Nacho
FusionAuth IAM Provider
Self-hosted CIAM with a free Community edition supporting unlimited users. Enterprise-grade compliance certifications (SOC 2, HIPAA, PCI-DSS). Includes gaming platform SSO, extensive Lambda extensibility, and Connectors for custom database migration.
Features
- AWSAzureGCP
If you want to compare IAM features of different providers, please check out the (C)IAM Identity Providers benchmark.
Looking for FusionAuth’s OpenID Connect protocol compatibility? View FusionAuth on the OpenID Connect Providers benchmark.
Frequently Asked Questions
Does FusionAuth support Username and Password authentication method?
FusionAuth supports Username and Password authentication method. Read more
Does FusionAuth support Social Sign-in authentication method?
FusionAuth supports Social Sign-in authentication method. Includes gaming SSO: Epic, Nintendo, PlayStation, Steam, Xbox. 30+ built-in providers. Read more
Does FusionAuth support Passkey authentication method?
FusionAuth supports Passkey authentication method. Read more
Does FusionAuth support Email Passwordless authentication method?
FusionAuth supports Email Passwordless authentication method. Read more
Does FusionAuth support Phone Passwordless authentication method?
FusionAuth supports Phone Passwordless authentication method. Read more
Does FusionAuth support Magic Link authentication method?
FusionAuth supports Magic Link authentication method. Read more
Does FusionAuth support Anonymous / Guest authentication method?
FusionAuth does not support Anonymous / Guest authentication method. No native anonymous/guest user concept. Workarounds exist via stub accounts or vended JWTs. Read more
Does FusionAuth support Time-based One-Time Password (TOTP) MFA?
FusionAuth supports Time-based One-Time Password (TOTP) MFA. Read more
Does FusionAuth support HMAC-based One-Time Password (HOTP) MFA?
FusionAuth does not support HMAC-based One-Time Password (HOTP) MFA. FusionAuth supports TOTP (time-based) only. HOTP (counter-based) is not supported. Read more
Does FusionAuth support Universal 2nd Factor (U2F) MFA?
FusionAuth supports Universal 2nd Factor (U2F) MFA. WebAuthn/U2F hardware security keys supported. Read more
Does FusionAuth support WebAuthn MFA?
FusionAuth supports WebAuthn MFA. Read more
Does FusionAuth support Email Code MFA?
FusionAuth supports Email Code MFA. Email-based MFA codes. Available on paid plans only (not Community edition). Read more
Does FusionAuth support Phone Code MFA?
FusionAuth supports Phone Code MFA. SMS-based MFA codes via configured Messenger. Available on paid plans only. Read more
Does FusionAuth support Recovery Code MFA?
FusionAuth supports Recovery Code MFA. 10 one-time-use recovery codes generated when MFA is enabled. Read more
Does FusionAuth support Push Notification MFA?
FusionAuth does not support Push Notification MFA.
Does FusionAuth support Adaptive / Risk-Based MFA MFA?
FusionAuth supports Adaptive / Risk-Based MFA MFA. Adaptive MFA via threat detection and step-up rules. Read more
Does FusionAuth support Cisco Duo MFA?
FusionAuth does not support Cisco Duo MFA. No native Cisco Duo integration. Custom integration possible via Generic Messenger or Lambda extensibility. Read more
Does FusionAuth support Step-Up Authentication MFA?
FusionAuth supports Step-Up Authentication MFA. Read more
Does FusionAuth support OpenID Connect (OIDC) integration protocol?
FusionAuth supports OpenID Connect (OIDC) integration protocol. Read more
Does FusionAuth support SAML 2.0 integration protocol?
FusionAuth supports SAML 2.0 integration protocol. Read more
Does FusionAuth support WS-Federation integration protocol?
FusionAuth does not support WS-Federation integration protocol. FusionAuth supports OIDC and SAML only. WS-Federation is not supported. Read more
Does FusionAuth support Machine-to-Machine (M2M) Authentication integration protocol?
FusionAuth supports Machine-to-Machine (M2M) Authentication integration protocol. Entity system provides M2M authentication. Read more
Does FusionAuth support OpenID Connect (OIDC) Federation identity federation?
FusionAuth supports OpenID Connect (OIDC) Federation identity federation. Read more
Does FusionAuth support SAML 2.0 Federation identity federation?
FusionAuth supports SAML 2.0 Federation identity federation. Read more
Does FusionAuth support Active Directory / LDAP identity federation?
FusionAuth supports Active Directory / LDAP identity federation. LDAP connector: 1 on Starter, 5 on Essentials, unlimited on Enterprise. Read more
Does FusionAuth support Azure Active Directory (Entra ID) identity federation?
FusionAuth supports Azure Active Directory (Entra ID) identity federation. Microsoft/Azure AD via OIDC or SAML identity provider. Read more
Does FusionAuth support Bulk User Import user management?
