Authio Lobby

Overview

Authio Lobby combines hosted app sign-in, session management and embedded identity administration for customer organizations. It suits B2B SaaS teams that want to add passwordless access and let customers configure enterprise identity within the product. Its strongest case is that combination; teams needing SSO or SCIM cannot stay on the free tier.

Key features

Lobby supports passkeys, magic links, SMS OTP, social OAuth, SAML 2.0 and OIDC sign-in. The hosted interface can use organization-specific branding and project-specific email templates, while custom domains are reserved for Pro and Enterprise. That makes the sign-in flow adaptable, but Starter buyers pay for the service without gaining the custom-domain option.

SDKs for Next.js, React, Vue and Node include session helpers and edge-runtime JWT verification. Silent refresh, secure cookie helpers, route gating and multi-organization switching address common session needs in customer-facing apps. Teams building on other stacks should confirm integration fit before choosing Lobby.

Social sign-in includes Google, Microsoft, Apple, GitHub, Slack, LinkedIn and Discord. Magic links can use Postmark, Resend, SendGrid, Mailgun or a customer-provided SES transport, giving teams several email-delivery choices. Embedded widgets let customer IT administrators set up SSO, directory sync and domain verification inside the customer’s product, a useful distinction for SaaS vendors serving organizations with their own identity requirements.

Refresh tokens rotate, authentication endpoints are rate-limited, and passkeys use phishing-resistant WebAuthn/FIDO2. Authio says GDPR and CCPA compliance is in place; its SOC 2 posture is pre-audit readiness, with Type I targeted for 2027-Q1. That is a relevant caveat for buyers whose procurement requires completed SOC 2 Type I.

Pricing

Developer is free forever for projects under 10,000 MAUs and includes 10,000 MAUs, one organization, passwordless methods and seven-day audit retention. It has Community support and excludes SSO, SCIM and Locate, so it fits early projects that need basic passwordless access rather than enterprise identity setup.

Starter costs $129/mo and includes 10,000 MAUs, three SSO connections, three SCIM directories, five organizations, Locate Basic and 30-day audit retention. Email support is included. It is the entry point for teams that need limited customer SSO and directory sync, but offers no custom domain and caps both connections and directories.

Pro costs $449/mo, raising the allowance to 25,000 MAUs and offering unlimited SSO and SCIM, 50 organizations, FGA, audit streams, Locate Full, and email support with a priority queue. It is the more suitable tier for growing products with many enterprise customers or heavier identity needs. Enterprise has custom pricing, dedicated infrastructure, custom MAU and connection allotments, unlimited organizations and Locate, HIPAA BAA/DPA, residency options, BYO-KMS, and priority support by contract.

A 14-day trial is available. Compare expected active users, organizations, SSO connections and SCIM directories against the tier limits: Starter keeps the same 10,000-MAU ceiling as Developer, while Pro is the first tier with unlimited SSO and SCIM.

Platforms

Lobby supports Android, iOS, web and API use. Its published SDK list focuses on Next.js, React, Vue and Node.

Who it's for

Lobby is best suited to B2B SaaS teams that need passwordless sign-in alongside customer-configurable SSO and directory synchronization. Developer can serve a small project that does not need those enterprise features; teams that do need them should budget for Starter or above. It is a weaker fit for teams whose framework is outside the listed SDKs or whose procurement requires completed SOC 2 Type I.

Pros and cons

• Pro: Embedded IT-admin widgets let customers configure SSO, directory sync and domain verification without leaving the SaaS product.
• Pro: Passkeys, multiple social providers and several magic-link email transports give teams meaningful sign-in and delivery choices.
• Pro: Pro removes SSO and SCIM connection caps and adds 25,000 MAUs, audit streams and Locate Full.
• Con: The free Developer tier excludes SSO and SCIM, so it cannot cover a central enterprise requirement.
• Con: Starter charges $129/mo while retaining a 10,000-MAU limit, three SSO connections and three SCIM directories.
• Con: Custom domains require Pro or Enterprise, and SOC 2 Type I is only targeted for 2027-Q1.

Alternatives

Consider FusionAuth if self-hosting matters: its free Community plan is self-hosted and includes core authentication features. Okta Customer Identity Cloud is worth comparing if its Essentials tier’s 500 monthly active users and 10 organizations suit your scale. For password management rather than app identity infrastructure, Bitwarden offers free basic password management with unlimited devices and passwords.

Other options include Trusona, Ory, Clerk, Descope and Duo Mobile; compare their plans and capabilities against your needs.

Readers comparing categories can also browse Passwordless Authentication Software and Passkey Authentication Software.

Verdict

Choose Authio Lobby if you are building B2B SaaS and want hosted passwordless access paired with customer-facing SSO and directory setup. Its embedded administration and broad session tooling are the clearest reasons to choose it. Look elsewhere if you need SSO or SCIM at no cost, require a custom domain on Starter, or need completed SOC 2 Type I now.