Mobile apps and push authentication
Sign users into iOS and Android apps the right way, and use their phone to approve sign-ins and agent requests.
Solution type: use-case
Passwordless sign-in
Let people sign in with a fingerprint, a face, a link in their inbox or a tap on their phone. No password to forget, leak or phish.
Workforce identity
Sign employees into internal tools with passkeys or your identity provider, sync them from HR, and give engineers time-limited access to production.
Customer identity (CIAM)
Self-service sign-up, social login, progressive profiling, consent records and a privacy page your users can use themselves.
Account takeover prevention
Stop credential stuffing, bots and stolen sessions. Ask for a second factor only when the risk is real, and alert your team when it is.
Fine-grained authorization
Answer "can this user do this to that?" with roles, conditions on attributes, or relationships like "editor of the folder this file is in". One endpoint, three models.
Directory sync and provisioning
Users and groups flow in from the customer's directory or your HR system, and out to the apps your users need. When someone leaves, their access ends everywhere.
Enterprise SSO
Let customers sign in with their own Okta, Microsoft Entra or Google Workspace, and sign your users into SAML-only apps with LumoAuth as the identity provider.
B2B SaaS and organizations
Give every customer their own organization with members, roles, invitations, branding and sign-in rules. Let their admins run it themselves.
Human-in-the-loop approvals
When an agent needs more than it was given, it asks. A person approves from their phone, Slack or the portal, and the agent gets a token for that one task.
Ship passwordless sign-in this week. Put guardrails on your agents today.
The Developer plan is free for 10,000 monthly users and ten agents, with no card. Everything speaks open standards, so moving in or out is a config change.