# Udibo

> Hosted identity with Udibo Identity, or application-owned OAuth2/OIDC
> with `@udibo/oauth2`. Choose the integration path before writing code.

Udibo Identity is in private beta. The public package quickstart runs locally without a hosted account.

Start a hosted integration: https://www.udibo.com/docs/identity/get-started
Move an existing application: https://www.udibo.com/docs/identity/migrate
Run application-owned authentication: https://www.udibo.com/docs/oauth2/quickstart
Agent integration brief: https://www.udibo.com/docs/identity/agents
Full service guides: https://www.udibo.com/docs/identity/llms-full.txt

The full package corpus is one file: https://www.udibo.com/docs/oauth2/llms-full.txt

## Udibo Identity

### Start here

- [Start with Udibo](https://www.udibo.com/docs/identity): Choose managed identity or app-owned authentication and understand what you operate.
- [Connect your first application](https://www.udibo.com/docs/identity/get-started): Get beta access, register an application, and complete your first sign-in.
- [Configure an application](https://www.udibo.com/docs/identity/applications): Configure client credentials, callbacks, grants, and token validation for each environment.
- [Understand the pieces](https://www.udibo.com/docs/identity/concepts): Understand tenants, applications, users, organizations, sessions, and permissions.
- [Choose a starting project](https://www.udibo.com/docs/identity/starter-projects): Choose a runnable example for a new project and know what needs replacing before production.
- [Build with an agent](https://www.udibo.com/docs/identity/agents): Give a coding agent the integration context, public sources, and acceptance checks it needs.
### Sign-in methods

- [Social login](https://www.udibo.com/docs/identity/social-login): Connect Google, GitHub, Discord, Apple, or an OIDC provider and understand account linking.
- [Passwordless sign-in](https://www.udibo.com/docs/identity/passwordless): Enable email codes and magic links, with their lifetimes and sign-in rules.
- [Multi-factor authentication](https://www.udibo.com/docs/identity/mfa): Configure authenticator apps, recovery codes, and your MFA policy.
- [Sign-up fields and custom metadata](https://www.udibo.com/docs/identity/signup-fields): Collect additional account details and choose who can edit each field.
### Build your product

- [Organizations](https://www.udibo.com/docs/identity/organizations): Group users into customer companies with invitations, memberships, and organization roles.
- [Permissions and Roles](https://www.udibo.com/docs/identity/permissions): Define permissions, assign roles, and enforce access in your application.
- [Build a B2B SaaS application](https://www.udibo.com/docs/identity/b2b-saas-template): Build a B2B app with sign-in, organizations, roles, and verified webhooks.
- [Build a consumer application](https://www.udibo.com/docs/identity/b2c-app-template): Build a consumer app with account recovery, verified email, and user-owned data.
- [Build a client portal](https://www.udibo.com/docs/identity/client-portal-template): Build a client portal with document sharing and live resource permission checks.
- [Protect an MCP server](https://www.udibo.com/docs/identity/mcp-server-template): Protect a stateless MCP server with hosted sign-in and organization permissions.
### Move to Udibo

- [Move an existing application to Udibo](https://www.udibo.com/docs/identity/migrate): Move an existing application in stages, preserve user identity, and rehearse rollback.
- [User import](https://www.udibo.com/docs/identity/user-import): Import user profiles and supported password hashes, with an upgrade on first sign-in.
### Go live and operate

- [Webhooks](https://www.udibo.com/docs/identity/webhooks): Verify event signatures, handle duplicate deliveries, and understand retry behavior.
- [Audit log](https://www.udibo.com/docs/identity/audit-log): Investigate tenant activity and export audit events as CSV or NDJSON.
- [Get ready for production](https://www.udibo.com/docs/identity/production): Review environments, sessions, authorization, recovery, and launch readiness.
- [Find the next check](https://www.udibo.com/docs/identity/troubleshooting): Diagnose callback, cookie, scope, sign-in, and permission problems in order.

## @udibo/oauth2

### Docs

- [README](https://www.udibo.com/docs/oauth2): package overview, runtime boundaries, and entrypoints
- [Documentation index](https://www.udibo.com/docs/oauth2/index): choose managed or app-hosted integration
- [Use Udibo](https://www.udibo.com/docs/oauth2/guides/use-udibo): private-beta prerequisites, BFF wiring, validation, troubleshooting
- [Quickstart](https://www.udibo.com/docs/oauth2/quickstart): run and inspect a complete local application
- [Host authorization for your app](https://www.udibo.com/docs/oauth2/guides/become-an-oauth-provider): services, endpoints, grants, consent, refresh, and OIDC issuance
- [Add login](https://www.udibo.com/docs/oauth2/guides/add-login): app-owned user/credential storage, sessions, mail, and protections
- [Protect an API](https://www.udibo.com/docs/oauth2/guides/protect-an-api): introspection/JWKS, scopes, and BFF proxying
- [React integration](https://www.udibo.com/docs/oauth2/guides/react): session state, guards, and forms for app-owned login
- [Integration testing](https://www.udibo.com/docs/oauth2/guides/testing): route fixtures, persistent store contracts, and browser checks
- [MFA](https://www.udibo.com/docs/oauth2/guides/add-mfa): enrollment, pending login, challenge, and recovery
- [Passwordless](https://www.udibo.com/docs/oauth2/guides/passwordless): email links/codes, storage, and request/verification behavior
- [External sign-in](https://www.udibo.com/docs/oauth2/guides/social-sign-in): trusted providers, callbacks, transient cookies, and linking
- [Password migration](https://www.udibo.com/docs/oauth2/guides/migrate-from-another-provider): import existing app credentials and upgrade on login
- [Environment configuration](https://www.udibo.com/docs/oauth2/guides/deploy-across-environments): local, preview, and production callback and secret configuration
- [Application deployment](https://www.udibo.com/docs/oauth2/guides/production-deployment): persistence, cookies, keys, and app-side operational requirements
- [Deployment checklist](https://www.udibo.com/docs/oauth2/guides/hardening-checklist): review the boundaries your integration enables
- [Local identity provider](https://www.udibo.com/docs/oauth2/guides/run-a-local-identity-provider): local OAuth2/OIDC development and CI without a hosted account
- [Extension reference](https://www.udibo.com/docs/oauth2/trigger-points): callbacks and stores, when they run, failure semantics
- [Known limitations](https://www.udibo.com/docs/oauth2/known-limitations): constraints and responsibilities that affect integration choices
- [Stability](https://www.udibo.com/docs/oauth2/stability): versioning and runtime support
- [Issue triage](https://www.udibo.com/docs/oauth2/triage): package issue handling
- [Security](https://www.udibo.com/docs/oauth2/security): vulnerability reporting
### Examples

