Authio Lobby

Authio Lobby provides passwordless sign-in for apps through a hosted interface, SDKs, session features, sign-in methods, and embeddable widgets for customer IT admins. Options include passkeys, magic links, social login, and enterprise SSO through SAML 2.0, OIDC, and SCIM 2.0. The hosted sign-in interface can use a custom domain, organization-specific branding, and project-specific email templates. SDKs are listed for Next.js, React, Vue, and Node, with session helpers and edge-runtime JWT verification. Session features include silent refresh, secure cookie helpers, route gating, and switching organizations within a session. Admin widgets let customers configure SSO, directory sync, and domain verification inside a product. Listed social providers include Google, Microsoft, Apple, GitHub, Slack, LinkedIn, and Discord. The Developer tier is free forever for projects under 10,000 MAUs, but excludes SSO, SCIM, and Locate. Starter costs $129 a month, and Pro costs $449 a month; Enterprise pricing is custom. Authio says GDPR and CCPA compliance is in place and describes its SOC 2 posture as pre-audit readiness, with Type I targeted for 2027-Q1.

Authio Lobby combines passwordless sign-in with session and enterprise identity tools. The free tier has clear feature exclusions, while higher tiers list monthly costs or custom pricing.

Lobby is positioned for B2B SaaS teams that need passwordless sign-in and enterprise identity features such as SSO and SCIM. Teams needing those enterprise features should note that they are absent from the Developer tier.

Authio Lobby is a hosted passwordless authentication service with SDKs, session controls, and embedded enterprise identity administration. It is aimed at B2B SaaS products whose customers need to configure sign-in inside the product itself. The main buying question is whether your project requires enterprise connections or directory sync before it can stay on the free tier.

Overview

Lobby combines passkeys, magic links, social login, SMS OTP, SAML 2.0, and OpenID Connect in one sign-in layer. Its hosted interface supports a custom domain, branding for each organization, and project-specific email templates. That makes it suitable for multi-tenant products that want a consistent but customer-aware authentication experience.

Enterprise administration is a central strength. Embeddable widgets allow a customer’s IT administrators to configure SSO, directory synchronization, and domain verification without leaving the customer’s application. Directory sync is supported, but the free Developer plan excludes SCIM and SSO, so many B2B deployments will need a paid plan immediately.

Key features

Passkeys use WebAuthn/FIDO2 and are described as phishing-resistant. Refresh-token rotation and rate-limited authentication endpoints add sensible protections around the sign-in flow. These are useful security foundations, although Authio describes its SOC 2 position as pre-audit readiness, with Type I targeted for 2027-Q1; GDPR and CCPA compliance are in place.

SDKs are provided for Next.js, React, Vue, and Node. Session helpers cover silent refresh, secure cookie handling, route gating, and switching between organizations during a session, while edge-runtime JWT verification suits deployments that need verification close to the request path. Teams using other frameworks will have less directly documented SDK coverage.

Social sign-in includes Google, Microsoft, Apple, GitHub, Slack, LinkedIn, and Discord. Magic-link delivery can use Postmark, Resend, SendGrid, Mailgun, or a customer-supplied Amazon SES transport, giving teams several ways to fit existing mail infrastructure.

Pricing

Lobby has a free Developer plan, paid plans from $129 a month, and a 14-day trial.

Developer works for a small project that only needs passwordless methods and can remain within one organization. Starter is the practical entry point for teams that need a few enterprise connections and directories, but it still lacks custom domains. Pro is priced for larger deployments needing unlimited SSO and SCIM, stronger audit tooling, and more organizations. Enterprise is for customers requiring dedicated infrastructure, regulated-data agreements, residency controls, or customer-specific allocations.

Platforms

Lobby is offered for Android, iOS, web, and API integrations. The listed SDKs focus on Next.js, React, Vue, and Node, with edge-runtime JWT verification.

Who it's for

Choose Lobby when you are building B2B SaaS and want customers’ IT teams to set up SSO, directory sync, and domain verification inside your own interface. It also fits products standardizing on passkeys and hosted authentication while retaining organization-aware sessions. It is less suitable when you need SSO or SCIM on a no-cost plan, or when your stack falls outside the listed SDK ecosystems.

Pros and cons

Pros

• Broad sign-in coverage, including passkeys, magic links, social providers, SAML, and OIDC.
• Embedded IT-admin widgets keep SSO, directory sync, and domain verification in the customer product.
• Session features include silent refresh, secure cookies, route gating, and multi-organization switching.
• Pro and Enterprise add custom domains, while Enterprise provides dedicated infrastructure and residency options.

Cons

• Developer excludes SSO, SCIM, and Locate, limiting its usefulness for enterprise-oriented B2B products.
• Starter costs $129 a month and still omits custom domains.
• SDK documentation named here centers on four web-oriented stacks.
• SOC 2 is described as pre-audit readiness rather than an already completed certification.

Alternatives

Descope is worth considering if open-source SDKs and a free tier for 7,500 MAUs with tenant and SSO allowances fit your launch. Hanko suits teams seeking a free 10,000-MAU starter offering and self-hosted availability. FusionAuth is the alternative when self-hosting and a free Community edition matter more than a hosted Lobby-style setup. Okta Customer Identity Cloud is another option for teams comparing established customer-identity plans, starting with a 500-MAU Essentials tier. Bitwarden, Duo Mobile, Auth0 Guardian, and MojoAuth each offer different authentication products and plan structures.

For broader browsing, see Passwordless Authentication Software and Passkey Authentication Software.

Verdict

Authio Lobby is a strong fit for B2B SaaS teams that want passwordless sign-in plus in-product SSO and directory administration. Its best reason to choose it is the combination of embedded enterprise setup and organization-aware session tooling. Look elsewhere if enterprise identity is required on a free plan, if you need broader SDK coverage, or if completed SOC 2 certification is a current requirement.