What is FusionAuth?
FusionAuth is a comprehensive authentication and authorization platform purpose-built for modern development teams and IT departments. Designed for seamless integration, it supports virtually any application stack or programming language. Every capability is fully exposed via APIs, giving your team the flexibility to address complex identity and access management (IAM) requirements without compromise.
From core features like user registration and login, to advanced protocols such as passwordless authentication, MFA, SAML, and OIDC — FusionAuth delivers enterprise-level functionality out of the box. Built-in compliance tools make it easy to align with regulatory standards including GDPR, HIPAA, and COPPA, reducing risk and accelerating deployment.
FusionAuth offers total deployment freedom: run it on any OS, in containers, in your private cloud, or choose FusionAuth Cloud — our fully managed, scalable SaaS hosting option. Whether you’re a startup or an enterprise, FusionAuth empowers your organization to customize and scale your identity infrastructure with confidence and control.
Pricing
Company Facts
Product Details
Product Details
FusionAuth Categories and Features
Single Sign On Software
FusionAuth offers powerful Single Sign-On (SSO) functionalities that allow users to log in once and gain access to various applications effortlessly. It is designed to be compliant with industry standards such as SAML v2, OIDC, and OAuth2, making it compatible with numerous systems and identity providers. With versatile deployment options—ranging from on-premises and hybrid setups to fully cloud-based solutions—FusionAuth enables organizations to streamline identity management while maintaining control and security. Its developer-centric API and customizable user interface facilitate seamless integration of SSO throughout your application landscape, enhancing implementation speed and overall user satisfaction.
Risk-Based Authentication Software
FusionAuth offers Risk-Based Authentication (RBA) by implementing flexible security measures tailored to user actions, device information, IP address, geographical location, and various contextual indicators. Its adaptable framework and event-driven webhooks facilitate real-time responses, such as initiating additional authentication steps, blocking access, or identifying suspicious activities. Developers are empowered to fully customize authentication processes, enabling them to create sophisticated risk models that can dynamically address security threats. When paired with multi-factor authentication (MFA) and other security measures, RBA significantly bolsters account security while maintaining a seamless user experience, making it particularly suitable for organizations that adopt a zero-trust security model or operate in compliance-heavy sectors.
Passwordless Authentication Software
FusionAuth provides a contemporary and secure approach to Passwordless Authentication, simplifying the user login process while boosting security measures. With the option for users to log in through magic links delivered to their email, the necessity for password management is removed. This innovation decreases login friction, enhances the user experience, and mitigates prevalent threats such as password reuse and phishing attacks. Completely driven by APIs, FusionAuth’s passwordless solution seamlessly integrates into various application frameworks and can be paired with additional security methods like Multi-Factor Authentication (MFA) for enhanced safety. It is an excellent option for businesses aiming to modernize their authentication processes while ensuring comprehensive control and compliance.
Password Policy Enforcement Software
FusionAuth provides comprehensive Password Policy Enforcement designed to bolster security and adhere to compliance requirements for organizations. Administrators have the flexibility to set tailored password regulations, such as minimum character count, complexity requirements, expiration timelines, and history constraints. Additionally, FusionAuth incorporates breach detection through Have I Been Pwned, which helps avoid the use of compromised passwords. These policies can be customized for each tenant or application, allowing for detailed management of user authentication practices. With an adaptable API and user-friendly admin interface, FusionAuth simplifies the implementation of robust and flexible password policies, ensuring user account protection while maintaining ease of use.
Multi-Factor Authentication (MFA) App
FusionAuth offers a strong Multi-Factor Authentication (MFA) system designed to bolster account protection and minimize the chances of unauthorized access. It features native support for time-sensitive one-time passwords (TOTP) via authentication applications such as Google Authenticator and Authy, along with SMS verification options. Developers can seamlessly integrate and tailor MFA processes using FusionAuth's extensive API, allowing for complete control over user interactions and enforcement rules. MFA can be activated at the individual user level, application level, or according to contextual criteria, making it a versatile and crucial element for safeguarding important user information and adhering to compliance requirements.
