Everything you'd build yourself, already built
Providame covers the full surface of a modern auth system — sign-up and sign-in flows, social and enterprise login, per-user roles, machine auth, and the SDKs to wire it all into your frontend in a few lines of code.
Every sign-in method your users expect
Six ways in, one consistent session model underneath.
Password
Classic email + password, with breach-password checks against Have I Been Pwned on every signup and reset.
Passkeys (WebAuthn)
Self-service passkey registration, plus admin-generated registration links for users who aren't currently signed in.
Social & enterprise login
Google, GitHub, Apple, Facebook, generic OIDC, and SAML — configured per environment, with shared dev credentials to get started instantly.
Email one-time codes
Passwordless sign-in via a code sent to the user's inbox — no password to remember, reset, or leak.
SMS one-time codes
Text-message codes as a first factor, backed by a pluggable SMS provider.
Two-factor (TOTP)
Standard authenticator-app codes as a second factor on top of password sign-in.
A real admin surface, not just an API
Everything below is a click in the dashboard, not a support ticket to your own engineers.
Three-tier metadata
Public metadata your backend and dashboard control, private metadata never exposed to the frontend, and unsafe metadata the end-user can read and write themselves.
Custom roles & grants
Define role keys per environment and grant them to individual users — grants ride straight in the access token via standard project-role claims.
Sign-up policies
Open, allowlist, blocklist, invite-only, or waitlist sign-up modes — approve waitlisted users with a single action.
Impersonation
Exchange for a real access token acting as any end-user, for fast, safe support and debugging.
Session management
See every active session per user, and force-revoke any of them from the dashboard.
Fine-grained permissions
Grant access to one specific resource — this document, that project — not just a role across your whole app.
SCIM directory sync
Provision and deprovision users automatically from Okta or Entra — no manual account management for enterprise customers.
B2B? Organizations are built in
Group your end-users into their own teams — companies, workspaces, whatever your product calls them — each with its own members and roles.
One user, several organizations
An end-user can belong to more than one organization at once, each with their own role and permission set.
Org-local roles
Define roles that only apply inside one organization, on top of your environment-wide role catalog.
Invitations
Invite a teammate by email, or auto-join anyone who signs up with a verified company domain.
Drop-in SDKs for the stack you already use
Same flows, same class names, across four client packages — plus a server SDK for your own backend.
Backend API
Server-to-server REST endpoints authenticated by your secret key — list users, read metadata and roles, no frontend token required.
Webhooks
Subscribe to end-user lifecycle events and react to them from your own backend in real time.
Custom domains
Serve sign-in under your own hostname — auth.yourapp.com — instead of ours, with automatic TLS.
See it running in your app today
Every feature above is live in the dashboard the moment you create a workspace.
Get started for free