Login and access control API

Add security to your application.

Complete authentication and authorization solution you can easily drop into the software you're building. It enables easy login integration, as well as fine grained control over the permissions.

Seamless sign-on experience for your enterprise customers

Unlimited SSO connections
SAML, OAuth, OIDC integrations
Unlimited machine tokens
Enterprise sign up and invitations
Easy tenant separation

Add social login without sacrificing your users privacy

Hosted login UI
Unlimited social login connections
Passwordless login, WebAuthn
Customizable React components

Try it yourself

Your team's time is precious. Let them focus on your core business.

Access control

Identity is the first step. That's the easy part. Knowing which features, actions, or data the user may access is what makes your software work.

Fine-grained permissions for your application

Granular, role and resource-based access
Permission and resource nesting
User onboarding and invite flow
Access control as code
Clean separation between identity and permissions

Secure your endpoints with Authress

Object-level access control
Access audit trail
Service to service authorization

Authorize Order Creation

   import { AuthressClient } from '@authress/sdk';

   const authress = new AuthressClient(
     authressApiUrl: 'https://login.yourdomain.com',
     apiKey: 'eyJrZXlJ9U6xxixCDjk9dTi9tZ');

   // Verify
   await authress.userPermissions.authorizeUser(
     userId, 'orders', 'orders:create');

Authorization. It's not about who you are, it's what you can do.

Developer experience

Made for software engineers

First-class REST API
SDKs in multiple languages
Terraform provider
Offline test instance

Explore the API

You can't revoke identity, but you can revoke access.

Your users' data is safe with us.

All data encrypted in transit and at rest
All data replicated across multiple data centers
Automatic failover and disaster recovery
Data processing compliant with European GDPR
Option to restrict data storage to specific region

What our customers say:

It became very clear to me that customer service is Queen. Authress has all the features of the other products we need, has clear pricing, and so with all the help that the team has given us it became very clear that we will implement our services in fraction of the time than with any other alternative.

Anton Katz, VP of Engineering, Harbr

Our architecture is very modular with a lot of separate, autonomous microservices, so we needed distributed permission management. With Authress, my team was able to bake it in from the beginning. Architecturally, it's been a great choice.

As we're working in agile fashion, it's great to have an ability to change roles and permissions easily as we go, instead of having to set them in stone at an early phase.

I couldn't find another solution that offers this level of flexibility and permission control, and building our own would mean not focusing on our core competency. I was lucky to find Authress!

Rafał Nowosielski, Head of Technology, Adia Europe

I can't express how much Authress has simplified my authentication process. As someone who has struggled with the complexities of AWS Amplify, Cognito, and integrating various third-party provider logins like Facebook and Google, Authress has been a game-changer. The seamless integration and user-friendly interface make it a breeze to set up and manage authentication for my applications. It has not only saved me valuable time but also eliminated the headaches associated with traditional authentication services. Authress is now my go-to third-party auth service, and I highly recommend it to anyone looking for a hassle-free authentication solution.

Mike Pattyn, Founder, Flyingdarts

Our most important pain point was to secure user data in a reliable way. Authress decreased our pain considerably here among cost of setting this system up ourselves, time to implement, and level of quality in the implementation. I'm grateful that this product exists. It made the cost of fixing the problem 'possible'.

Marcus Ellison, Founder and CEO, breadcrumb

We realised what we were looking for is what we call an IdP aggregator. We just wanted the ability for different clients to log in via their own IdP, but without having to build each integration into our own app code.

We looked into AWS Cognito, which on the surface seems like it should be able to do this, but as we tried to design a solution just found we needed workaround after workaround. What we'd been trying to do in Cognito for two weeks, we managed to have up and running with Authress in just a few hours.