What it is

Authgear is open-source identity and access management platform. It is managed identity platform for any app. It is open-source Auth0, Clerk, Firebase Auth alternative. It is written in Go, licensed Apache-2.0, and lives in identity and access management ecosystem.

It solves consumer authentication problem for SaaS products, mobile apps, multi-app ecosystems. It provides turnkey signup, login, account settings, user management, security controls. It supports self-hosting and Authgear Cloud. It offers developer SDKs, portal, Admin GraphQL API, pre-built flows. It targets modern authentication: passwordless, passkeys, biometric, MFA, SSO, OAuth2, OIDC, SAML. It gives enterprise controls: audit logs, brute force protection, bot protection, rate limits, RBAC. It reduces custom auth work. It gives users secure login without passwords. It gives admins central identity control. It gives developers integration points. It is not generic framework; it is extensible turnkey solution.

Key capabilities

• Passwordless login supports magic-link and OTP over Email, SMS, WhatsApp.
• Passkeys support FIDO2 compliant hardware keys and password managers, giving anti-phishing password alternative.
• MFA supports TOTP apps such as Google Authenticator and Authy, SMS OTP, Email OTP, additional password.
• SSO supports OIDC, OAuth 2.0, SAML, social and enterprise connections including Google, Facebook, Apple, WeChat, LinkedIn, ADFS, LDAP.
• RBAC extends access management through Roles and Groups.
• Portal and Admin GraphQL API manage users, sessions, profiles, logs, analytics, authentication and authorization configuration.
• Webhooks and TypeScript hooks notify events and customize Authgear behavior.

Who uses it and how

• SaaS product teams use Authgear for customer signup, login, account settings, and user support.
• Mobile app teams use iOS and Android biometric login, passkeys, passwordless OTP, and MFA for consumer users.
• Enterprise app teams use SAML, ADFS, LDAP, and OAuth connections to integrate existing directories and identity providers.
• Security and operations teams use audit logs, rate limits, brute force protection, bot protection, and RBAC for access control.
• Integration teams connect analytics, CDP, and drip campaigns through webhooks and hooks.

Getting started

Use Authgear Cloud for hosted setup, or self-host Authgear server. Docs, demo, and Discord are listed for support and onboarding.

When to use it — and when not to

Use Authgear when you want open-source replacement for Auth0, Clerk, or Firebase Auth, with modern consumer authentication and enterprise controls. Choose self-hosting when you need control over identity infrastructure and can operate server, while choosing Authgear Cloud when you want managed deployment. Facts do not list required database, storage, SMTP, or other backing services, so verify deployment docs before self-hosting; GitHub metadata shows 0 contributors and 368 open issues, which may indicate early-stage maturity or incomplete public repository data.