FusionAuth supports Bulk User Import user management. Read more
Does FusionAuth support Password Hash Import (Multiple Formats) user management?
FusionAuth supports Password Hash Import (Multiple Formats) user management. Import bcrypt, salted SHA, MD5, and other hash formats. Read more
Does FusionAuth support Bulk User Export user management?
FusionAuth supports Bulk User Export user management. Read more
Does FusionAuth support Bulk User Update / Delete user management?
FusionAuth supports Bulk User Update / Delete user management. Bulk delete via REST API endpoint DELETE /api/user/bulk. Update via individual User API. Read more
Does FusionAuth support Upsert on Import user management?
FusionAuth does not support Upsert on Import user management. Import API is designed for initial data loading only. Duplicate detection via validateDbConstraints param returns 400/500; no upsert semantics. Read more
Does FusionAuth support Legacy Username Import (Non-Allowed Characters) user management?
FusionAuth supports Legacy Username Import (Non-Allowed Characters) user management. Usernames are stored and matched exactly as provided, including special characters and whitespace. Read more
Does FusionAuth support MFA Enrollment Import user management?
FusionAuth supports MFA Enrollment Import user management. TOTP and SMS/email MFA enrollments can be imported via twoFactor fields in the import JSON or user update API. Read more
Does FusionAuth support Inbound SCIM Provisioning user management?
FusionAuth supports Inbound SCIM Provisioning user management. Inbound SCIM 2.0 provisioning. Read more
Does FusionAuth support Outbound SCIM Provisioning user management?
FusionAuth does not support Outbound SCIM Provisioning user management. FusionAuth acts as a SCIM server (inbound) only, not a SCIM client. Webhooks can be used as an alternative for pushing changes. Read more
Does FusionAuth support SCIM Groups Provisioning user management?
FusionAuth supports SCIM Groups Provisioning user management. SCIM group provisioning supported. Lambdas map incoming SCIM Group JSON to FusionAuth Group objects. Read more
Does FusionAuth support Just-In-Time (JIT) User Provisioning user management?
FusionAuth supports Just-In-Time (JIT) User Provisioning user management. Read more
Does FusionAuth support Lazy / Trickle Migration from Legacy Database user management?
FusionAuth supports Lazy / Trickle Migration from Legacy Database user management. Migrate users on login via FusionAuth Connectors. Read more
Does FusionAuth support Self-Service Profile Management Portal user management?
FusionAuth supports Self-Service Profile Management Portal user management. Self-service account management via FusionAuth's hosted account portal. Read more
Does FusionAuth support User Account Linking user management?
FusionAuth supports User Account Linking user management. Read more
Does FusionAuth support User Blocking / Banning user management?
FusionAuth supports User Blocking / Banning user management. Manual and automatic account locking/deactivation. Supports rule-based lockout after failed attempts. Read more
Does FusionAuth support User Metadata user management?
FusionAuth supports User Metadata user management. User data stored in userData and registration data fields. Read more
Does FusionAuth support Application Metadata user management?
FusionAuth supports Application Metadata user management. Per-application metadata stored in registration.data field, separate from user.data. Read more
Does FusionAuth support Metadata Size Limits user management?
FusionAuth supports Metadata Size Limits user management. PostgreSQL: effectively unlimited data field size. MySQL: 16 MB limit. Elasticsearch indexing also imposes practical limits. Read more
Does FusionAuth support User Search user management?
FusionAuth supports User Search user management. Read more
Does FusionAuth support Role-Based Access Control (RBAC) user management?
FusionAuth supports Role-Based Access Control (RBAC) user management. Read more
Does FusionAuth support Organizations (Multi-Tenancy B2B) user management?
FusionAuth supports Organizations (Multi-Tenancy B2B) user management. Multi-tenancy via FusionAuth Tenants and Applications model. Read more
Does FusionAuth support Password Strength Policies user management?
FusionAuth supports Password Strength Policies user management. Read more
Does FusionAuth support Username Restrictions user management?
FusionAuth supports Username Restrictions user management. Usernames are case-insensitive for uniqueness but stored case-sensitively. No special character restrictions documented; values accepted as-is. Read more
Does FusionAuth support Progressive Profiling / Forms user management?
FusionAuth supports Progressive Profiling / Forms user management. Read more
Does FusionAuth support Attribute-Based Access Control (ABAC) access control?
FusionAuth does not support Attribute-Based Access Control (ABAC) access control. Native ABAC not available. FusionAuth FGA by Permify (separate product) supports ABAC/ReBAC models. Read more
Does FusionAuth support Fine-Grained Authorization (FGA / ReBAC) access control?
FusionAuth partially supports Fine-Grained Authorization (FGA / ReBAC) access control. FusionAuth Entity System provides a relationship-based access control model. FusionAuth FGA by Permify (acquired 2025) adds full RBAC/ABAC/ReBAC. Read more
Does FusionAuth support API Authorization (Scopes / Permissions) access control?