Identity and Access Management (IAM) Software
FusionAuth offers a comprehensive Identity and Access Management (IAM) solution tailored for contemporary applications and development teams. It provides centralized oversight for user authentication, authorization, and management of user data, supporting advanced protocols such as OAuth2, OIDC, SAML, and LDAP. With FusionAuth, organizations can implement detailed role and permission management, multi-factor authentication (MFA), and customized security policies suited to the specific requirements of each application. Its API-first design ensures smooth integration across diverse environments, whether microservices or monolithic architectures, and it supports on-premises, cloud, or hybrid setups. FusionAuth equips organizations to safeguard their digital resources, enhance user management efficiency, and effortlessly adhere to regulatory standards.
Identity Management Software
FusionAuth is a robust identity and access management (IAM) solution tailored for developers and organizations seeking secure and adaptable authentication options. It seamlessly integrates with various applications, programming languages, and frameworks, providing essential functionalities such as user login, single sign-on (SSO), multi-factor authentication (MFA), passwordless login, SAML, OIDC, and more, all accessible through a contemporary API. FusionAuth can be deployed on-premises, in a hybrid environment, or in the cloud, featuring a single-tenant architecture that enhances security. Designed for quick implementation and effortless scalability, it empowers businesses to adhere to compliance regulations like GDPR and HIPAA while maintaining complete oversight of the user identity management process.
Customer Identity and Access Management (CIAM) Software
FusionAuth is a specialized platform designed for Customer Identity and Access Management (CIAM), providing businesses with comprehensive oversight of the user identity lifecycle. It facilitates secure processes for registration, authentication, authorization, and user management at scale, while accommodating contemporary protocols such as OAuth2, OIDC, and SAML. Featuring capabilities like social login, multi-factor authentication, passwordless access, consent management, and stringent data privacy measures, FusionAuth empowers organizations to create smooth and secure digital interactions across web, mobile, and API platforms. Its adaptable deployment options (on-premises, cloud, or hybrid) and API-centric architecture make it an excellent choice for businesses seeking tailored and compliant CIAM solutions without the constraints of vendor lock-in.
Biometric Authentication Software
FusionAuth offers the capability for Biometric Authentication by effortlessly connecting with external identity providers or utilizing device-native features that allow for biometric methods such as fingerprint scanning, facial recognition, or voice identification. Although FusionAuth does not directly store biometric information, it leverages protocols such as WebAuthn and FIDO2 to enable secure, password-free access through trusted device authentication. This method improves security, minimizes login barriers, and aligns with zero-trust strategies. Developers can seamlessly incorporate biometric authentication processes using FusionAuth’s flexible API, ensuring compliance and adaptability across various platforms while maintaining user privacy and data sovereignty.
Authentication Software
FusionAuth delivers a robust authentication solution that prioritizes flexibility, security, and ease of use for developers. It accommodates various authentication options, including traditional username/password, passwordless access, multi-factor authentication (MFA), and social login integrations. Designed with an API-first approach, FusionAuth ensures effortless compatibility with any technology stack or system architecture. It adheres to established protocols such as OAuth2, OIDC, and SAML, guaranteeing secure and compliant authentication processes. Whether utilized on-site, in the cloud, or across hybrid setups, FusionAuth empowers you to manage the user login experience fully and assists in adhering to regulatory standards like GDPR, HIPAA, and COPPA.
-
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
An extra layer of protection.
Date: Apr 25 2022SummaryOverall, FusionAuth is an easy to implement application that helps in providing extra security to social media accounts and applications.
Positive- The best of feature of using FusionAuth is it is extremely straightforward to implement with any application or account.
- It is completely customizable with JavaScript.
- It makes hosting easy because of its flexibility and features.
- The customer support is best in class, someone is always there to help.
