- Home
- Passkey Authentication Software
- FusionAuth
FusionAuth
United States
What it is
FusionAuth is a Customer Identity and Access Management server for authentication, authorization, and user management. It supports username/password login, identity providers, passkeys, and one-time passwords, and implements OAuth 2.0, OpenID Connect, and SAML v2. Social identity providers include Apple, Facebook, Google, and Twitter. Teams can tailor pages and messages and use lambda functions and webhooks. Authorization includes role-based controls across users, roles, groups, applications, and entities, with fine-grained authorization integration. FusionAuth can run locally, on-premises, in private or air-gapped cloud environments, or as a managed FusionAuth Cloud instance. The free Community Edition is self-hosted, unlimited, and has no trial clock. Starter costs $162 a month when billed annually and lists one connector and 100 machine-to-machine entities. The product targets teams managing end users at scale; it does not provide native desktop integration or position itself as an Active Directory replacement.
For and against
For
- Free self-hosted Community Edition has no trial clock
- Supports OAuth 2.0, OpenID Connect, and SAML v2
- Offers passkeys and one-time passwords
- Can run on-premises or in private and air-gapped clouds
- Supports web, API, and self-hosted deployments
Against
- Starter is $162 a month, billed annually
- Starter lists one connector and 100 machine-to-machine entities
- No native desktop integration
The verdict
FusionAuth offers a free self-hosted edition alongside paid plans and multiple deployment options. Its authentication standards and end-user management focus are central considerations for teams evaluating it.
Who it suits
FusionAuth may suit teams managing end users at scale that need configurable authentication and authorization. It is not positioned as a desktop integration or Active Directory replacement.
Plans and prices
Community
self-hosted · unlimited · core authentication · community support
Read 14 Oct 2026 · fusionauth.io
Starter
premium authentication · breached-password detection · machine-to-machine · basic hosting
Read 14 Oct 2026 · fusionauth.io
Enterprise
advanced threat detection · SSO Tenant Manager · 24/7 email and phone support · high-availability hosting
Read 14 Oct 2026 · fusionauth.io
Essentials
advanced connectivity, MFA and security · custom OAuth scopes · email support · business hosting
Read 14 Oct 2026 · fusionauth.io
On the record
- API
- Its core interface is a REST API documented with OpenAPI; the administrative web interface uses the same APIs.fusionauth.io · read 14 Oct 2026
- Authentication
- It supports username/password login, identity providers, passkeys, and one-time passwords.fusionauth.io · read 1 Oct 2026
- Authentication methods
- Supported methods include passwords, social and enterprise identity providers, passkeys and one-time passwords.fusionauth.io · read 14 Oct 2026
- Authorization
- FusionAuth provides role-based access control and fine-grained authorization capabilities.fusionauth.io · read 14 Oct 2026
- Company profile
- LinkedIn lists FusionAuth as a privately held software company headquartered in Broomfield, Colorado, founded in 2009, with 51–200 employees.linkedin.com · read 14 Oct 2026
- Customization
- Pages and messages can be customized, while lambdas alter validation, MFA challenge and token transformation behavior and webhooks react to events.fusionauth.io · read 14 Oct 2026
- Deployment
- The product can run locally, on premises, in a customer cloud, on an air-gapped server or as FusionAuth Cloud.fusionauth.io · read 14 Oct 2026
- Documentation
- Documentation includes API references, installation guides, deployment, security, SDKs, framework quickstarts and operational troubleshooting.fusionauth.io · read 14 Oct 2026
- Free edition
- The Community Edition is free, self-hosted, unlimited, and has no trial clock.fusionauth.io · read 1 Oct 2026
- Funding
- FusionAuth announced a $65 million growth-equity investment from Updata Partners on November 1, 2023, its first outside funding after bootstrapping.fusionauth.io · read 14 Oct 2026
- GDPR features
- Its GDPR guidance describes data isolation, user-data export and deletion APIs, pseudonymous identifiers, configurable password hashing and a 24-hour breach-notification target.fusionauth.io · read 14 Oct 2026
- Identity providers
- Supported social identity providers include Apple, Facebook, Google, and Twitter, with OpenID Connect and SAML v2 providers also supported.fusionauth.io · read 1 Oct 2026
- Install formats
- Self-hosted software is distributed as Docker images, ZIP archives, RPM packages or DEB packages with a database and optional search engine.fusionauth.io · read 14 Oct 2026
- Integrations
- Identity-provider integrations include Apple, Facebook, Google, Twitter and arbitrary OIDC or SAML v2 providers, with connectors, plugins and monitoring integrations also available.fusionauth.io · read 14 Oct 2026
- Legal entity
- The customer licence identifies the maker as Inversoft, LLC doing business as FusionAuth, a Delaware limited liability company.fusionauth.io · read 14 Oct 2026
- Licence
- The core fusionauth-app bundle is closed-source proprietary software that users may not modify, decompile or reverse engineer.fusionauth.io · read 14 Oct 2026
- Limit: Capterra users
- Reported drawbacks include paid registration customization, no user-focused profile-edit interface and the core product not being open source.capterra.com · read 14 Oct 2026
- Limit: G2 users
- Complaints include complex or limited theme customization, non-intuitive advanced workflows, costly self-hosted licensing and missing built-in login rate limiting.g2.com · read 14 Oct 2026
