Ship auth,
not infrastructure
Auth.io is the fastest way to add OAuth2, OpenID Connect and multi-tenant identity to your product. Create a realm, register a client and issue your first token in minutes.
Welcome back!
Track activity across your realms, clients and users at a glance.
12
9 active · +3 this week
38
34 active · 29 PKCE
8.4K
across all realms
126K
$114 est. cost
Distribution by Realm
Realm Status
Recent Realms
acme-prod
12 clients · 128 users · created 2 months ago
partner-hub
7 clients · 64 users · created 3 weeks ago
mobile-apps
5 clients · 41 users · created 5 days ago
A portal built for identity teams
Six screens, one glance. Every card below is built with the product's real components — dashboard, audit trail, analytics, users, keys and security — rendered with representative data.
Charts that answer security questions
Access activity over time, grant type distribution and environment breakdowns — devices, browsers and top IP addresses — per realm.
Access Analytics
Traffic, grant types and environment breakdowns for every realm.
Access Activity
Grant Types
Devices
Browsers
Top IP Addresses
Every access attempt, on the record
Each token issued — or blocked — becomes an audit event with full context: who, from where, and why it failed.
Audit & Access Intelligence
4,531 events recorded4,531
access events recorded
4,369
authentications passed
162
access attempts blocked
96%
Excellent
Recent Access Events
Password Login
2 min ago
187.44.120.8Chrome 126Windows 11Client Credentials
8 min ago
34.201.10.77Token Refresh
15 min ago
52.67.190.14Safari 17macOS 15Password Login
23 min ago
191.36.8.201Firefox 128Ubuntu 24.04Invalid credentials — account locked after 5 attempts
Everything at a glance
Realms, clients, users and billing in a single command center, updated in real time.
Welcome back!
Track activity across your realms, clients and users at a glance.
12
9 active · +3 this week
38
34 active · 29 PKCE
8.4K
across all realms
126K
$114 est. cost
Distribution by Realm
Realm Status
Recent Realms
acme-prod
12 clients · 128 users · created 2 months ago
partner-hub
7 clients · 64 users · created 3 weeks ago
mobile-apps
5 clients · 41 users · created 5 days ago
Identity details with context
Inspect user, realm and role information with security signals in one place.
User Management
Search, inspect and manage identities across every realm.
8,412
all realms
8,020
95% verified
Users
View allSofia Almeida
sofia@acme.io
Marcos Ribeiro
marcos@acme.io
Julia Castro
julia@partner.co
Daniel Souza
daniel@acme.io
Key lifecycle at scale
Active and revoked key inventory with rotation, ready for audit.
Security Keys
Signing and encryption key material per client, with rotation.
3
in rotation
1
signing tokens now
RS256
RSA Key · SIG
8f2c1a9e-77b4-4f10-9d3a-2b6f0c4e8a51Created Jun 12, 2026
ES256
EC Key · SIG
c41d7b02-3e88-45c6-b7f9-91a2d5e6c3f0Created May 30, 2026
RS256
RSA Key · ENC
a93f5e17-6c02-49d8-8b41-f07c3a9d2e64Created May 02, 2026
RS256
RSA Key · SIG
5d80b6c3-19af-4e72-a0c5-84e1f2b7d9a3Created Feb 18, 2026
Security controls where they matter
Centralize API secrets, authentication requirements and token configuration in a single flow for each client.
- Scoped secrets with expiry and usage tracking
- PKCE and client authentication enforcement
- Token issuer, audience and TTL settings
API Secrets
Scoped machine credentials with expiry and usage tracking.
Active secrets
3 secretsproduction-api
sk_live_9f2a••••••••••••ci-pipeline
sk_live_c7d1••••••••••••legacy-integration
sk_live_04be••••••••••••Client Authentication
Token Configuration
Issuer
https://auth.authio.com/realms/acme-prodAudience
api://acme-platformReady to see your own data in these screens?
Everything you need,
nothing you don't
Enterprise-grade authentication designed for teams that value simplicity and open standards.
OAuth2 & OpenID Connect
Authorization Code, Password, Refresh Token and Client Credentials grants, with full OIDC discovery and JWKS endpoints.
- 4 OAuth2 grant types
- PKCE support (S256, Plain)
- OIDC discovery & JWKS
Multi-realm architecture
Isolated realms with independent users, clients, policies and keys. Model dev, staging and production as separate tenants.
- Complete tenant isolation
- Multiple clients per realm
- Per-client key material
Identity policies & branding
Password rules, lockout policies and username validation per client — plus a hosted login page with your own brand.
- Fine-grained password rules
- Custom login layout
- Role-based access control
Usage-based billing
Pay only for successful logins and active sessions. Transparent pricing through Stripe, with clear plan limits.
- Pay per session
- Stripe integration
- No per-seat surprises
Token management
Session and token tracking with revocation
User separation
Users isolated by client and realm
Simple integration
Standards-based, works with any stack
Portal dashboard
Manage everything in one place
Full management APIs
Realms, clients, users and consumers
Custom configuration
Per-client token and key settings
Access audit trail
Every login recorded with full context
Analytics & insights
Activity, grant type and device charts
Token inspector
Decode and verify JWTs in the portal
Built for every use case
Filter by area to see how Auth.io fits your architecture.
OAuth2 & OIDC
Authorization Code, Password, Refresh Token and Client Credentials grants.
Realm isolation
Complete tenant separation with independent realms for data and configuration.
Custom token keys
Per-client signing and encryption keys with full configuration control.
User management
Role-based access control per user, client and realm with fine-grained permissions.
Usage-based pricing
Pay only for successful logins and active sessions, billed through Stripe.
Custom login UI
Brand the hosted authentication screens to match your product.
NextAuth integration
Seamless OIDC integration with NextAuth for modern applications.
Session management
Track and manage active sessions and tokens through the portal.
Client management
Full client lifecycle with independent configuration per application.
Quick integration
Start authenticating immediately after realm and client setup.
Subscription plans
Flexible plans with automatic billing management via Stripe.
User separation
Automatic user isolation by client and realm for complete data segregation.
Audit logs
Every access attempt recorded with device, browser, IP and failure context.
Access analytics
Activity timelines, grant type distribution and environment breakdowns per realm.
Showing 14 capabilities
Integrate in minutes
Copy-paste ready snippets for the most common authentication flows.
import NextAuth from "next-auth"
export const { handlers, signIn, signOut, auth } = NextAuth({
providers: [
{
id: "authio",
name: "Auth.io",
type: "oidc",
issuer: process.env.AUTHIO_ISSUER,
clientId: process.env.AUTHIO_CLIENT_ID,
clientSecret: process.env.AUTHIO_CLIENT_SECRET,
authorization: {
params: { scope: "openid profile email" }
}
}
]
})Replace {realm}, YOUR_CLIENT_ID and YOUR_CLIENT_SECRET with the values from your dashboard.
Loading pricing plans...
Frequently asked questions
Everything you need to know about Auth.io.
Auth.io supports 4 OAuth2 grant types: Authorization Code, Password, Refresh Token, and Client Credentials. We also provide full OIDC support with NextAuth.js integration.
Start building with Auth.io
Create your realm, register a client and issue your first token today. No credit card required to get started.