- It is a functional application, with rich user interface and easy installation.Negative- In my experience of 1.5+ years of usage of this application, I haven't found a single con.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Easy to use Identity Provider
Date: Jan 11 2022SummaryI've found it much easier to work with than Keycloak and Azure B2C while providing the features I need.
PositiveEasy to set up and use.
Solid community.
Decent documentation.
Good customization options.
Comprehensive password policy settings.NegativeGlobal CORS configuration instead of per application.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Powerful authentication software
Date: Jan 12 2022SummaryIt's been a pleasure to use FusionAuth and a great step up from a home-grown solution. The free tier makes this an easy sell to management, with paid options for more advanced features. New features are being added all the time to make it even better.
Positive- Highly customisable
- Support for many standards
- Free tier and reasonable pricing with various tiers for paid options
- Various guides on migrating from home-grown solutions provided
- Scalable with "just works" multi-node support out of the box
- Very active in supporting issues/feature requests
- Self-hosted optionsNegative- Currently with a multi-node system, downtime is required to upgrade when DB migrations are necessary
Read More...
- Currently no support for API-initiated SSO
- Some advanced functionality locked behind the higher paid tiers -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Easy, well documented and straight forward.
Date: Oct 21 2021SummaryThe overall experience is very positive and we would gladly recommend FusionAuth to anyone. The price model is fair and the integration is straightforward.
PositiveFusionAuth is a clean and modern IDP. We found it very easy to integrate our systems with FusionAuth. We used the C# client and the Java client to implement the integration and followed the well-written API documentation.
NegativeSome small bugs here and there but nothing serious. For example, logging in to the FusionAuth web service sometimes fails for no apparent reason and one needs to login again. There are also some hidden configurations that weren't defined in the documentation. For example, if you want a refresh token with the login request then you need to activate that under the preferences and this was a bit elusive for us.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Really great auth mechanism, meets all my needs
Date: Oct 28 2021SummaryI am very happy with FusionAuth and will keep using it.
I have already recommended it to my fellow devs.PositiveFusion Auth has excellent documentation which is detailed, clear and concise.
It’s free to use and deploy.
There is a python client available which makes it very quick and easy to integrate with other apps.NegativeThe advanced search feature is not available for postgresql only elastic search.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Auth the way it should be....
Date: Nov 01 2021SummaryOverall 5/5. FusionAuth is an excellent product. Auth is never easy, and if it is, it isn't cheap. FusionAuth bucks this trend.
PositiveClient SDKs in a wide array of languages.
REST API well documented.
Excellent support, super friendly people.
priced to provide equal access for small startups.NegativeOccasional breaking changes with the theme engine. This isn't a big deal if you tend to use client side packages and PKCE but for server side auth, always check your custom themes after FusionAuth updates. I've found that if you go a long time without updating/looking at your theme, the easiest way to get your theme back in working order is to diff the default theme ftl files with your custom ftl files.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Developer friendly and cost effective solution
Date: Nov 03 2021SummaryWe've been looking for an auth solution that supports SSO, OAuth2, MFA and theming while still being cost-effective. We've evaluated a few different solutions but FusionAuth fitted our needs perfectly and after over a year, we're still happy that it was our choice.
PositiveA lot of features, good documentation, great support, theming. Can be installed on-premise or used as SaaS. Multiple installation options (docker, Kubernetes, binary).
NegativeJava-based so a bit heavy if used on-premise or locally.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Amazing!
Date: Nov 25 2021SummaryI had to start a project that focused on topics that I don't normally deal with. After a short search, I found this product: I felt at ease. Highly recommended.
PositiveReally well done. You become productive in no time. It is packed with features for almost any need. Quite intuitive interface. It was just a nice discovery.
NegativeSometimes some functions are not where you expect, but just enter the operating logic to find them!
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Great solution for Auth
Date: Oct 25 2021SummaryI didn't get much time to use the product, but I was satisfied for a few weeks I used it. Thanks for coming up with such a great solution.