- [Hono with own auth](https://www.udibo.com/docs/oauth2/examples/hono/app-with-own-auth): authorization server, login, BFF, and API together
- [Hono with external auth](https://www.udibo.com/docs/oauth2/examples/hono/app-with-external-auth): client/BFF integration with a separate issuer
- [Hono API](https://www.udibo.com/docs/oauth2/examples/hono/api-service): a resource server without a frontend
- [Juniper with own auth](https://www.udibo.com/docs/oauth2/examples/juniper/app-with-own-auth): SSR React with app-owned login
- [Juniper with external auth](https://www.udibo.com/docs/oauth2/examples/juniper/app-with-external-auth): SSR React with delegated login
### Starter templates

- [Juniper](https://www.udibo.com/docs/oauth2/templates/juniper): SSR React with app-owned auth and a BFF
- [React Router](https://www.udibo.com/docs/oauth2/templates/react-router): a React SPA with a Hono BFF
### Project

- [Contributing](https://www.udibo.com/docs/oauth2/contributing): development setup, conventions, and the release process

## Compare identity products

- [Compare identity products](https://www.udibo.com/docs/compare): Udibo compared with Clerk, Auth0, WorkOS, Stytch, Cognito, Supabase, and more: sourced pricing side by side, what each includes, and when to switch.
### Managed identity

- [Udibo vs Clerk](https://www.udibo.com/docs/compare/clerk): Udibo vs Clerk: pricing side by side, what is included on Free, organizations and roles, and when Clerk is still the right choice.
- [Udibo vs Auth0](https://www.udibo.com/docs/compare/auth0): Udibo vs Auth0: pricing side by side, which plan first includes MFA and roles, enterprise requirements, and migration planning.
- [Udibo vs WorkOS](https://www.udibo.com/docs/compare/workos): Udibo vs WorkOS: AuthKit's free million users against per-connection SSO fees, organizations, permissions, and pricing side by side.
- [Udibo vs Stytch](https://www.udibo.com/docs/compare/stytch): Udibo vs Stytch: pricing side by side, included connections, custom roles and resource permissions, and when Stytch fits better.
### Platform identity

- [Udibo vs Amazon Cognito](https://www.udibo.com/docs/compare/cognito): Udibo vs Amazon Cognito: per-user pricing plus SES and SNS, organizations and roles as a product, and when Cognito fits an AWS stack better.
- [Udibo vs Supabase Auth](https://www.udibo.com/docs/compare/supabase): Udibo vs Supabase Auth: pricing side by side including the compute under the users, row-level security versus hosted permissions, and when to switch.
- [Udibo vs Firebase Authentication](https://www.udibo.com/docs/compare/firebase): Udibo vs Firebase Authentication: free sign-in on Firebase against Identity Platform's per-user tiers, organizations and roles as a product, and when to switch.
### Run authentication yourself

- [Udibo vs Better Auth](https://www.udibo.com/docs/compare/better-auth): Udibo vs Better Auth: a free self-hosted framework and its $20 managed tier against Udibo's hosted service and the @udibo/oauth2 package, with pricing side by side.
- [Udibo vs Keycloak](https://www.udibo.com/docs/compare/keycloak): Udibo vs Keycloak: a free identity server you run against a managed service with a usage bill, with the operating cost spelled out and when self-hosting is the right call.
- [Udibo vs FusionAuth](https://www.udibo.com/docs/compare/fusionauth): Udibo vs FusionAuth: the free Community edition and paid editions against a managed usage bill, SAML and SCIM, and when to run it yourself.
- [Udibo vs Ory](https://www.udibo.com/docs/compare/ory): Udibo vs Ory: Kratos, Hydra, and Keto or Ory Network against one managed product, with pricing side by side and the @udibo/oauth2 package beside Hydra.
### Workforce identity

- [Udibo vs Okta](https://www.udibo.com/docs/compare/okta): Udibo vs Okta: employee identity is a different purchase from your product's customer identity; which one you need, and how Okta-federated customers reach Udibo.

## API reference

- [API reference](https://www.udibo.com/docs/api)