Logto blog

Discover Logto and explore plenty of resources on authentication, authorization, identity management, open standards (OAuth, OpenID Connect, SAML), and more.

Featured posts

Changelogs

release

Logto product updates

Logto v1.36 brings wildcard redirect URI support for preview deployments, app-level token exchange control, trust unverified email option for OIDC connectors, and the ability to skip identifier collection for social sign-in.

1/30/2026less than a minute read

Sijie

Developer

Logto product updates

Product

logto
recap

Logto 2025: scaling and trust

1/12/20262 min read

Logto 2025: scaling and trust

Changelogs

release

Logto product updates

12/30/20252 min read

Logto product updates

All posts

Product
- identity management
- enterprise
- auth
How to choose an identity provider: The engineering team's evaluation framework
A practical IdP evaluation framework built from real enterprise requirements. Covers protocol depth, migration, multi-tenancy, AI-readiness, and the criteria most checklists miss.
2/13/202615 min read
How to choose an identity provider: The engineering team's evaluation framework
Tech
- mcp-server
- saas
- ai-agent
- developer-experience
Remote MCP server in action: a new entry point for SaaS products in the AI era
Learn how to build a Remote MCP Server for your SaaS product. We share our experience with MCP vs Agent Skills, OAuth integration, and MCP tools design.
2/4/20266 min read
Remote MCP server in action: a new entry point for SaaS products in the AI era
Product
- mcp
- ai
- authentication
Ship user authentication with one prompt: introducing Logto MCP Server
Bring authentication into your app without bouncing between docs, dashboards, and SDK setup.
2/4/2026less than a minute read
Ship user authentication with one prompt: introducing Logto MCP Server
Changelogs
- release
Logto product updates
Logto v1.36 brings wildcard redirect URI support for preview deployments, app-level token exchange control, trust unverified email option for OIDC connectors, and the ability to skip identifier collection for social sign-in.
1/30/2026less than a minute read
Logto product updates
Product
- logto
- recap
Logto 2025: scaling and trust
The best year yet for Logto. A recap of what we shipped, why enterprises chose Private Cloud, what we learned about reliability, and what’s next in 2026.
1/12/20262 min read
Logto 2025: scaling and trust
Tech
- guest mode
- anonymous users
- user conversion
How to implement guest mode (anonymous users) and convert to Logto users
Learn how to implement guest mode and convert to Logto users using a three-phase pattern: manage guest sessions, authenticate with OIDC, and securely merge guest data to user accounts.
1/9/20263 min read
How to implement guest mode (anonymous users) and convert to Logto users
Tech
- postmortem
Postmortem: authentication failures caused by JWKS caching and signing key rotation
Postmortem for the authentication incident on Jan 8, 2026 (PST).
1/8/2026less than a minute read
Postmortem: authentication failures caused by JWKS caching and signing key rotation
Changelogs
- release
Logto product updates
Logto v1.35 is here. This release adds reCAPTCHA domain customization and checkbox mode for Enterprise, expands third-party app support to SPA and Native applications, and includes client IP tracking for passwordless connectors.
12/30/20252 min read
Logto product updates
Product
- auth
- ai
- skill
Understanding AI agent skills: Why authentication security matters
Skills turn AI into active operators, but managing secure, scoped credentials across many tools makes authentication one of the hardest challenges.
12/26/20255 min read
Understanding AI agent skills: Why authentication security matters
Tech
- OAuth 2.0 DCR
- DCR
- RFC 7591
- API Security
What is Dynamic Client Registration (DCR)? The key to scalable OAuth 2.0
Learn how Dynamic Client Registration (DCR) automates OAuth 2.0 onboarding. Discover RFC 7591, Software Statement Assertions, and how to secure your API ecosystem.
12/19/20253 min read
What is Dynamic Client Registration (DCR)? The key to scalable OAuth 2.0
Product
- soc2
- gdpr
The gatekeepers of compliance: analyzing identity authentication under SOC 2 and GDPR
Learn how SOC 2 and GDPR legally require identity verification, MFA, access controls, and audit logs, with direct references to official standards.
12/12/20254 min read
The gatekeepers of compliance: analyzing identity authentication under SOC 2 and GDPR
Tech
- auth providers
- 2026
- agent
Top 7 best auth and agent-friendly providers in 2026
Discover the top 7 auth providers for SaaS and AI agents in 2026. Compare M2M auth, multi-tenancy, CLI security, and enterprise-ready features.
12/4/20257 min read
Top 7 best auth and agent-friendly providers in 2026
Product
- Custom domains
- Multiple domains
- Authentication
What is authentication custom domain and why multiple domains matter
Learn how authentication custom domains and multiple domains improve conversion, security, and branding; and how Logto helps you manage them without DNS headaches.
11/28/20255 min read
What is authentication custom domain and why multiple domains matter
Tech
- auth
- cli
- ai
What is CLI Auth and the common methods used today
CLI auth is becoming central to modern developer workflows. Logto supports all major CLI authentication methods.
11/28/20253 min read
What is CLI Auth and the common methods used today
Changelogs
- release
Logto product updates
Logto v1.34 is here. This release introduces isolated cross-app authentication, a new Identifier.Lockout webhook event, and fixes to ensure refresh tokens correctly honor the full 180-day TTL.
11/28/2025less than a minute read
Logto product updates
Tech
- AI
- Agent
MCP server vs Tools vs Agent skill
MCP servers, tool-use, and agent skills: understanding the layers of modern AI development
11/20/20255 min read
MCP server vs Tools vs Agent skill
Changelogs
- release
Logto product updates
We’ve just brought v1.33, bringing Account Center configuration, MFA skip controls API, and a few handy improvements.
10/31/2025less than a minute read
Logto product updates
Product
- GitHub
- Secret vault
- Token storage
- OAuth
- Social sign-in
GitHub Apps vs. OAuth Apps: Choose the right GitHub connection
Compare GitHub Apps vs OAuth Apps for Logto integration. Learn key differences in security, permissions, token management, and choose the right GitHub authentication method for your application.
10/24/20254 min read
GitHub Apps vs. OAuth Apps: Choose the right GitHub connection
Product
- security
- enterprise ready
How to make your product Enterprise-Ready: The complete checklist
Learn how to make your SaaS product enterprise-ready with this 2025 checklist on security, compliance, and scalability.
10/10/20258 min read
How to make your product Enterprise-Ready: The complete checklist
Tutorial
- localization
- internationalization
- i18n
- l10n
- ui_locales
- locale
Localize your Logto sign-in experience with OIDC ui_locales
Make your sign-in experience feel native to every user. In this tutorial, you’ll learn how to use the standard OIDC parameter ui_locales to set the runtime language of Logto’s sign-in UI and related emails.
9/30/20252 min read
Localize your Logto sign-in experience with OIDC ui_locales