AuthNexo

Identity & access for your whole organisation. A self-hosted-friendly OIDC/OAuth2 identity provider — the Entra ID alternative for teams that don't need Entra-scale.

Single sign-on

One login for every app in your organisation via OIDC/OAuth2 with PKCE.

Passkeys & MFA

Passkeys, TOTP authenticator apps, and recovery codes — no phone-number 2FA to maintain.

Dynamic groups

Group membership managed by rules on user attributes, not manual lists.

SAML & SCIM

Federate with SAML service providers and provision users automatically via SCIM.

Conditional access

Require MFA or restrict sign-in by IP for specific apps or all of them.

Audit logs

Every admin action and sign-in event, searchable and exportable.

100 active users, free

Every Nexora organisation gets up to 100 active AuthNexo users at no cost. Upgrade when you outgrow it — no bundled contract with the other products.