# Start with Udibo Udibo gives you two ways to add authentication: connect your application to **Udibo Identity**, the managed service, or use **@udibo/oauth2** to run authentication inside your own application. Choose who operates identity first; the rest of your setup follows from that decision. ## Is Udibo right for your app? Start with the [product overview](https://www.udibo.com/) for the value of hosted sign-in, organizations, and permissions working together. Then explore the [pricing](https://www.udibo.com/pricing) and [provider comparisons](https://www.udibo.com/docs/compare) against your requirements. For an app sold to teams, see the [B2B SaaS walkthrough](https://www.udibo.com/docs/identity/b2b-saas-template). For individual accounts, see the [consumer app walkthrough](https://www.udibo.com/docs/identity/b2c-app-template). For sharing client documents, see the [client portal walkthrough](https://www.udibo.com/docs/identity/client-portal-template). Each shows how the identity pieces fit into a product you might be building. ## Choose your path | You want to… | Start here | You operate | | ------------------------------------------------------ | --------------------------------------------------------------------------------- | ------------------------------------------------------------------------ | | Let Udibo manage sign-in, accounts, and recovery | [Connect your first application](https://www.udibo.com/docs/identity/get-started) | Your application, its sessions, and its data authorization | | Replace an existing identity integration | [Move an existing app](https://www.udibo.com/docs/identity/migrate) | The rollout, identity mapping, and application changes | | Own credential storage and run authentication yourself | [Package quickstart](https://www.udibo.com/docs/oauth2/quickstart) | Your authentication service, persistence, email, and security operations | | Give a coding agent the implementation task | [Build with an agent](https://www.udibo.com/docs/identity/agents) | The integration decisions and review of its result | You can use the package as the client of the managed service. Installing it does not require you to run an authorization server or build password-reset pages. ## What the managed service takes care of Your users sign in on your tenant's hosted pages. You configure the sign-in methods, account creation, and MFA policy; your application receives the result through an OAuth2 authorization-code flow. - [Choose sign-in methods](https://www.udibo.com/docs/identity/sign-in-methods), registration, and MFA policy for your tenant - [Organizations](https://www.udibo.com/docs/identity/organizations) group your customers; [roles and permissions](https://www.udibo.com/docs/identity/permissions) express what they can do in your application - [Webhooks](https://www.udibo.com/docs/identity/webhooks) deliver events to your backend; the [audit log](https://www.udibo.com/docs/identity/audit-log) helps you investigate activity Your backend still protects your application's records. A valid session proves who someone is; it does not, by itself, give them access to another customer's data. The [concepts guide](https://www.udibo.com/docs/identity/concepts) explains that boundary with examples. ## What the package gives you @udibo/oauth2 supplies OAuth2/OIDC clients, authorization and resource servers, Hono integration, a backend-for-frontend (BFF), and React bindings. A BFF is your app's backend layer that keeps tokens on the server and gives the browser a session cookie. The package's [documentation index](https://www.udibo.com/docs/oauth2/index) separates managed integration from app-owned authentication. Its [known limitations](https://www.udibo.com/docs/oauth2/known-limitations) and [runtime support](https://www.udibo.com/docs/oauth2/stability) belong in your evaluation before you choose storage or deploy. ## Availability and fit Start at [Udibo](https://www.udibo.com/) for how to get an account. Once you have one, you can create a tenant from the dashboard, owned by you or by an organization you own. You can explore the package's [local identity provider](https://www.udibo.com/docs/oauth2/guides/run-a-local-identity-provider) without a managed account. The hosted service currently offers password, social, email-code, magic-link, and passkey sign-in, with TOTP and passkey MFA and recovery codes. SAML federation, SCIM provisioning, and custom domains for hosted pages are not available. If one is a launch requirement, evaluate an alternative that provides it today. The [comparison guides](https://www.udibo.com/docs/compare) explain the tradeoffs without treating planned features as available features. ## Your first milestone Aim for a browser sign-in that returns to your application, an authenticated API request, and a sign-out that ends the application's session. Once that works, add the capabilities your product needs and use the [production checklist](https://www.udibo.com/docs/identity/production) before inviting real users. ## Keep building | Your next goal | Guide | | ------------------------------------------ | ----------------------------------------------------------------------------- | | Connect a first application | [Get started](https://www.udibo.com/docs/identity/get-started) | | Choose a template or runnable example | [Starting projects](https://www.udibo.com/docs/identity/starter-projects) | | Offer the right sign-in experience | [Sign-in methods](https://www.udibo.com/docs/identity/sign-in-methods) | | Admit users in stages | [Sign-up and waitlist](https://www.udibo.com/docs/identity/waitlist) | | Put your name and logo on the hosted pages | [Brand your hosted pages](https://www.udibo.com/docs/identity/branding) | | Give customers their own workspace | [Organizations](https://www.udibo.com/docs/identity/organizations) | | Control access to features or records | [Permissions and roles](https://www.udibo.com/docs/identity/permissions) | | Add sign-out and device controls | [Sessions and sign-out](https://www.udibo.com/docs/identity/sessions) | | Invite teammates to the dashboard | [Team access](https://www.udibo.com/docs/identity/team-access) | | Choose which API your code calls | [Choose the right API](https://www.udibo.com/docs/identity/apis) | | Prepare a launch | [Production checklist](https://www.udibo.com/docs/identity/production) | | Set email limits and confirm usage alerts | [Usage, limits, and alerts](https://www.udibo.com/docs/identity/usage-limits) | | Fix an integration problem | [Troubleshooting](https://www.udibo.com/docs/identity/troubleshooting) | _Last verified 2026-11-01._