#2 in Identity & Access ManagementUpdated 2026-08

Logto

by Logto · Open-source auth infrastructure with SSO, RBAC and multi-tenancy

73.8 — BenchRank score out of 100

Homepage
Pricing page

Visit website See full Identity & Access Management ranking

Overview

Logto is auth infrastructure that adds sign-in, enterprise SSO, RBAC and multi-tenant organisations to applications over OAuth 2.1, OIDC and SAML. It ships SDKs for 20+ frameworks, a Management API and a prebuilt sign-in UI. It runs as Logto Cloud in EU, US, Australia and Japan regions, or self-hosted from the open-source project.

Best for: Developers adding auth, enterprise SSO and multi-tenancy to SaaS or AI apps without building it
Pricing: Free up to 50,000 MAU, then Pro at $24/month plus token usage ($0.08 per 100 tokens over 50K) and per-feature add-ons; Enterprise is contact sales.
Runs on: iOSSelf-hostedCLI

Strengths and trade-offs

Strengths

Open-source and self-hostable; free tier covers 50,000 MAU
SDKs for 20+ frameworks plus a no-code option
OAuth 2.1, OIDC and SAML, with enterprise SSO and organisations
SOC 2 Type II; cloud regions in EU, US, Australia and Japan

Trade-offs

RBAC, organisations and MFA are paid add-ons on top of the $24 Pro base
Free plan caps: 3 apps, 3 social connectors, 3-day audit log retention
Tokens beyond 50K billed at $0.08 per 100, so bills vary with usage
SLA, premium support and HIPAA/BAA are Enterprise-only

Pricing

Published plans from Logto’s own pricing page, in USD. Usage charges and add-ons may apply on top.

Logto pricing tiers, monthly rates in USD
Plan	Monthly	Includes
Free	Freeper month	Up to 50,000 MAU and 50K tokens 3 applications, 1 machine-to-machine app 3 social connectors, 1 custom domain, 1 webhook 3-day audit log retention, community chat support
Pro	$24per month	50K tokens included, then $0.08 per 100 extra Add-ons: RBAC $32, Organisations $48, MFA $48, advanced security $48 Enterprise SSO $48 per connector; SAML app $96; third-party app $8 14-day audit log retention, 48h email ticket support, SOC 2 report
Enterprise	Contact sales	Custom resource quota and data region Logto Private Cloud instance SLA, premium support and migration support HIPAA/BAA compliance

How this score is made up

Each dimension is scored out of 100 and combined into the headline score using fixed weights.

MCP support: 92 out of 100
API quality: 40 out of 100
Documentation: 70 out of 100
Agent friendliness: 77 out of 100
Pricing transparency: 100 out of 100
Changelog: 100 out of 100
Marketing site structure: 55 out of 100
Operational trust: 60 out of 100

Measured, but not part of the score

Useful to know, but not a mark for or against the product — so these do not affect the ranking.

Openness: 85 out of 100
Maintenance: 100 out of 100

This doesn’t look right — report a problem with Logto’s score

Alternatives in Identity & Access Management

Ranked 1
75.9 — BenchRank score out of 100
Ory
Ory · API-first identity and access management, self-hosted or managed
Best for: Engineering teams wanting API-first identity and access management they can self-host or buy as SaaS
Ranked 3
73.1 — BenchRank score out of 100
Hexclave
Hexclave · Open-source auth, payments, email and analytics building blocks
Best for: Startups wanting auth, payments, emails and analytics as one open-source, self-hostable platform.
Ranked 4
70.7 — BenchRank score out of 100
Better Auth
Better Auth · TypeScript authentication framework that runs inside your own app
Best for: TypeScript teams who want authentication defined in code rather than in a hosted provider's dashboard