Legation
Sign-in and user management for your customers' apps, from first user to enterprise.
Production-ready
Legation handles sign-up, sign-in, sessions and user management for the applications you build for your customers. id0n hosts and runs Legation. Your application talks to it through the Legation client.
Who does what
| id0n | Your application |
|---|---|
| Hosts and runs Legation | Uses the @legation/client package |
| Provides Development and Production environments for each application | Points the client at its environment endpoint |
| Manages configuration, data and upgrades | Calls sign-up, sign-in, session and sign-out from its UI |
| Enables sign-in methods and protocols for the environment | Handles the user experience around them |
You never install, host or migrate the identity service, and you do not manage its database.
Capabilities
Enabled per environment
id0n enables sign-in methods and features for each Legation environment. Ask id0n to turn on what your application needs.
| Capability | Page |
|---|---|
| Email and password, verification, password reset | Email and password |
| Social sign-in | Social sign-in |
| Magic link, email one-time codes, phone number | Passwordless |
| Passkeys | Passkeys |
| Two-factor authentication | Two-factor |
| Sessions, multiple sessions, JWT | Session management |
| Organizations, teams, invitations and roles | Organizations |
| API keys | API keys |
| Enterprise SSO with SAML and OIDC | Enterprise SSO |
| User provisioning with SCIM | SCIM |
| OAuth 2.1 and OpenID Connect provider | OAuth provider |
| Device authorization | Device authorization |