Skip to content
Product capabilities

ProAuth Features

Modular, multi‑tenant identity with runtime configuration and deep integration hooks. Technical deep dives are available in the documentation.

Protocols & Flows

  • Standards‑compliant OpenID Connect 1.0 and OAuth 2.0 for modern client and API architectures
  • Authorization Code with PKCE, Client Credentials, Device Authorization, and Token Exchange flows
  • security baseline: exact redirect matching, issuer validation, no password grant, and refresh-token replay protection

Learn more in the docs

Advanced OIDC & OAuth Security

  • FAPI 2.0 Security Profile as opt-in policy enforcement for high-value tenants and client applications
  • DPoP and mTLS certificate-bound access tokens reduce replay value when tokens leak
  • PAR and JAR harden authorization requests before the browser redirect
  • JWT introspection responses, reference tokens, token encryption, and revocation-friendly API validation
  • Pairwise subject identifiers and claims requests support privacy-focused relying-party integrations

Security featuresFAPI 2.0DPoP

Multi‑tenancy & Runtime Configuration

  • Isolate config, branding, user stores, and policies per tenant
  • Change tenants, apps, federation, and settings at runtime—no redeploys

Basic configurationCertificates

UI & Multifactor Authentication

  • Branded login per tenant and per application
  • Passwordless User Store login with passkeys based on FIDO2/WebAuthn
  • Phishing-resistant passkey MFA for User Store and federated users, plus TOTP, SMS, and Email

MFAAuth view customizationCustom assets

Claims Rule Engine

  • Shape tokens per app: add, transform, or remove claims with rules

Claim rules

User Stores & Federation (SCIM)

  • Per‑tenant user directories created on demand (Azure SQL/SQL Server)
  • Federate to customer IdPs and sync users & groups via SCIM (e.g., Entra ID, AD)

FederationUser storeSCIM

Extensibility & Automation

  • SDKs and REST APIs for deep integration
  • Automate with CLI and idempotent YAML; react to events via Dapr

CLIManagement APIUser Store API

Security & Compliance

  • Encryption at rest for sensitive data and optional token encryption for access tokens, ID tokens, UserInfo responses, and introspection responses
  • Signed, tamper‑evident audit trails for admin changes and authentication events
  • Hardened containers with least‑privilege defaults
  • Continuous security checks across code, dependencies, images, and configuration

AuditingArchitecture

Operations & Observability

  • Health checks (liveness/readiness) for reliable orchestration
  • OpenTelemetry for logs, metrics, and traces
  • Custom spans and business metrics for deeper insights
  • Works with your existing monitoring and alerting stack

Monitoring

See feature comparisonSee pricing