Nacho
Frontegg IAM Provider
B2B/B2C CIAM platform from Israel built for SaaS companies that need enterprise authentication without building it themselves. Flagship products include a fully hosted and embeddable Login Box (SSO via SAML/OIDC, social login, passkeys, MFA), self-service SSO/SCIM configuration for enterprise customers, an Entitlements engine that unifies RBAC, ABAC/ReBAC, feature flags and subscription plans into a single authorization API, Account Hierarchies for complex B2B org structures, a Security Center with built-in bot/brute-force/breached-password defenses and Adaptive MFA, and Frontegg.ai/AgentLink for securing AI agent and MCP-based access. Free up to 7,500 MAUs. SaaS-only deployment with EU/US data residency options.
Features
- 🇪🇺EU🇺🇸US
- JavaScriptTypeScriptReactAngularVue
If you want to compare IAM features of different providers, please check out the (C)IAM Identity Providers benchmark.
Looking for Frontegg’s OpenID Connect protocol compatibility? View Frontegg on the OpenID Connect Providers benchmark.
Frequently Asked Questions
Does Frontegg support Username and Password authentication method?
Frontegg supports Username and Password authentication method. Email-and-password authentication with configurable strength policy (predefined Easy/Medium levels or custom rules for length, casing, digits, special characters), password history, and expiration settings. Read more
Does Frontegg support Social Sign-in authentication method?
Frontegg supports Social Sign-in authentication method. OAuth social login toggled per application in the Login Box builder, covering providers such as Google, Microsoft, GitHub, Facebook, Slack and others. Read more
Does Frontegg support Passkey authentication method?
Frontegg supports Passkey authentication method. FIDO2/WebAuthn passkeys supported as a primary authentication method alongside password and social login. Read more
Does Frontegg support Email Passwordless authentication method?
Frontegg supports Email Passwordless authentication method. Magic links and email-based magic codes (OTP) for passwordless sign-in. Default link/code expiration is 5 minutes, configurable between 1 minute and 1 hour; single-use tokens. Read more
Does Frontegg support Phone Passwordless authentication method?
Frontegg supports Phone Passwordless authentication method. SMS-based one-time code sign-in as an alternative passwordless credential. Read more
Does Frontegg support Magic Link authentication method?
Frontegg supports Magic Link authentication method. Clickable one-time login links delivered by email; user enters their email, receives a link, and is logged in on click. Customizable email templates. Read more
Does Frontegg support Anonymous / Guest authentication method?
Frontegg does not support Anonymous / Guest authentication method. Frontegg's identity model requires a real authenticated user (typically identified by email). No documented anonymous/guest session primitive exists.
Does Frontegg support Time-based One-Time Password (TOTP) MFA?
Frontegg supports Time-based One-Time Password (TOTP) MFA. Authenticator app (TOTP) MFA compatible with Google Authenticator, Authy, LastPass Authenticator, Microsoft Authenticator and similar apps. Read more
Does Frontegg support HMAC-based One-Time Password (HOTP) MFA?
Frontegg does not support HMAC-based One-Time Password (HOTP) MFA. Frontegg's documented authenticator-app MFA is TOTP-based only; counter-based HOTP is not offered as a distinct factor.
Does Frontegg support Universal 2nd Factor (U2F) MFA?
Frontegg supports Universal 2nd Factor (U2F) MFA. Security Keys (WebAuthn cross-platform authenticators such as YubiKeys) are one of Frontegg's four native MFA methods, covering roaming/U2F-class hardware keys. Read more
Does Frontegg support WebAuthn MFA?
Frontegg supports WebAuthn MFA. WebAuthn is supported both as Security Keys (roaming authenticators) and Built-in Authenticators (platform biometrics such as Touch ID / Windows Hello). Read more
Does Frontegg support Email Code MFA?
Frontegg does not support Email Code MFA. Email OTP is offered as a first-factor passwordless login method, but Frontegg's documented MFA methods (Authenticator Apps, SMS, Security Keys, Built-in Authenticators) do not include email code as a second factor.
Does Frontegg support Phone Code MFA?
Frontegg supports Phone Code MFA. SMS is one of Frontegg's four native MFA methods: users receive a code by SMS and enter it to complete authentication. Read more
Does Frontegg support Push Notification MFA?
