FusionAuth Description
FusionAuth is the authentication and authorization platform engineered for developers who demand flexibility and control. Built from the ground up to integrate with any stack, every feature — from user registration to MFA and SSO — is exposed via a modern, well-documented API.
Support for every major identity protocol is included out of the box: OIDC, SAML, OAuth2, JWT, passwordless login, social sign-on, and more. Whether you’re building a greenfield app or retrofitting auth into a legacy system, FusionAuth adapts to your use case — not the other way around.
Need compliance? FusionAuth helps you meet GDPR, HIPAA, and COPPA standards quickly and reliably.
Deploy it your way: install on Linux, Windows, macOS, Docker, or Kubernetes — or go with FusionAuth Cloud, our managed SaaS hosting. No black boxes. No vendor lock-in. Just powerful, customizable auth that works the way you do.
Pricing
Company Details
Product Details
FusionAuth Features and Options
Customer Identity and Access Management (CIAM) Software
FusionAuth is a specialized platform designed for Customer Identity and Access Management (CIAM), empowering organizations to take full charge of their user identity management processes. It facilitates secure user registration, authentication, authorization, and management at scale, while accommodating contemporary protocols such as OAuth2, OIDC, and SAML. Offering features like social login, multi-factor authentication (MFA), passwordless login, consent management, and comprehensive data privacy protections, FusionAuth enables businesses to provide smooth and secure digital interactions across web, mobile, and API environments. Its adaptable deployment options (on-premises, cloud, or hybrid) and API-centric architecture make it a perfect fit for organizations seeking customizable and compliant CIAM solutions without the constraints of vendor lock-in.
Authentication Software
FusionAuth offers a robust authentication solution that prioritizes flexibility, security, and ease of use for developers. It accommodates various authentication methods, including traditional username/password, passwordless options, multi-factor authentication (MFA), and social login integrations. With an API-first design, FusionAuth seamlessly integrates with any technology stack or architecture. It adheres to industry standards by supporting protocols like OAuth2, OIDC, and SAML, ensuring secure and compliant authentication processes. Whether you choose to deploy it on-premises, in the cloud, or in a hybrid setup, FusionAuth empowers you to manage the user login experience effectively while also aiding in compliance with regulations such as GDPR, HIPAA, and COPPA.
Identity Management Software
FusionAuth is an advanced identity and access management (IAM) solution tailored for developers and organizations seeking robust and adaptable authentication methods. It seamlessly integrates with a variety of applications, programming languages, and frameworks, offering essential functionalities such as login, single sign-on (SSO), multi-factor authentication (MFA), passwordless login, SAML, OIDC, and much more, all accessible through a contemporary API. FusionAuth is versatile in deployment options, supporting on-premises, hybrid, or cloud configurations, and features a single-tenant architecture that enhances security. Designed for quick implementation and effortless scalability, it empowers businesses to adhere to compliance requirements like GDPR and HIPAA while maintaining comprehensive control over the user identity management process.
Single Sign On Software
FusionAuth offers powerful Single Sign-On (SSO) features that allow users to log in just once and gain access to numerous applications effortlessly. It is compliant with key industry protocols such as SAML v2, OIDC, and OAuth2, which guarantees its interoperability with various systems and identity providers. With a variety of deployment options available—ranging from on-premises to hybrid and cloud solutions—FusionAuth enables businesses to streamline identity management while maintaining security and control. Its API is designed for developers and the user interface can be tailored, facilitating seamless SSO integration throughout your application ecosystem, thereby enhancing implementation speed and user satisfaction.
Multi-Factor Authentication (MFA) App
FusionAuth offers a powerful Multi-Factor Authentication (MFA) feature designed to bolster account security and minimize the chances of unauthorized access. This includes integrated options for time-based one-time passwords (TOTP) via authenticator applications such as Google Authenticator and Authy, along with SMS verification. Developers can seamlessly incorporate and tailor MFA workflows through FusionAuth’s extensive API, allowing for complete oversight of user interactions and policy enforcement. MFA can be activated individually for users, tailored to specific applications, or applied according to situational criteria, making it a versatile and crucial element for protecting sensitive user information and adhering to compliance requirements.
