EVERYTHING XIAOMI
Get listed
Authio Lobby logo

Authio Lobby

Authio Lobby provides passwordless sign-in tools for apps, including a hosted interface, SDKs, session features, and widgets that let customers' IT admins co…

Place
#5 of 55
Score
8.1
Authio Lobby's website

What Authio Lobby is

Authio Lobby provides passwordless sign-in tools for apps, including a hosted interface, SDKs, session features, and widgets that let customers' IT admins configure identity settings. Sign-in options include passkeys, magic links, social login, SAML 2.0, OIDC, and SCIM 2.0. The hosted interface can use a custom domain, organization-specific branding, and project-specific email templates. SDKs are listed for Next.js, React, Vue, and Node. Session features include silent refresh, secure cookie helpers, route gating, and switching between organizations within a session. Admin widgets support SSO, directory sync, and domain verification within a customer's product. Listed social providers include Google, Microsoft, Apple, GitHub, Slack, LinkedIn, and Discord. The free Developer tier is for projects under 10,000 MAUs, but has no SSO, SCIM, or Locate. Starter costs $129 per month and Pro costs $449 per month; Enterprise pricing is custom. Authio says GDPR and CCPA compliance is in place and describes its SOC 2 posture as pre-audit readiness, with Type I targeted for 2027-Q1.

Good

  • Supports passkeys, magic links, social login, and enterprise SSO.
  • SDKs are listed for Next.js, React, Vue, and Node.
  • Admin widgets support SSO and directory configuration.
  • Session features include organization switching.

Watch out

  • Developer tier excludes SSO, SCIM, and Locate.
  • Starter costs $129 per month.
  • Pro costs $449 per month.

Who it suits

Lobby is intended for B2B SaaS teams that need passwordless sign-in and enterprise identity features. Teams needing SSO or SCIM should note that these are excluded from the Developer tier.

Verdict

Lobby brings sign-in methods, session tools, and customer-admin configuration into one product. The free tier has important identity-feature exclusions, while paid plans start at $129 per month.

Plans and prices

From Authio Lobby's own pricing page, checked 19 Oct 2026.

All about pricing
PlanPriceWhat it gives you
DeveloperFree10,000 MAUs · 1 organization · no SSO/SCIM · no Locate · 7-day audit retention · no FGA · Free
Starter$129 a month10,000 MAUs · 3 SSO connections · 3 SCIM directories · 5 organizations · Locate basic · 30-day audit retention · $129/mo
Pro$449 a month25,000 MAUs · unlimited SSO/SCIM · 50 organizations · Locate full · 180-day audit retention · FGA included · $449/mo
EnterprisePriced on requestUnlimited MAUs · unlimited SSO/SCIM · unlimited organizations · full Locate · 1-year-plus audit retention · FGA included · Talk to us

The facts

Each one read from Authio Lobby's own pages, with the date it was checked.

The company

Company profile
A LinkedIn profile named Authio describes a privately held Atlanta, Georgia IT-services company with 2–10 employees founded in 2017.checked 19 Oct 2026