Frontegg does not support Push Notification MFA. Frontegg does not ship its own push-notification authenticator app. Push-based approval (e.g. Duo Push) is only available indirectly by federating to Cisco Duo as a SAML SSO identity provider.
Does Frontegg support Adaptive / Risk-Based MFA MFA?
Frontegg supports Adaptive / Risk-Based MFA MFA. Adaptive MFA analyzes contextual risk signals (device type, location, IP, login behavior) in real time and prompts for additional verification when risk exceeds a threshold. Read more
Does Frontegg support Cisco Duo MFA?
Frontegg partially supports Cisco Duo MFA. Cisco Duo integrates with Frontegg via Duo's SAML SSO identity provider, letting Duo handle push/WebAuthn/security-key challenges before returning an assertion to Frontegg; this is a federation pattern rather than a native Duo API integration. Read more
Does Frontegg support Step-Up Authentication MFA?
Frontegg supports Step-Up Authentication MFA. Step-up authentication can be required before sensitive actions (bulk deletes, permission changes, large transactions, data exports), prompting OTP or WebAuthn re-verification. Read more
Does Frontegg support OpenID Connect (OIDC) integration protocol?
Frontegg supports OpenID Connect (OIDC) integration protocol. Frontegg implements OpenID Connect by default as part of its hosted login/identity provider offering, including a discovery document and JWKS-based token validation. Read more
Does Frontegg support SAML 2.0 integration protocol?
Frontegg supports SAML 2.0 integration protocol. SAML 2.0 is supported both for consuming enterprise customer SSO (Service Provider) and via Frontegg's own SAML/OIDC identity provider endpoints for downstream integrations. Read more
Does Frontegg support WS-Federation integration protocol?
Frontegg does not support WS-Federation integration protocol. No WS-Federation support is documented; enterprise federation is built on SAML 2.0 and OIDC only.
Does Frontegg support Machine-to-Machine (M2M) Authentication integration protocol?
Frontegg supports Machine-to-Machine (M2M) Authentication integration protocol. Client Credentials-based M2M tokens for user-context and tenant-context service-to-service authentication, managed via Client ID/API key pairs. Read more
Does Frontegg support OpenID Connect (OIDC) Federation identity federation?
Frontegg supports OpenID Connect (OIDC) Federation identity federation. Per-tenant OIDC SSO connections configurable via Management Portal or self-service, with JIT provisioning. Read more
Does Frontegg support SAML 2.0 Federation identity federation?
Frontegg supports SAML 2.0 Federation identity federation. Per-tenant SAML 2.0 SSO connections supporting Okta, Azure AD/Entra ID, Google Workspace and others, with JIT provisioning and SAML attribute/role mapping built in. Read more
Does Frontegg support Active Directory / LDAP identity federation?
Frontegg does not support Active Directory / LDAP identity federation. No direct on-premises LDAP/Active Directory connector is documented; AD environments are integrated via SAML/OIDC federation (e.g., ADFS, Entra ID) or SCIM.
Does Frontegg support Azure Active Directory (Entra ID) identity federation?
Frontegg supports Azure Active Directory (Entra ID) identity federation. Microsoft Entra ID (Azure AD) is a documented SSO identity provider (SAML) and SCIM provisioning source. Read more
Does Frontegg support Bulk User Import user management?
Frontegg supports Bulk User Import user management. Bulk user migration via API (up to 1,000 users per batch) or CSV upload. Read more
Does Frontegg support Password Hash Import (Multiple Formats) user management?
Frontegg supports Password Hash Import (Multiple Formats) user management. Bulk migration supports importing existing password hashes in Bcrypt, Scrypt, Firebase (Firebase Scrypt), Argon2 and PBKDF2 formats; unsupported hash types fall back to a forced password reset on next login. Read more
Does Frontegg support Bulk User Export user management?
Frontegg partially supports Bulk User Export user management. Users can be retrieved via the paginated user search/list API with exact and fuzzy filtering; no dedicated one-click bulk export/download feature is documented.
Does Frontegg support Bulk User Update / Delete user management?
Frontegg partially supports Bulk User Update / Delete user management. Individual user update, lock and disable operations are available via the Management API; no dedicated batch update/delete endpoint is documented.
