AutharaAuth for every product you build

A white-label, multi-tenant authentication platform — OIDC & OAuth 2.1, real tenant isolation, per-application branding, MFA, SSO, and RBAC. Self-hosted, fully yours.

Get started

Connect an app

Management API

Standards-based

A compliant OpenID Connect / OAuth 2.1 issuer with PKCE, refresh-token rotation, and discovery. Any spec-compliant SDK integrates in minutes.

Multi-tenant by design

Every tenant gets its own Postgres role + row-level security, its own OIDC issuer, and its own scoped Management API. Isolation is enforced at the database.

Per-application branding

Set logo, colors, and background per application — they override the tenant/root defaults on the sign-in screen.

MFA & passkeys

TOTP, WebAuthn/passkeys, and backup codes — enabled per tenant, enforced automatically during sign-in.

RBAC & protected APIs

Register your APIs as resources, define permissions and roles, and issue scoped access tokens — for users and machine-to-machine clients.

One install, many products

Run a single Authara deployment as the auth service behind all of your products, each isolated and independently branded.