Tesseral
lastmod 2025-06-02created 2025-06-022 edits
Open-source authentication infrastructure platform for B2B SaaS
About
- An open-source authentication (login/permissions) infrastructure platform for building business software (B2B SaaS)
- Optimized for multi-tenant architectures, API-first services, and cloud environments; not tied to any particular language/framework, so it integrates with any tech stack
Key features
- Customizable hosted login pages: provides a preconfigured UI and brand customization; login methods can be added/removed with a few clicks in the console
- B2B multitenancy: administrator permissions and user management per customer organization (tenant), with custom authentication policies per customer
- User Impersonation (logging in as a user): administrators/developers can log in directly as a user for debugging and support
- Self-service settings pages: customers can manage things themselves, such as inviting organization members and configuring login settings
- Magic links (email login): supports email link login without writing code
- Social login: integrates with Google, GitHub, and Microsoft
- SAML SSO: enterprise SSO integration, no extra code required
- SCIM (Enterprise Directory Sync): supports directory sync (provisioning)
- Role-based access control (RBAC): built-in UI; just apply the in-app permission check function (hasPermission) and you're done
- Multi-factor authentication (MFA/2FA): various two-step authentication (MFA) options, with per-customer settings for whether it is required
- Passkeys and WebAuthn: supports Login in with Passkey without writing code. Every passkey platform, including Touch ID and Yubikey
- TOTP (OTP apps): supports time-based one-time password authentication such as Google Authenticator without writing code
- API key management: provides UI for issuing, managing, and checking authentication of API keys
- User invitations: administrators/existing users can invite colleagues
- Webhooks: real-time data sync
Support for various SDKs
- Frontend: provides a React SDK; wrapping the whole app in <TesseralProvider> automates authentication, token refresh, login gating, and more
- Backend: SDKs for major backend frameworks such as Express, Flask, and Go; handles authentication as middleware
- Automatically verifies authentication tokens and provides functions to extract user information, organization ID, permissions, and more