Does Frontegg support Legacy Username Import (Non-Allowed Characters) user management?
Frontegg partially supports Legacy Username Import (Non-Allowed Characters) user management. Frontegg's primary identifier is email; imported users can bring phone numbers as well, but non-email username identifiers are not a first-class concept.
Does Frontegg support Inbound SCIM Provisioning user management?
Frontegg supports Inbound SCIM Provisioning user management. SCIM 2.0 inbound provisioning from enterprise IdPs (Okta, Microsoft Entra ID, etc.) syncing users into Frontegg tenants, configurable via Management Portal or self-service. Read more
Does Frontegg support Outbound SCIM Provisioning user management?
Frontegg does not support Outbound SCIM Provisioning user management. Frontegg acts as a SCIM consumer (inbound) rather than exposing itself as a SCIM server to downstream applications.
Does Frontegg support SCIM Groups Provisioning user management?
Frontegg supports SCIM Groups Provisioning user management. SCIM group sync from upstream IdPs is part of the standard SCIM 2.0 provisioning implementation. Read more
Does Frontegg support Just-In-Time (JIT) User Provisioning user management?
Frontegg supports Just-In-Time (JIT) User Provisioning user management. Just-in-time user provisioning on first SSO login is included out of the box with SAML/OIDC SSO connections. Read more
Does Frontegg support Self-Service Profile Management Portal user management?
Frontegg supports Self-Service Profile Management Portal user management. An embeddable self-service Admin Portal lets end users and tenant admins manage profile, security, SSO, SCIM and members without developer effort. Read more
Does Frontegg support User Account Linking user management?
Frontegg supports User Account Linking user management. Users are automatically merged when they authenticate with different login methods (e.g., password and social login) using the same email address. Read more
Does Frontegg support User Blocking / Banning user management?
Frontegg supports User Blocking / Banning user management. Users can be locked (login prevented without data loss) or disabled per account/tenant via the Management API. Read more
Does Frontegg support User Metadata user management?
Frontegg supports User Metadata user management. A general-purpose metadata property is available for storing custom user data. Read more
Does Frontegg support Application Metadata user management?
Frontegg supports Application Metadata user management. Secure user metadata (vendorMetadata) stores sensitive, internal/admin-only data on the user object, analogous to app metadata. Read more
Does Frontegg support User Search user management?
Frontegg supports User Search user management. Exact and fuzzy search across user fields (name, email, metadata, ID) via the Management API. Read more
Does Frontegg support Role-Based Access Control (RBAC) user management?
Frontegg supports Role-Based Access Control (RBAC) user management. Role-based access control with custom roles and permissions, assignable globally or per tenant, integrated into the broader Entitlements engine. Read more
Does Frontegg support Organizations (Multi-Tenancy B2B) user management?
Frontegg supports Organizations (Multi-Tenancy B2B) user management. Accounts (tenants) are Frontegg's core multi-tenancy primitive, extended by Account Hierarchies that let a parent account nest sub-accounts with cascading roles. Read more
Does Frontegg support Password Strength Policies user management?
Frontegg supports Password Strength Policies user management. Predefined strength levels (Easy/Medium) or custom rules for length, casing, digits and special characters, configurable at environment or account level, plus password history and expiration. Read more
Does Frontegg support Attribute-Based Access Control (ABAC) access control?
Frontegg supports Attribute-Based Access Control (ABAC) access control. The Entitlements engine unifies RBAC, ReBAC and ABAC, evaluating user, resource and environment attributes for context-aware access decisions. Read more
Does Frontegg support Fine-Grained Authorization (FGA / ReBAC) access control?
Frontegg supports Fine-Grained Authorization (FGA / ReBAC) access control. Entitlements provide fine-grained, feature-level access control down to individual features, plans and feature flags, with a visual dashboard for building product bundles. Read more
Does Frontegg support API Authorization (Scopes / Permissions) access control?
Frontegg supports API Authorization (Scopes / Permissions) access control. M2M and user API tokens carry scoped roles/permissions; tenant-level Client Credentials tokens support account-wide API authorization. Read more
Does Frontegg support Audit Log Retention security feature?
