Skip to content
SPECIFICTION
Get listed

Authio Lobby

authio.com

From $129/mo Free plan WebmacOSiOSAndroidAPI
Visit authio.com
Spec score 9.4 #2 of 55 in Passkey Authentication Software

What it is

Authio Lobby provides passwordless sign-in for apps through a hosted interface, SDKs, session features, and widgets for customer IT admins. Sign-in methods include passkeys, magic links, social login, and enterprise SSO using SAML 2.0, OIDC, and SCIM 2.0. The hosted interface can use a custom domain, organization-specific branding, and project-specific email templates. SDKs are listed for Next.js, React, Vue, and Node, with session helpers and edge-runtime JWT verification. Session tools include silent refresh, secure cookie helpers, route gating, and switching organizations within a session. Embeddable widgets let customer admins configure SSO, directory sync, and domain verification within a product. The free Developer tier is for projects under 10,000 MAUs and excludes SSO, SCIM, and Locate. Starter costs $129 a month and Pro costs $449 a month; Enterprise pricing is custom. Authio says GDPR and CCPA compliance is in place and describes its SOC 2 posture as pre-audit readiness, with Type I targeted for 2027-Q1.

Spec sheet

What it does
Authio Lobby is a hosted passwordless authentication module for B2B applications with sign-in UI, sessions, SDKs and administrator widgets.Read 19 Oct 2026 · authio.com
Purpose
Lobby provides passwordless sign-in for apps through a hosted UI, SDKs, sessions, sign-in methods, and embeddable IT-admin widgets.Read 3 Oct 2026 · authio.com
Intended users
Authio positions Lobby for B2B SaaS teams that need passwordless sign-in and enterprise identity features such as SSO and SCIM.Read 3 Oct 2026 · authio.com
Security
The security page says refresh tokens rotate, authentication endpoints are rate-limited, and passkeys use phishing-resistant WebAuthn/FIDO2.Read 3 Oct 2026 · authio.com
Compliance
Authio describes its SOC 2 posture as pre-audit readiness, with Type I targeted for 2027-Q1; it says GDPR and CCPA compliance is in place.Read 3 Oct 2026 · authio.com
Support
Authio directs customers to email support, a dashboard and a public service-health status page.Read 19 Oct 2026 · docs.authio.com
Company profile
A LinkedIn profile named Authio describes a privately held Atlanta, Georgia IT-services company with 2–10 employees founded in 2017.Read 19 Oct 2026 · linkedin.com
Compliance status
Authio says its SOC 2 Type II observation period is in progress and that no ISO 27001 report has been issued.Read 19 Oct 2026 · docs.authio.com
Custom claims
Projects can define static, JSON or computed JWT claims subject to reserved-claim protections.Read 19 Oct 2026 · authio.com
Email integrations
Magic links can use Postmark, Resend, SendGrid, Mailgun, or a customer-provided SES transport.Read 3 Oct 2026 · docs.authio.com
Embedded mode limitation
Embedded browser sign-in can lose refresh cookies in browsers blocking third-party cookies unless paired with a custom auth domain.Read 19 Oct 2026 · docs.authio.com
Enterprise federation
Lobby supports SAML 2.0, OpenID Connect and SCIM 2.0, including service-provider and identity-provider initiated flows.Read 19 Oct 2026 · authio.com
Enterprise setup
Embeddable widgets let customers' IT admins configure SSO, directory sync, and domain verification within the customer's product.Read 3 Oct 2026 · docs.authio.com
Hosted Lobby limitation
The direct lobby.authio.com page rejects incomplete links and requires a valid project_id supplied by an application.Read 19 Oct 2026 · lobby.authio.com
Hosted sign-in
The hosted UI can use a custom domain, per-organization branding, and per-project email templates.Read 3 Oct 2026 · authio.com
Hosted UI
The hosted sign-in page can use a custom domain, per-organization branding and project email templates.Read 19 Oct 2026 · authio.com
Incident response
The public status page records a hosted-UI health-check outage on September 30, 2026 lasting about three minutes.Read 19 Oct 2026 · status.authio.com
Independent package evidence
The npm publisher profile lists 12 Authio packages, including Node, React, Next.js, Vue, React Native, edge and widget packages.Read 19 Oct 2026 · npmjs.com