What it does

Compliance
Authio describes its SOC 2 posture as pre-audit readiness, with Type I targeted for 2027-Q1; it says GDPR and CCPA compliance is in place.checked 3 Oct 2026
Compliance status
Authio says its SOC 2 Type II observation period is in progress and that no ISO 27001 report has been issued.checked 19 Oct 2026
Custom claims
Projects can define static, JSON or computed JWT claims subject to reserved-claim protections.checked 19 Oct 2026
Email integrations
Magic links can use Postmark, Resend, SendGrid, Mailgun, or a customer-provided SES transport.checked 3 Oct 2026
Embedded mode limitation
Embedded browser sign-in can lose refresh cookies in browsers blocking third-party cookies unless paired with a custom auth domain.checked 19 Oct 2026
Enterprise federation
Lobby supports SAML 2.0, OpenID Connect and SCIM 2.0, including service-provider and identity-provider initiated flows.checked 19 Oct 2026
Enterprise setup
Embeddable widgets let customers' IT admins configure SSO, directory sync, and domain verification within the customer's product.checked 3 Oct 2026
Hosted Lobby limitation
The direct lobby.authio.com page rejects incomplete links and requires a valid project_id supplied by an application.checked 19 Oct 2026
Hosted sign-in
The hosted UI can use a custom domain, per-organization branding, and per-project email templates.checked 3 Oct 2026
Hosted UI
The hosted sign-in page can use a custom domain, per-organization branding and project email templates.checked 19 Oct 2026
Incident response
The public status page records a hosted-UI health-check outage on September 30, 2026 lasting about three minutes.checked 19 Oct 2026
Independent package evidence
The npm publisher profile lists 12 Authio packages, including Node, React, Next.js, Vue, React Native, edge and widget packages.checked 19 Oct 2026
Independent PHP package adoption
Packagist showed zero installs, dependents and stars for the Authio PHP package when crawled.checked 19 Oct 2026
Independent PHP package license
The Authio PHP Composer package is published under MIT and requires PHP 8.2 or newer.checked 19 Oct 2026
Independent SDK license
The Authio Java SDK published to Maven Central declares the MIT license.checked 19 Oct 2026
Intended users
Authio positions Lobby for B2B SaaS teams that need passwordless sign-in and enterprise identity features such as SSO and SCIM.checked 3 Oct 2026
Magic links
Magic Auth links are single-use, expire after 10 minutes and are bound to IP and user agent.checked 19 Oct 2026
MFA
Lobby provides passkey, TOTP and SMS step-up authentication and organization policies that can require MFA.checked 19 Oct 2026
Multi-organization
One identity can hold multiple memberships and switch its active organization in-session without reauthentication.checked 19 Oct 2026
Notable limit
The Developer tier has no SSO, SCIM, or Locate, and custom domains are listed for Pro and Enterprise in the pricing comparison.checked 3 Oct 2026
Passkeys
Lobby supports WebAuthn/FIDO2 passkeys with relying-party IDs tied to each origin.checked 19 Oct 2026
Public API
Authio exposes separate public bases for authentication, management, hosted Lobby, SSO, SCIM and fine-grained authorization, with an OpenAPI reference.checked 19 Oct 2026
Purpose
Lobby provides passwordless sign-in for apps through a hosted UI, SDKs, sessions, sign-in methods, and embeddable IT-admin widgets.checked 3 Oct 2026
The full review of Authio Lobby

Overview

Authio Lobby combines hosted passwordless authentication, application SDKs, session management, and embeddable enterprise-identity administration. It suits B2B SaaS teams whose customers need SSO or directory synchronization configured inside the product itself. The central buying question is whether those enterprise controls are required immediately, because the free tier omits them.

Key features

Supported sign-in methods include passkeys, email magic links, SMS OTP, social OAuth, SAML 2.0 SSO, and OIDC SSO. Passkeys use phishing-resistant WebAuthn/FIDO2, while refresh-token rotation and rate-limited authentication endpoints address important account-security risks. Social connections cover Google, Microsoft, Apple, GitHub, Slack, LinkedIn, and Discord.

The hosted interface can run on a custom domain, apply branding by organization, and use project-specific email templates. Custom domains are restricted to Pro and Enterprise, so Starter customers must accept a less fully branded sign-in surface. Magic-link delivery works with Postmark, Resend, SendGrid, Mailgun, or a customer-provided SES transport.

SDKs for Next.js, React, Vue, and Node include session helpers and edge-runtime JWT verification. Silent refresh, secure cookie helpers, route gating, and switching between organizations within one session cover common web-app requirements. The documented stack is focused on those four frameworks, making framework fit an important pre-purchase check.

Embeddable widgets allow a customer’s IT administrator to configure SSO, directory sync, and domain verification without leaving the customer’s application. That is a meaningful advantage for multi-tenant products selling to organizations, rather than a necessary feature for a simple consumer login. Authio describes GDPR and CCPA compliance as in place; its SOC 2 position is pre-audit readiness, with Type I targeted for 2027-Q1.

Pricing

Lobby uses a freemium model, with a 14-day trial and paid plans from $129 per month.