Frontegg supports Audit Log Retention security feature. Audit events are recorded and exposed via the Audits API and end-user self-service audit section (with a download option). Read more
Does Frontegg support Security Center (Threat Monitoring Dashboard) security feature?
Frontegg supports Security Center (Threat Monitoring Dashboard) security feature. Security Center is a dedicated product area providing MFA management, brute-force/bot/suspicious-IP/breached-password defenses, device fingerprinting and analytics of security events. Read more
Does Frontegg support Encryption at Rest security feature?
Frontegg supports Encryption at Rest security feature. Customer data is encrypted at rest using modern encryption algorithms per Frontegg's Trust Center security page. Read more
Does Frontegg support Encryption in Transit security feature?
Frontegg supports Encryption in Transit security feature. All data in transit is encrypted per Frontegg's Trust Center security page. Read more
Does Frontegg support Customer Managed Keys (BYOK) security feature?
Frontegg does not support Customer Managed Keys (BYOK) security feature. No BYOK / customer-managed encryption key offering is documented.
Does Frontegg support Bot Detection security feature?
Frontegg supports Bot Detection security feature. Bot detection uses proprietary algorithms by default, with optional Google reCAPTCHA for adjustable strictness. Read more
Does Frontegg support Brute Force Protection security feature?
Frontegg supports Brute Force Protection security feature. Built-in brute-force protection with visibility into attempts via Analytics → Security Events. Read more
Does Frontegg support Suspicious IP Throttling security feature?
Frontegg supports Suspicious IP Throttling security feature. Suspicious IP Detection and Impossible Travel Protection are among Frontegg's built-in security defenses. Read more
Does Frontegg support Breached Password Detection security feature?
Frontegg supports Breached Password Detection security feature. Breached Password Protection is one of Frontegg's built-in security defenses, screening credentials against known breach data. Read more
Does Frontegg support Credential Guard (Dark Web Monitoring) security feature?
Frontegg does not support Credential Guard (Dark Web Monitoring) security feature. No continuous dark-web credential monitoring product is documented beyond point-in-time breached password screening.
Does Frontegg support Device Fingerprinting security feature?
Frontegg supports Device Fingerprinting security feature. Device fingerprinting and new-device detection are built-in security rules feeding into the Security Center risk signals. Read more
Does Frontegg support Per-Organization Branding multi-tenancy?
Frontegg partially supports Per-Organization Branding multi-tenancy. Login Box and Admin Portal branding (logo, colors, layout, localizations) are configurable via theme options at the environment/application level; explicit per-individual-tenant branding overrides are not documented. Read more
Does Frontegg support Per-Organization MFA Policy multi-tenancy?
Frontegg supports Per-Organization MFA Policy multi-tenancy. Security and MFA policies can be configured at the environment level or overridden per account (tenant) for stricter enforcement. Read more
Does Frontegg support Hosted / Universal Login Page branding feature?
Frontegg supports Hosted / Universal Login Page branding feature. A fully hosted, customizable Login Box supports all authentication methods including social, SSO and passkeys. Read more
Does Frontegg support Embedded / Native Login Components branding feature?
Frontegg supports Embedded / Native Login Components branding feature. The Login Box and Admin Portal can be embedded directly into applications via framework SDKs (React, Angular, Vue, vanilla JS) rather than only redirect-based hosting. Read more
Does Frontegg support White-Label / Full Brand Removal branding feature?
Frontegg partially supports White-Label / Full Brand Removal branding feature. Login Box and Admin Portal appearance can be fully re-themed, but explicit removal of any Frontegg-branding element is not documented as a distinct feature/plan entitlement. Read more
Does Frontegg support Localization / i18n branding feature?
Frontegg supports Localization / i18n branding feature. Built-in support for 25 languages across the login box and self-service portal, with per-language overrides via a localizations configuration object. Read more
Does Frontegg support Prebuilt UI Components (SDK) branding feature?
Frontegg supports Prebuilt UI Components (SDK) branding feature. Prebuilt Login Box and Admin Portal UI components ship via official React, Angular, Vue and vanilla JS SDKs. Read more
Does Frontegg support Login / Auth Analytics Dashboard analytics?
Frontegg supports Login / Auth Analytics Dashboard analytics. Analytics dashboards including Security Events (brute force, suspicious IP, MFA activity) in the Frontegg portal. Read more
Does Frontegg support SOC 2 Type II Certification compliance?