Independent PHP package adoption
Packagist showed zero installs, dependents and stars for the Authio PHP package when crawled.Read 19 Oct 2026 · packagist.org
Independent PHP package license
The Authio PHP Composer package is published under MIT and requires PHP 8.2 or newer.Read 19 Oct 2026 · packagist.org
Independent SDK license
The Authio Java SDK published to Maven Central declares the MIT license.Read 19 Oct 2026 · central.sonatype.com
Magic links
Magic Auth links are single-use, expire after 10 minutes and are bound to IP and user agent.Read 19 Oct 2026 · authio.com
MFA
Lobby provides passkey, TOTP and SMS step-up authentication and organization policies that can require MFA.Read 19 Oct 2026 · authio.com
Multi-organization
One identity can hold multiple memberships and switch its active organization in-session without reauthentication.Read 19 Oct 2026 · authio.com
Notable limit
The Developer tier has no SSO, SCIM, or Locate, and custom domains are listed for Pro and Enterprise in the pricing comparison.Read 3 Oct 2026 · authio.com
Passkeys
Lobby supports WebAuthn/FIDO2 passkeys with relying-party IDs tied to each origin.Read 19 Oct 2026 · authio.com
Public API
Authio exposes separate public bases for authentication, management, hosted Lobby, SSO, SCIM and fine-grained authorization, with an OpenAPI reference.Read 19 Oct 2026 · docs.authio.com
Quickstart
The canonical Next.js setup installs @useauthio/nextjs and @useauthio/react and is presented as a five-minute integration.Read 19 Oct 2026 · docs.authio.com
Rating on Capterra
No Authio Lobby rating or review count was located in the searched Capterra results; returned Lobby pages referred to unrelated lobby-management products.Read 19 Oct 2026 · capterra.com
Rating on G2
No Authio Lobby rating or review count was located in the searched G2 results.Read 19 Oct 2026 · g2.com
Rating on Gartner Peer Insights
No Authio Lobby rating or review count was located in the searched Gartner Peer Insights results.Read 19 Oct 2026 · gartner.com
Rating on GetApp
No Authio Lobby rating or review count was located in the searched GetApp results.Read 19 Oct 2026 · getapp.com
Rating on Trustpilot
No Authio Lobby rating or review count was located in the searched Trustpilot results.Read 19 Oct 2026 · trustpilot.com
Rating on TrustRadius
No Authio Lobby rating or review count was located in the searched TrustRadius results.Read 19 Oct 2026 · trustradius.com
SDK coverage
First-party SDKs are documented for Node, React, Next.js, Vue, React Native, Go, Ruby, Python, Swift, Kotlin, Unity and edge runtimes.Read 19 Oct 2026 · docs.authio.com
SDKs
Lobby lists SDKs for Next.js, React, Vue, and Node, with session helpers and edge-runtime JWT verification.Read 3 Oct 2026 · authio.com
Security controls
Authio documents TLS 1.2 or newer, encrypted managed Postgres, envelope encryption for secrets and AWS KMS-wrapped signing keys.Read 19 Oct 2026 · docs.authio.com
Self-hosting
The documentation describes Authio as a hosted service with Authio-controlled API and hosted-UI endpoints and does not document a self-hosted deployment.Read 19 Oct 2026 · docs.authio.com
Session handling
SDK helpers provide silent refresh, rotating cookies, edge JWT verification and route gating.Read 19 Oct 2026 · docs.authio.com
Sessions
Lobby session features include silent refresh, secure cookie helpers, route gating, and multi-organization switching within a session.Read 3 Oct 2026 · docs.authio.com
Sign-in methods
Lobby supports passkeys, magic links, social login, and enterprise SSO using SAML 2.0, OIDC, and SCIM 2.0.Read 3 Oct 2026 · authio.com
Social login
Built-in social providers include Google, Microsoft, Apple, GitHub, Slack, LinkedIn and Discord.Read 19 Oct 2026 · authio.com
Social providers
The product page names Google, Microsoft, Apple, GitHub, Slack, LinkedIn, and Discord as social sign-in providers.Read 3 Oct 2026 · authio.com
Webhooks
Management API webhooks deliver signed lifecycle events to customer HTTPS endpoints.Read 19 Oct 2026 · docs.authio.com
Widgets
The embeddable widgets package covers SSO, Directory Sync, domain verification, audit log, API keys, sessions and organization switching.Read 19 Oct 2026 · authio.com