Passwordless Authentication Software
FusionAuth provides a secure and contemporary approach to Passwordless Authentication, simplifying the login process and bolstering security measures. Users can log in through magic links delivered to their email, removing the burden of password management. This approach minimizes login barriers, enhances user satisfaction, and reduces risks associated with issues like password reuse and phishing attempts. Fully driven by APIs, FusionAuth's passwordless system seamlessly integrates with any application architecture and can be paired with additional security measures such as Multi-Factor Authentication (MFA) for increased safety. It’s an excellent option for organizations aiming to modernize their authentication processes while ensuring complete control and regulatory compliance.
Biometric Authentication Software
FusionAuth offers Biometric Authentication by effortlessly connecting with external identity providers and leveraging device-native features that allow for biometric recognition, such as fingerprints, facial recognition, or voice identification. Although FusionAuth does not directly collect biometric information, it utilizes standards like WebAuthn and FIDO2 to enable secure, password-free access through trusted device authentication. This method improves security, minimizes login hurdles, and aligns with zero-trust frameworks. Developers can smoothly incorporate biometric processes through FusionAuth’s flexible API, maintaining compliance and versatility across various platforms while safeguarding user privacy and data sovereignty.
Risk-Based Authentication Software
FusionAuth offers Risk-Based Authentication (RBA) that adapts security measures based on a variety of factors including user behavior, device information, IP address, geographical location, and additional contextual indicators. Its flexible architecture, paired with event-driven webhooks, enables you to initiate step-up authentication, restrict access, or identify irregularities in real-time. The platform provides complete customization of authentication processes, allowing developers to craft sophisticated risk models and react promptly to potential threats. When integrated with Multi-Factor Authentication (MFA) and other security measures, RBA significantly improves account security without compromising user experience—making it a suitable choice for organizations adopting zero-trust frameworks or those that are compliance-focused.
Identity and Access Management (IAM) Software
FusionAuth offers a comprehensive Identity and Access Management (IAM) solution tailored for contemporary applications and development teams. It allows for centralized oversight of user authentication, authorization, and data management, featuring support for advanced protocols such as OAuth2, OIDC, SAML, and LDAP. With FusionAuth, organizations can implement detailed role and permission management, multi-factor authentication (MFA), and customized access policies to meet the specific requirements of each application. Its API-driven architecture facilitates effortless integration across various environments—whether microservices or monolithic structures—while accommodating on-premises, cloud, or hybrid deployment models. FusionAuth enables organizations to safeguard their digital resources, optimize user management processes, and effortlessly adhere to regulatory standards.
Password Policy Enforcement Software
FusionAuth provides comprehensive Password Policy Enforcement designed to bolster security and adhere to compliance requirements for organizations. Administrators have the flexibility to establish custom password guidelines, encompassing aspects such as minimum length, character complexity, expiration timelines, and history restrictions. Additionally, FusionAuth incorporates breach detection through Have I Been Pwned, ensuring that compromised credentials are not utilized. These policies can be tailored for individual tenants or applications, allowing for meticulous management of user authentication practices. With its adaptable API and user-friendly administrative interface, FusionAuth simplifies the process of enforcing robust password policies that safeguard user accounts while maintaining ease of use.
-
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
An extra layer of protection. Date: Apr 25 2022
Summary: Overall, FusionAuth is an easy to implement application that helps in providing extra security to social media accounts and applications.
Positive: - The best of feature of using FusionAuth is it is extremely straightforward to implement with any application or account.
- It is completely customizable with JavaScript.
- It makes hosting easy because of its flexibility and features.
- The customer support is best in class, someone is always there to help.
- It is a functional application, with rich user interface and easy installation.Negative: - In my experience of 1.5+ years of usage of this application, I haven't found a single con.
Read More... -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Straightforward and complete Date: Nov 29 2021
Summary: FusionAuth is advertised as developers friendly and it can be felt from the very beginning. The API is very well developed and documented. It can be seen that data entities API endpoints are well thought and give flexibility to implement more and less eccentric auth related functionalities.
When looking for auth solution I have defined a number of requirements (IMO, pretty typical ones), and at the moment, FA was the only sensible self-hosted solution covering them all. Finally, I am very pleased with the choice made. The service covers lots of auth related functionalities and it's actively developed.
