly influenced by color psychology. By using a carefully crafted color palette, brand recognition can be enhanced, leaving a lasting impression. To achieve this, we've developed a system that generates harmonious color schemes from a single base color, utilizing the HSL color model.
8/15/20243 min read
Color palette in branding: How Logto generate a custom color scheme for your brand
Product
- magic-link
- oidc
- sign-in
- authentication
- passwordless
Is magic link sign-in dying? A closer look at its declining popularity
Magic link sign-in is a convenient and secure way to authenticate users. However, its popularity has been declining in recent years. Let's explore the reasons behind this trend and discuss the future of magic link sign-in.
8/1/20242 min read
Is magic link sign-in dying? A closer look at its declining popularity

Logto blog

Featured posts

RBAC in practice: Implementing secure authorization for your application

Logto product updates

Build a multi-tenant SaaS application: A complete guide from design to implementation

All posts

Simplify API authentication with personal access token: A more secure API token

What is impersonation in cybersecurity and identity management? How can AI agents use it?

Logto is now SOC 2 Type II compliant!

Simplify SAML app integration for developers

2025 Amazon Cognito's latest pricing explained and the best Amazon Cognito alternatives

What is B2B SaaS, and what will the post-SaaS era (2025+) with AI look like?

What is refresh token rotation and why is it important?

Logto plan update: Optimizing token quotas to protect Logto from abuse and ensure reliability

Understanding access tokens, refresh tokens, and ID tokens in OpenID Connect (OIDC) protocol

2025 Auth0's latest pricing explained and the best Auth0 alternatives

OTP bots: What they are and how to prevent attacks

What is an authenticator app

Why you might see a 404 when signing in to your Logto-integrated app

Real use cases: Expanding your auth system with webhooks

Enterprise SSO: What it is, how it works, and why it matters

Set up authentication and maximize Google login conversions with 6 configurations

5 go-to-market lessons I learned from driving a developer-led growth product

Logto add-on pricing: A simple explanation

Color palette in branding: How Logto generate a custom color scheme for your brand

Is magic link sign-in dying? A closer look at its declining popularity