Plans and prices

Developer Free Free forever for projects under 10,000 MAUs 10,000 MAUs · 1 organization · passwordless methods · no SSO, SCIM, or Locate · 7-day audit retention Read 3 Oct 2026 · authio.com
Developer Free Free 10,000 MAUs · 1 organization · no SSO/SCIM · no Locate · 7-day audit retention · no FGA Read 19 Oct 2026 · docs.authio.com
Starter $129 a month $129/mo 10,000 MAUs · 3 SSO connections · 3 SCIM directories · 5 organizations · Locate Basic · 30-day audit retention Read 3 Oct 2026 · authio.com
Starter $129 a month $129/mo 10,000 MAUs · 3 SSO connections · 3 SCIM directories · 5 organizations · Locate basic · 30-day audit retention Read 19 Oct 2026 · docs.authio.com
Pro $449 a month $449/mo 25,000 MAUs · unlimited SSO and SCIM · 50 organizations · FGA · audit streams · Locate Full · email + priority support Read 3 Oct 2026 · authio.com
Pro $449 a month $449/mo 25,000 MAUs · unlimited SSO/SCIM · 50 organizations · Locate full · 180-day audit retention · FGA included Read 19 Oct 2026 · docs.authio.com
Enterprise Priced on request Talk to us Unlimited MAUs · unlimited SSO/SCIM · unlimited organizations · full Locate · 1-year-plus audit retention · FGA included Read 19 Oct 2026 · docs.authio.com
Enterprise Priced on request Custom Dedicated infrastructure · custom MAU and connection allotments · unlimited organizations and Locate · HIPAA BAA/DPA · residency options · BYO-KMS Read 3 Oct 2026 · authio.com

Every Authio Lobby plan and price →

Strong points and limits

Strong points

  • Supports passkeys, magic links, social login, and enterprise SSO
  • Lists SDKs for Next.js, React, Vue, and Node
  • Admin widgets support SSO and directory-sync setup
  • Hosted UI supports custom domains and organization branding

Limits

  • Developer tier has no SSO, SCIM, or Locate
  • Custom domains are listed for Pro and Enterprise
  • Enterprise pricing is custom

Who it suits

Lobby is positioned for B2B SaaS teams that need passwordless sign-in and enterprise identity options such as SSO and SCIM. The free tier may suit smaller projects that do not need those excluded features.

Authio Lobby in depth

Read the full write-up

Authio Lobby is a hosted passwordless identity layer for customer-facing applications, combining sign-in flows, sessions and embedded enterprise administration. It suits B2B SaaS teams that need customers to configure SSO or directory sync inside the product. Choose it when those workflows and broad passwordless coverage matter more than keeping enterprise identity on a free plan.

Overview

Lobby packages a hosted authentication UI, SDKs, session helpers and embeddable IT-admin widgets rather than just an isolated login screen. Customers can set up SSO, directory synchronization and domain verification without leaving the application, a strong fit for software vendors serving many organizations. The product supports passkeys, magic links, SMS OTP, social OAuth, SAML 2.0 and OIDC, so teams can offer modern passwordless access alongside enterprise identity.

Key features

Passkeys use phishing-resistant WebAuthn/FIDO2, while refresh-token rotation and rate-limited authentication endpoints address common account-security concerns. Social sign-in covers Google, Microsoft, Apple, GitHub, Slack, LinkedIn and Discord. Magic-link email can run through Postmark, Resend, SendGrid, Mailgun or a customer-provided SES transport, giving teams several delivery choices.

The hosted UI supports custom domains, branding per organization and email templates per project. Custom domains are reserved for Pro and Enterprise, limiting branded sign-in for Developer and Starter customers. SDKs target Next.js, React, Vue and Node, with session helpers and edge-runtime JWT verification. Silent refresh, secure cookie helpers, route gating and switching between organizations within one session cover practical application needs, although teams outside those stacks should verify integration fit.