The team behind FusionAuth is pretty responsive for any issues or bug notices.Positive: - Complete in the sense of auth related functionalities,
- developer friendly - well defined and documented API,
- builtin, customizable authorization flow views,
- easy to extend - if something is missing, you will most likely be able to implement it with API.Negative: - Due to java, the service is a bit resource hungry.
Read More... -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Amazing! Date: Nov 25 2021
Summary: I had to start a project that focused on topics that I don't normally deal with. After a short search, I found this product: I felt at ease. Highly recommended.
Positive: Really well done. You become productive in no time. It is packed with features for almost any need. Quite intuitive interface. It was just a nice discovery.
Negative: Sometimes some functions are not where you expect, but just enter the operating logic to find them!
Read More... -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Great hosted IAM solution for startups Date: Nov 22 2021
Summary: I was able to get FusionAuth up and running immediately and without problems for testing. Production deployment with AWS ECS, RDS, ES, and ELB was very quick too. I've been using it in production for about 2 years with minimal downtime or issues. If I run into a missing feature, it's usually added within a month or two.
Positive: - Amazingly responsive support, even for free version
- Lots of features and constantly improving
- Very easy to test for development in Docker
- Easy to deploy and scale for production in AWS
- Good documentationNegative: - No official support for online upgrades (but downtime is minimal)
Read More...
- Interface could be more modern and intuitive
- Being Java/Tomcat-based takes quite a bit of RAM
- Pricing jump between free and paid is steep with lots of users (but free version scales well) -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Amazing product Date: Nov 15 2021
Summary: After running other open-source idm solutions, switching to FusionAuth was like a breath of fresh air. Stupidly fast startup time compared to other java-bases solutions on the market, way easier customization and overall smooth experience. Plus free plan, can't beat it. We're in the late stage of development and haven't switched to the premium features yet, but price looks really good even for a startup like us.
Worth mentioning, that developers are very active on github.Positive: Setup process is very straightforward and easy. Cluster setup is surprisingly painless and, again, easy. All (and I mean all) operations are available through the API with variety of clients provided. Easy customization of everything: themes, jwt propagation, messages, passwords, automatic actions, etc.
Negative: The only thing I could think of is lack of pagination in API, but developers are actively working towards the implementation, so this isn't a major concern in a long run.
Read More... -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Developer friendly and cost effective solution Date: Nov 03 2021
Summary: We've been looking for an auth solution that supports SSO, OAuth2, MFA and theming while still being cost-effective. We've evaluated a few different solutions but FusionAuth fitted our needs perfectly and after over a year, we're still happy that it was our choice.
Positive: A lot of features, good documentation, great support, theming. Can be installed on-premise or used as SaaS. Multiple installation options (docker, Kubernetes, binary).
Negative: Java-based so a bit heavy if used on-premise or locally.
Read More... -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Auth the way it should be.... Date: Nov 01 2021
Summary: Overall 5/5. FusionAuth is an excellent product. Auth is never easy, and if it is, it isn't cheap. FusionAuth bucks this trend.
Positive: Client SDKs in a wide array of languages.
REST API well documented.
Excellent support, super friendly people.
priced to provide equal access for small startups.Negative: Occasional breaking changes with the theme engine. This isn't a big deal if you tend to use client side packages and PKCE but for server side auth, always check your custom themes after FusionAuth updates. I've found that if you go a long time without updating/looking at your theme, the easiest way to get your theme back in working order is to diff the default theme ftl files with your custom ftl files.
Read More... -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Currently the best auth solution in the market. Date: Oct 29 2021
Summary: This product is excellent, and has a really promising future in its area. It's growing quickly as the solution is really well thought, and they are constantly developing new features and fixing bugs.
Currently it's the best quality for the price solution out there, offers a ton of features for free if you have the technical skills to manage it, otherwise you still have an affordable hosted version. There are also some paid features, an although they are increasing in number lately, for now they are not necessary at all.
Overall, the best solution in the auth market.Positive: Good quality-to-price ratio.
Good support. Option to go free version.
Quite easily installated.
Extense API, makes it easy to use in any language.
Highly customizable.
SAMLv2 / OIDC configurations for free. This enables to connect your apps to different institutions.
Good support and growing community.Negative: Increasing paid only features. Although it makes sense as a market strategy, I am really hoping this is not going to be a transition to a paid only or "only useful when you pay" version of the product.