Frontegg supports SOC 2 Type II Certification compliance. Read more
Does Frontegg support ISO 27001 / 27017 / 27018 Certification compliance?
Frontegg supports ISO 27001 / 27017 / 27018 Certification compliance. ISO 27001:2022 certified, along with related ISO 27701 (privacy), 27017 (cloud security) and 27018 (PII in the cloud) certifications. Read more
Does Frontegg support HIPAA Business Associate Agreement (BAA) compliance?
Frontegg partially supports HIPAA Business Associate Agreement (BAA) compliance. Frontegg positions itself as suitable for HIPAA-compliant deployments in its marketing content, but the official Trust Center page lists only SOC 2 Type II and ISO 27001 as formal certifications; BAA availability is not explicitly documented. Read more
Does Frontegg support PCI DSS Compliance compliance?
Frontegg does not support PCI DSS Compliance compliance. Frontegg does not process payment card data and PCI DSS is not listed among its Trust Center certifications.
Does Frontegg support FedRAMP Authorization compliance?
Frontegg does not support FedRAMP Authorization compliance. No FedRAMP authorization is listed on Frontegg's official Trust Center; Frontegg is a commercial SaaS platform not targeting US federal workloads.
Does Frontegg support GDPR: Data Export (Portability) compliance?
Frontegg supports GDPR: Data Export (Portability) compliance. GDPR data portability is addressed via the Trust Center privacy commitments and per-user data retrieval through the Management API. Read more
Does Frontegg support GDPR: Right to be Forgotten (User Deletion) compliance?
Frontegg supports GDPR: Right to be Forgotten (User Deletion) compliance. Users and their data can be permanently deleted via the Management API in line with GDPR right-to-erasure obligations described in Frontegg's privacy policy. Read more
Does Frontegg support Consent Management compliance?
Frontegg does not support Consent Management compliance. No dedicated consent management (marketing opt-in, granular data-processing consent) feature is documented beyond standard OAuth scope consent.
Does Frontegg support Region Deployment compliance?
Frontegg supports Region Deployment compliance. Frontegg stores/processes personal data in the EU by default, with the option to choose US-based storage instead. Read more
Does Frontegg support Private Cloud Deployment compliance?
Frontegg does not support Private Cloud Deployment compliance. Frontegg is a SaaS-only, multi-tenant platform with no documented self-hosted or single-tenant private cloud offering.
Does Frontegg support SDK Coverage developer integration?
Frontegg supports SDK Coverage developer integration. Official SDKs for React, Angular, Vue and vanilla JavaScript on the frontend, plus backend/management SDKs and REST API access. Read more
Does Frontegg support Management API developer integration?
Frontegg supports Management API developer integration. Comprehensive REST Management API covering users, accounts/tenants, SSO, SCIM, RBAC, entitlements, M2M tokens and audits. Read more
Does Frontegg support Actions / Extensibility Pipeline developer integration?
Frontegg supports Actions / Extensibility Pipeline developer integration. Native and fully custom webhooks let applications subscribe to authentication and lifecycle events, with per-webhook delivery logs. Read more
Does Frontegg support TypeScript Support in Extensibility developer integration?
Frontegg does not support TypeScript Support in Extensibility developer integration. Frontegg has no hosted extensibility runtime that executes developer-supplied code; webhooks are delivered to externally hosted, developer-owned endpoints in any language.
Does Frontegg support Custom Domain developer integration?
Frontegg supports Custom Domain developer integration. Custom domain configuration is included even on the free tier and is set at the environment level. Read more
Does Frontegg support Deploy CLI (Infrastructure as Code) developer integration?
Frontegg does not support Deploy CLI (Infrastructure as Code) developer integration. No dedicated Frontegg CLI is documented; infrastructure-as-code workflows are handled through the official Terraform provider instead.
Does Frontegg support Terraform Provider developer integration?
Frontegg supports Terraform Provider developer integration. Official Terraform provider (frontegg/frontegg) manages environments, workspaces and other Frontegg resources as code, with import support for existing resources. Read more
Does Frontegg support Custom Database Connections developer integration?