PlanPrice and allowanceWhat it means
Developerfree, Free forever; projects under 10,000 MAUs; 10,000 MAUs; 1 organization; 7-day audit retentionPasswordless methods are included, but there is no SSO, SCIM, or Locate. Community support makes it a sensible development or small passwordless-only deployment, not an enterprise rollout.
Starter$129 a month; 10,000 MAUs; 3 SSO connections; 3 SCIM directories; 5 organizations; Locate Basic; 30-day audit retentionThis is the practical entry point for a small B2B product needing limited enterprise connections. It still lacks custom domains and has finite organization, SSO, and SCIM allowances.
Pro$449 a month; 25,000 MAUs; unlimited SSO and SCIM; 50 organizations; FGA; audit streams; Locate Full; email plus priority supportPro fits a growing SaaS product with many enterprise tenants or stronger authorization and audit requirements. The price jump buys materially higher identity capacity and the custom-domain option.
EnterpriseCustom pricing; dedicated infrastructure; custom MAU and connection allotments; unlimited organizations and Locate; HIPAA BAA/DPA; residency options; BYO-KMSChoose it when contractual, infrastructure, residency, or key-management requirements outweigh the need for a published price. Priority support is by contract.

Developer has Community support, Starter has Email support, and Pro adds a priority queue. The free plan’s 10,000-MAU ceiling and exclusion of SSO and SCIM are the main reasons many B2B teams will move directly to paid service.

Platforms

Lobby is offered for Android, iOS, web, and API integrations. Its listed SDKs target Next.js, React, Vue, and Node.

Who it's for

Lobby is a strong fit for B2B SaaS teams that want passwordless access plus customer-managed SAML, OIDC, or SCIM workflows embedded in their own product. It is less suitable for a small app that only needs basic login, or for teams whose framework is outside the documented SDK set and cannot justify checking integration fit.

Pros and cons

Pros

  • Broad identity coverage: passkeys, magic links, SMS, social providers, SAML, and OIDC cover both modern passwordless and enterprise requirements.
  • Useful multi-tenant administration: embedded SSO, directory-sync, and domain-verification widgets keep customer IT setup inside the product.
  • Practical session tooling: silent refresh, route gating, secure cookies, and in-session organization switching reduce recurring integration work.
  • Clear growth path: Starter, Pro, and Enterprise add connections, organizations, audit capabilities, and infrastructure controls as deployments expand.

Cons

  • Free-tier enterprise gap: Developer excludes SSO, SCIM, and Locate, despite allowing up to 10,000 MAUs.
  • Starter branding restriction: custom domains begin only at Pro, limiting white-label control at $129 per month.
  • Rising cost for scale: Pro is $449 per month before Enterprise-only requirements such as dedicated infrastructure or residency options.
  • Limited published SDK scope: only four web-oriented stacks are named.

Alternatives

Passwordless Authentication Software and Passkey Authentication Software lists are useful when you want to compare categories rather than commit to Lobby’s enterprise model.

  • Bitwarden is better when the priority is personal or team password management across unlimited devices and passwords, rather than embedded customer identity.
  • FusionAuth is the alternative to consider when a freemium authentication platform with self-hosted options is more important than Lobby’s hosted widgets.
  • Okta Customer Identity Cloud suits teams seeking a separately packaged customer-identity service with published Essentials and Professional tiers.
  • Trusona is an option for readers focused on its free ATO Protect portal.
  • Ory is worth considering when self-hosted or network-based identity deployment is the deciding factor.
  • Duo Mobile fits mobile-focused MFA and passwordless authentication needs rather than a full embedded B2B identity stack.
  • Hanko is a lower-cost passwordless-oriented alternative, with a free Starter tier and a $29 monthly Pro plan.
  • SuperTokens is the choice when self-hosted open-source features at any scale are central to the decision.

Verdict

Choose Authio Lobby if you are building a B2B SaaS product that must combine passwordless login with customer-configured SSO, SCIM, and multi-organization sessions. Its embedded administration and broad sign-in coverage are the strongest reasons to buy. Look elsewhere if you need enterprise identity on a free plan, custom-domain branding at entry level, or a self-hosted open-source deployment.

Alternatives to Authio Lobby

All alternatives
  1. 1Authgear logo

    Authgear

    Free planOpen sourceAndroidiOSWebAPI
    8.5From $50 a month
  2. 2Ory logo

    Ory

    Free planOpen sourceWebAPILinuxmacOS
    8.4From $770 a year
  3. 3FusionAuth logo

    FusionAuth

    Free planAndroidiOSWebAPI
    8.3From $162 a month
  4. 4Google Cloud Identity logo

    Google Cloud Identity

    Free planAndroidiOSWebAPI
    8.3Free plan
  5. 5

    cidaas

    Free planAndroidiOSWebAPI
    8.1Free plan
  6. 6

    WorkOS

    Free planAndroidiOSWebAPI
    8.1From $99 a month