Embedded widgets are the standout enterprise feature: a customer's IT administrator can configure SSO, directory sync and domain verification within the customer's product. Lobby also provides audit retention and streaming options as plans rise. Authio describes GDPR and CCPA compliance as in place; its SOC 2 posture is pre-audit readiness, with Type I targeted for 2027-Q1.

Pricing

A 14-day trial accompanies the freemium model, but the free tier is capped at 10,000 monthly active users and one organization. Paid pricing starts at $129 a month.

Developer

Developer costs nothing, billed Free forever for projects under 10,000 MAUs. It includes passwordless methods, one organization and seven-day audit retention. There is no SSO, SCIM or Locate, and Community support is the only support level. It works for prototypes or single-organization products that do not need enterprise connections.

Starter

Starter is $129 a month, billed $129/mo. It keeps the 10,000-MAU allowance and adds three SSO connections, three SCIM directories, five organizations, Locate Basic and 30-day audit retention. Email support replaces Community support. It is the practical entry point for a small B2B product, but still lacks custom domains and the unlimited enterprise connections of Pro.

Pro

Pro costs $449 a month, billed $449/mo. The 25,000-MAU allowance, unlimited SSO and SCIM, 50 organizations, FGA, audit streams and Locate Full target established SaaS vendors. Email plus a priority queue improves support, and custom domains become available.

Enterprise

Enterprise uses custom pricing. It adds dedicated infrastructure, custom MAU and connection allotments, unlimited organizations and Locate, HIPAA BAA/DPA, residency options and BYO-KMS. Priority support is by contract, making this the tier for regulated or large deployments rather than price-sensitive teams.

Platforms

Lobby supports Android, iOS, web and API deployments. Its named SDKs focus on Next.js, React, Vue and Node, with edge-runtime JWT verification for suitable architectures.

Who it's for

Lobby is a strong match for B2B SaaS teams that want passwordless access plus customer-managed SAML, OIDC or SCIM. Developer suits early products without enterprise identity; Starter fits a few customer organizations; Pro suits vendors with many connections and deeper governance needs. Teams needing SSO or SCIM on day one should budget for a paid plan.

Pros and cons

Pros: broad passwordless and social-provider coverage; embedded SSO and directory administration; organization-aware sessions; passkeys with WebAuthn/FIDO2; multiple email transport options.

Cons: Developer excludes SSO, SCIM and Locate; Starter lacks custom domains; Pro is a substantial jump to $449 a month; SDK coverage centers on four web stacks; SOC 2 is described as pre-audit readiness rather than completed certification.

Alternatives

For a wider category view, see Passwordless Authentication Software and Passkey Authentication Software.

Bitwarden is the better choice for basic password management with unlimited devices and passwords, rather than embedded B2B customer identity.

HYPR Authenticate suits teams prioritizing phishing-resistant identity assurance and web access.

Duo Mobile fits organizations seeking mobile MFA and passwordless authentication for up to 10 users on its free plan.

FusionAuth is worth considering when self-hosting and a free Community edition matter.

Okta Customer Identity Cloud is an alternative for teams comparing a 500-MAU Essentials tier and broader Okta deployment.

MojoAuth offers a larger free allowance of up to 25,000 MAUs with email OTP, magic links and selected social login.

Trusona provides a free ATO Protect portal with no commitment.

Credenti is another paid identity option.

Verdict

Choose Authio Lobby if you are building B2B SaaS and need passwordless sign-in tied to customer-configured SSO, SCIM and organization-aware sessions. Its decisive advantage is putting those enterprise controls inside your product. Look elsewhere if you need those controls on a free plan, require a different SDK ecosystem or cannot justify the Pro price for higher connection and governance limits.

Verdict

Lobby combines passwordless sign-in with session features and enterprise identity tools. The free Developer tier is limited for teams needing SSO, SCIM, or Locate, while paid tiers begin at $129 a month.

Where Specifiction places it

Alternatives to Authio LobbyAll alternatives →

Ory From $64.17/mo · Free plan 8.9 Visit