SecureAuth Connect documentation

SecureAuth Connect is an identity and access management platform that handles authentication, authorization, and user management for your applications. It supports multiple identity models from a single platform:

• Consumer (B2C): Sign-in, registration, social login, and account security for customer-facing applications.
• Business (B2B): Organizations, delegated administration, and isolated policies for multi-tenant SaaS platforms.
• Agentic AI: Policy-based authorization for AI agents and machine-to-machine identities.

SecureAuth Connect runs as cloud SaaS or customer-deployed on Kubernetes.

Administrator

Setting up and managing SecureAuth Connect: workspaces, users, auth policies, and access controls.

Developer

Building an application or integrating with the SecureAuth Connect APIs and SDKs.

What do you want to do?

Administrator tasks

• Set up my first workspace
• Enable MFA for my users
• Add an application
• Enable SSO for your workspace
• Create organizations and sub-orgs
• Let your B2B customers manage their own users
• Configure branding and login flows
• Manage admin roles and permissions

Developer tasks

• Add login to my app
• Protect my APIs
• Integrate an identity provider
• Use the REST API
• Set up token-based authorization
• Build a custom login page
• Explore OAuth flows
• API reference

Where do you want to go?

B2C

Consumer identity

Add login and account security to an app your customers use.

Start here →

B2B

Multi-tenant identity for business customers

Let each business customer manage their own users, sign-in settings, and access with their own identity provider.

Start here →

Agentic AI

Access control for AI agents

Control what AI agents and automated processes can do on behalf of your users.

Start here →

Authentication methods

SecureAuth Connect supports the following authentication methods. Select one to see configuration steps.

Method	What it is	Typical use	Configure
Passkeys	Device-bound cryptographic login, no password	Consumer apps	View
Passwordless	Invisible auth using device, location, behavior signals	Consumer, high-security	View
Push notification	Approve or deny on a mobile device	B2B, high-security B2C	View
SSO	Sign in using your company's identity provider	B2B	View
TOTP (authenticator app)	Time-based codes from a mobile app	B2B, high-security B2C	View
OTP via email, SMS, voice	One-time code sent to email, SMS, or voice call	Step-up, fallback	View
Magic link	One-click email login	Low-friction B2C	View
Social login	Sign in with Google, Apple, Facebook, Microsoft	Consumer apps	View
Password	Traditional username and password	Legacy or fallback only	View

How users get to the right provider

When you connect multiple identity providers, SecureAuth Connect can automatically route users to the correct one based on their email domain or organization membership. This is called Intelligent Discovery, and it eliminates the need for users to manually choose a provider at sign-in.