PositiveWhat I liked the most was the availability of the docker image that someone can play with, in case setting up the product seems to be complex.
NegativeNone. For the time I used FusionAuth, I couldn't find any con.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Happy with FusionAuth
Date: Nov 05 2021SummaryStill not at all fully acquainted with all of the features which FusionAuth provides, so we still have much to discover.
Positive- Configurable with templates to the house style
- Gives a real sense of security
- Many different ways of logging inNegative- Version numbering: 2FA functionality broke between 1.28 and 1.30; that should have been 2.0
Read More...
- By far the heaviest app we have running within Betty Blocks; can't it be a little smaller? -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Awesome Low Cost Solution For Small Businesses
Updated: Oct 26 2021SummaryI was in contact with the team already a few times, and each time they were helpful, fast and competent. I can really recommend this tool and 10 out of 10 would use it again for my next projects.
PositiveFirst of all: Unlimited Free Version.
We have a kubernetes set up for our platform and the integration of FusionAuth via the helm chart is just a blizz. Not much fiddling around and together with the kickstarting, we can launch new dedicated FusionAuth instances completely automatised. Further, it can run completely in a private network without needing cloud access, which is a big plus on the privacy side. The API is quite nice to work with and the client libraries (even though not much docs for it, you have to directly go into the code for function definitions) are really helpful and time saving. It is the only and first IAM solution we used, so I cannot really compare it to others, but I like it :)NegativeThe release cycle is almost too fast for us. We have to make jumps of multiple minors every few months^^
Read More...
The helm charts weren't up to date with the new versions of the apis, but my PRs were reviewed and merged in under a week!!! -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Amazing Auth Service
Date: Oct 27 2021SummaryWe adopted it in our company and progressively replace Auth0, which allows us to save money and control better the solution.
PositiveComplete, stable, evolving fast, great documentation, and fast support on the website, and free on premise, which allows saving money compared to SAAS equivalents, especially with many users and IdP.
NegativeSome UX parts are a bit hard to use, like the lists of allowed urls.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Best auth system I've seen
Date: Oct 28 2021SummaryI've used this in two projects now. In the first, I wanted to figure out how to get Istio to authenticate using OAuth2 without running through auth-proxy for every message. This worked really well and allows customers to manage their own accounts, whether user/pass or Google login or whatever else I wanted to set up. Easy.
PositiveEasy to get running on my own cluster. Relatively simple configuration, considering. Mild humor in the documentation went a long way to quelling any frustration I might have felt while figuring it out. Overall, it just works.
NegativeMaybe some of the defaults weren't as helpful as they could be, specifically had to figure out the hard way that symmetrical HMAC keys aren't acceptable to a lot of systems that want priv/pub RSA keys. Slightly awkward web interface requires you to hit SAVE or lose your work--which is good and bad.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Flexbile and still usable.
Date: Oct 26 2021SummaryIt was easy to get up and running and really enjoyed how I could use it anyway I like. Even when I did have questions, the forum response was very quick. I can scale up my users easily without much cost and just have features I want to pay for.
PositiveI can use as much or as little of it as I like. I can have my entire own front end for auth powered in the backend by FusionAuth, or have it handle it all. The settings are flexible and the learning curve is not that steep.
NegativePerhaps better walk through of certain fields and what they do, but not much other than that.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Straightforward and complete
Date: Nov 29 2021SummaryFusionAuth is advertised as developers friendly and it can be felt from the very beginning. The API is very well developed and documented. It can be seen that data entities API endpoints are well thought and give flexibility to implement more and less eccentric auth related functionalities.
When looking for auth solution I have defined a number of requirements (IMO, pretty typical ones), and at the moment, FA was the only sensible self-hosted solution covering them all. Finally, I am very pleased with the choice made. The service covers lots of auth related functionalities and it's actively developed.