Frontegg does not support Custom Database Connections developer integration. Frontegg does not offer Auth0-style custom database action scripts; user migration is handled via bulk API/CSV import rather than per-login delegation to a legacy store.
Does Frontegg support Native Webhook Support developer integration?
Frontegg supports Native Webhook Support developer integration. Native webhook events for authentication and lifecycle changes, plus a custom webhook builder for adapting payloads to third-party integrations. Read more
Does Frontegg support Universal Login / Hosted Login Page Customization developer integration?
Frontegg supports Universal Login / Hosted Login Page Customization developer integration. Login Box supports full visual customization (colors, logo, layout, enabled methods) via the portal builder or themeOptions in SDKs. Read more
Does Frontegg support Email Templates developer integration?
Frontegg supports Email Templates developer integration. Customizable email templates for magic links/magic codes and other transactional authentication emails via the Emails tab. Read more
Does Frontegg support No-Code Auth Flow Builder / Orchestration feature?
Frontegg partially supports No-Code Auth Flow Builder / Orchestration feature. The Entitlements engine offers a visual, no-code dashboard for designing product bundles/feature access, but there is no general no-code builder for authentication flows themselves. Read more
Does Frontegg support Identity Verification / Document Proofing feature?
Frontegg does not support Identity Verification / Document Proofing feature. No document-based identity verification or biometric liveness checking is documented.
Does Frontegg support Decentralized / Verifiable Credentials feature?
Frontegg does not support Decentralized / Verifiable Credentials feature. No support for W3C Verifiable Credentials or DIDs is documented.
Does Frontegg support Built-in Billing / Subscription Management feature?
Frontegg partially supports Built-in Billing / Subscription Management feature. Entitlements ties feature access to subscription Plans and supports free-trial provisioning, but this is subscription-tier gating logic rather than a full payment/billing system integration (e.g., Stripe sync). Read more
Does Frontegg support Agentic AI / MCP Server Authentication feature?
Frontegg supports Agentic AI / MCP Server Authentication feature. Frontegg.ai and AgentLink provide an identity/authorization layer purpose-built for AI agents: a hosted MCP server exposing chosen API tools (Agent Connector), plus Agent IAM enforcing step-up authentication, human-in-the-loop approvals, sensitive-data masking and RBAC for agent access. Read more
Does Frontegg support Post-Quantum Hybrid TLS Key Exchange post-quantum cryptography feature?
Frontegg partially supports Post-Quantum Hybrid TLS Key Exchange post-quantum cryptography feature. No vendor statement on PQC TLS support found. Frontegg's public API (api.frontegg.com) responds with 'server: CloudFront', indicating Frontegg is fronted by AWS CloudFront. AWS CloudFront enabled hybrid PQC key exchange (ML-KEM) by default on all existing TLS security policies in September 2025, but this is infra-inherited, not a documented Frontegg-specific claim. Read more
Does Frontegg support Post-Quantum Digital Signature Algorithms post-quantum cryptography feature?
Frontegg does not support Post-Quantum Digital Signature Algorithms post-quantum cryptography feature. No public evidence Frontegg supports ML-DSA, SLH-DSA, or FN-DSA for JWT/SAML/OIDC signing.
Does Frontegg support Post-Quantum Token & Data Encryption post-quantum cryptography feature?
Frontegg does not support Post-Quantum Token & Data Encryption post-quantum cryptography feature. No public evidence found that the provider supports ML-KEM or HPKE (RFC 9180) for encrypting JWE tokens, SAML assertions, or user secrets.
Does Frontegg support Post-Quantum Certificate & mTLS Support post-quantum cryptography feature?
Frontegg does not support Post-Quantum Certificate & mTLS Support post-quantum cryptography feature. No public evidence found of post-quantum or hybrid X.509 digital certificate support for mTLS client authentication or federation endpoints.
Does Frontegg support Post-Quantum Stateful Hash Signatures post-quantum cryptography feature?
Frontegg does not support Post-Quantum Stateful Hash Signatures post-quantum cryptography feature. No public evidence found of NIST SP 800-208 stateful hash-based signature scheme support (LMS/HSS, XMSS).
Compare with other providers
Note: The current data is based on provider documentation/experience and may not be 100% accurate. Please open an issue if you have spotted any inconsistencies.