Protocols & Flows
- Standards‑compliant OpenID Connect 1.0 and OAuth 2.0
- Authorization Code (PKCE), Client Credentials, and Token Exchange flows
ProAuth Features
Modular, multi‑tenant identity with runtime configuration and deep integration hooks. Technical deep dives are available in the documentation.
Multi‑tenancy & Runtime Configuration
- Isolate config, branding, user stores, and policies per tenant
- Change tenants, apps, federation, and settings at runtime—no redeploys
UI & Multifactor Authentication
- Branded login per tenant and per application
- Built‑in MFA: Passkeys, TOTP, SMS, and Email
Claims Rule Engine
- Shape tokens per app: add, transform, or remove claims with rules
User Stores & Federation (SCIM)
- Per‑tenant user directories created on demand (Azure SQL/SQL Server)
- Federate to customer IdPs and sync users & groups via SCIM (e.g., Entra ID, AD)
Federation · User store · SCIM
Extensibility & Automation
- SDKs and REST APIs for deep integration
- Automate with CLI and idempotent YAML; react to events via Dapr
Deployment & Operations
- Kubernetes‑ready containers with rolling upgrades and horizontal scaling
- Zero‑downtime rollouts with safe rollback
Security & Compliance
- Encryption at rest for sensitive data
- Signed, tamper‑evident audit trails for admin changes and authentication events
- Hardened containers with least‑privilege defaults
- Continuous security checks across code, dependencies, images, and configuration
Operations & Observability
- Health checks (liveness/readiness) for reliable orchestration
- OpenTelemetry for logs, metrics, and traces
- Custom spans and business metrics for deeper insights
- Works with your existing monitoring and alerting stack