The team behind FusionAuth is pretty responsive for any issues or bug notices.Positive- Complete in the sense of auth related functionalities,
- developer friendly - well defined and documented API,
- builtin, customizable authorization flow views,
- easy to extend - if something is missing, you will most likely be able to implement it with API.Negative- Due to java, the service is a bit resource hungry.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
A complete product
Date: Oct 27 2021SummaryVery pleased overall with the ability to integrate with my application in areas like user management and authentication via a gateway.
PositiveDocumentation is good, public support excellent in promptness and attitude.
Excellent OAuth/OIDC support.
Flexible deployments.
Sufficient lightweight for embedding in cloud-native architectures.NegativeOne complication for me was the lack of support for proxied deployments of the Admin Console. Had to architect around that.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Great hosted IAM solution for startups
Date: Nov 22 2021SummaryI was able to get FusionAuth up and running immediately and without problems for testing. Production deployment with AWS ECS, RDS, ES, and ELB was very quick too. I've been using it in production for about 2 years with minimal downtime or issues. If I run into a missing feature, it's usually added within a month or two.
Positive- Amazingly responsive support, even for free version
- Lots of features and constantly improving
- Very easy to test for development in Docker
- Easy to deploy and scale for production in AWS
- Good documentationNegative- No official support for online upgrades (but downtime is minimal)
Read More...
- Interface could be more modern and intuitive
- Being Java/Tomcat-based takes quite a bit of RAM
- Pricing jump between free and paid is steep with lots of users (but free version scales well) -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
A great solution for AAA
Date: Oct 26 2021SummaryWe needed a good solution for AAA in our micro-service architecture, so we searched a lot and all the solutions were either paid or weak. FusionAuth stood out to be both free and feature-rich.
PositiveWe have been using FusionAuth for two years now and we have no complaints. Very stable, occasional updates, good support and most importantly completely free. It also included all the features that we needed.
NegativeThe documentations could be better. We had a bit of difficulties at the beginning when we were trying to integrate our system but we figured it out eventually.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Amazing product
Date: Nov 15 2021SummaryAfter running other open-source idm solutions, switching to FusionAuth was like a breath of fresh air. Stupidly fast startup time compared to other java-bases solutions on the market, way easier customization and overall smooth experience. Plus free plan, can't beat it. We're in the late stage of development and haven't switched to the premium features yet, but price looks really good even for a startup like us.
Worth mentioning, that developers are very active on github.PositiveSetup process is very straightforward and easy. Cluster setup is surprisingly painless and, again, easy. All (and I mean all) operations are available through the API with variety of clients provided. Easy customization of everything: themes, jwt propagation, messages, passwords, automatic actions, etc.
NegativeThe only thing I could think of is lack of pagination in API, but developers are actively working towards the implementation, so this isn't a major concern in a long run.
Read More... -
Would you Recommend to Others?1 2 3 4 5 6 7 8 9 10
Currently the best auth solution in the market.
Date: Oct 29 2021SummaryThis product is excellent, and has a really promising future in its area. It's growing quickly as the solution is really well thought, and they are constantly developing new features and fixing bugs.
Currently it's the best quality for the price solution out there, offers a ton of features for free if you have the technical skills to manage it, otherwise you still have an affordable hosted version. There are also some paid features, an although they are increasing in number lately, for now they are not necessary at all.
Overall, the best solution in the auth market.PositiveGood quality-to-price ratio.
Good support. Option to go free version.
Quite easily installated.
Extense API, makes it easy to use in any language.
Highly customizable.
SAMLv2 / OIDC configurations for free. This enables to connect your apps to different institutions.
Good support and growing community.NegativeIncreasing paid only features. Although it makes sense as a market strategy, I am really hoping this is not going to be a transition to a paid only or "only useful when you pay" version of the product.
Read More...
Their forum as a support tool is promising, but currently there is no so much user interaction in it, and assistance to asking members relies in the admin and moderators. It would be exciting to see an active community sharing their experience and solutions, helping each other.
Maybe they should boost it up a bit so users are more attracted to use it and expend time sharing. Or maybe it is just a matter of time.