Read More...
Their forum as a support tool is promising, but currently there is no so much user interaction in it, and assistance to asking members relies in the admin and moderators. It would be exciting to see an active community sharing their experience and solutions, helping each other.
Maybe they should boost it up a bit so users are more attracted to use it and expend time sharing. Or maybe it is just a matter of time. -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Really great auth mechanism, meets all my needs Date: Oct 28 2021
Summary: I am very happy with FusionAuth and will keep using it.
I have already recommended it to my fellow devs.Positive: Fusion Auth has excellent documentation which is detailed, clear and concise.
It’s free to use and deploy.
There is a python client available which makes it very quick and easy to integrate with other apps.Negative: The advanced search feature is not available for postgresql only elastic search.
Read More... -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Best auth system I've seen Date: Oct 28 2021
Summary: I've used this in two projects now. In the first, I wanted to figure out how to get Istio to authenticate using OAuth2 without running through auth-proxy for every message. This worked really well and allows customers to manage their own accounts, whether user/pass or Google login or whatever else I wanted to set up. Easy.
Positive: Easy to get running on my own cluster. Relatively simple configuration, considering. Mild humor in the documentation went a long way to quelling any frustration I might have felt while figuring it out. Overall, it just works.
Negative: Maybe some of the defaults weren't as helpful as they could be, specifically had to figure out the hard way that symmetrical HMAC keys aren't acceptable to a lot of systems that want priv/pub RSA keys. Slightly awkward web interface requires you to hit SAVE or lose your work--which is good and bad.
Read More... -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Amazing Auth Service Date: Oct 27 2021
Summary: We adopted it in our company and progressively replace Auth0, which allows us to save money and control better the solution.
Positive: Complete, stable, evolving fast, great documentation, and fast support on the website, and free on premise, which allows saving money compared to SAAS equivalents, especially with many users and IdP.
Negative: Some UX parts are a bit hard to use, like the lists of allowed urls.
Read More... -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Flexbile and still usable. Date: Oct 26 2021
Summary: It was easy to get up and running and really enjoyed how I could use it anyway I like. Even when I did have questions, the forum response was very quick. I can scale up my users easily without much cost and just have features I want to pay for.
Positive: I can use as much or as little of it as I like. I can have my entire own front end for auth powered in the backend by FusionAuth, or have it handle it all. The settings are flexible and the learning curve is not that steep.
Negative: Perhaps better walk through of certain fields and what they do, but not much other than that.
Read More... -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Awesome Low Cost Solution For Small Businesses Edited: Oct 26 2021
Summary: I was in contact with the team already a few times, and each time they were helpful, fast and competent. I can really recommend this tool and 10 out of 10 would use it again for my next projects.
Positive: First of all: Unlimited Free Version.
We have a kubernetes set up for our platform and the integration of FusionAuth via the helm chart is just a blizz. Not much fiddling around and together with the kickstarting, we can launch new dedicated FusionAuth instances completely automatised. Further, it can run completely in a private network without needing cloud access, which is a big plus on the privacy side. The API is quite nice to work with and the client libraries (even though not much docs for it, you have to directly go into the code for function definitions) are really helpful and time saving. It is the only and first IAM solution we used, so I cannot really compare it to others, but I like it :)Negative: The release cycle is almost too fast for us. We have to make jumps of multiple minors every few months^^
Read More...
The helm charts weren't up to date with the new versions of the apis, but my PRs were reviewed and merged in under a week!!! -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Great solution for Auth Date: Oct 25 2021
Summary: I didn't get much time to use the product, but I was satisfied for a few weeks I used it. Thanks for coming up with such a great solution.
Positive: What I liked the most was the availability of the docker image that someone can play with, in case setting up the product seems to be complex.
Negative: None. For the time I used FusionAuth, I couldn't find any con.
Read More... -
Likelihood to Recommend to Others1 2 3 4 5 6 7 8 9 10
Awesome free authentication platform Date: Oct 25 2021
Summary: Nothing to envy from paid platforms. Mounting server could be a bit tricky but you can have it done in 30min if you have experience deploying servers.
Positive: It has everything that you could need from an authentication platform, even extra things. The best part is that is open source and free if you manage yourself the platform.
Negative: Just to put a con, it has tons of unused features for my organization.
Read More...