FusionAuth supports API Authorization (Scopes / Permissions) access control. Read more
Does FusionAuth support Audit Log Retention security feature?
FusionAuth supports Audit Log Retention security feature. Read more
Does FusionAuth support Audit Log Streaming security feature?
FusionAuth partially supports Audit Log Streaming security feature. Log streaming via syslog and webhook-based event streaming. Read more
Does FusionAuth support Security Center (Threat Monitoring Dashboard) security feature?
FusionAuth supports Security Center (Threat Monitoring Dashboard) security feature. Advanced Threat Detection dashboard available on Essentials and Enterprise plans. Read more
Does FusionAuth support Encryption at Rest security feature?
FusionAuth supports Encryption at Rest security feature. FusionAuth Cloud encrypts all data at rest transparently. Self-hosted deployments rely on the underlying infrastructure. Read more
Does FusionAuth support Encryption in Transit security feature?
FusionAuth supports Encryption in Transit security feature. TLS enforced for all connections. Database connections support TLS configuration for both PostgreSQL and MySQL. Read more
Does FusionAuth support Customer Managed Keys (BYOK) security feature?
FusionAuth does not support Customer Managed Keys (BYOK) security feature. No BYOK/CMK offering. Key Master manages signing keys internally; external keys can be imported for JWT signing but not for data encryption. Read more
Does FusionAuth support Bot Detection security feature?
FusionAuth supports Bot Detection security feature. CAPTCHA integrations (Google reCAPTCHA, hCaptcha) for login flows. Read more
Does FusionAuth support Brute Force Protection security feature?
FusionAuth supports Brute Force Protection security feature. Read more
Does FusionAuth support Suspicious IP Throttling security feature?
FusionAuth supports Suspicious IP Throttling security feature. Read more
Does FusionAuth support Breached Password Detection security feature?
FusionAuth supports Breached Password Detection security feature. Read more
Does FusionAuth support Credential Guard (Dark Web Monitoring) security feature?
FusionAuth supports Credential Guard (Dark Web Monitoring) security feature. Breached Password Detection (Reactor feature) checks passwords against hundreds of millions of compromised credentials from dark web databases, updated continuously. Read more
Does FusionAuth support Tenant Access Control List (IP ACL) security feature?
FusionAuth supports Tenant Access Control List (IP ACL) security feature. IP Access Control Lists can be assigned per-tenant and per-application to allow or block IP ranges. Requires Enterprise plan. Read more
Does FusionAuth support Device Fingerprinting security feature?
FusionAuth does not support Device Fingerprinting security feature.
Does FusionAuth support Per-Organization Branding multi-tenancy?
FusionAuth supports Per-Organization Branding multi-tenancy. Per-application FreeMarker themes for custom branding. Read more
Does FusionAuth support Per-Organization MFA Policy multi-tenancy?
FusionAuth supports Per-Organization MFA Policy multi-tenancy. Read more
Does FusionAuth support Hosted / Universal Login Page branding feature?
FusionAuth supports Hosted / Universal Login Page branding feature. Read more
Does FusionAuth support Embedded / Native Login Components branding feature?
FusionAuth supports Embedded / Native Login Components branding feature. FusionAuth SDK components for React, Angular, Vue, iOS, and Android. Read more
Does FusionAuth support White-Label / Full Brand Removal branding feature?
FusionAuth supports White-Label / Full Brand Removal branding feature. Full white-labeling with FreeMarker theming. Read more
Does FusionAuth support Localization / i18n branding feature?
FusionAuth supports Localization / i18n branding feature. 16+ built-in language packs with custom translation support. Read more
Does FusionAuth support Prebuilt UI Components (SDK) branding feature?
FusionAuth supports Prebuilt UI Components (SDK) branding feature. FusionAuth SDKs with hosted login page integration. Read more
Does FusionAuth support Login / Auth Analytics Dashboard analytics?
FusionAuth supports Login / Auth Analytics Dashboard analytics. Read more
Does FusionAuth support SOC 2 Type II Certification compliance?
FusionAuth supports SOC 2 Type II Certification compliance. Read more
Does FusionAuth support ISO 27001 / 27017 / 27018 Certification compliance?
FusionAuth supports ISO 27001 / 27017 / 27018 Certification compliance. ISO 27001:2022 certification achieved in 2025, awarded by AssurancePoint. Read more
Does FusionAuth support HIPAA Business Associate Agreement (BAA) compliance?
FusionAuth supports HIPAA Business Associate Agreement (BAA) compliance. Read more
Does FusionAuth support PCI DSS Compliance compliance?
FusionAuth supports PCI DSS Compliance compliance. Read more
Does FusionAuth support CSA STAR Certification compliance?
FusionAuth does not support CSA STAR Certification compliance. No CSA STAR certification listed. FusionAuth holds SOC 2 Type II and ISO 27001:2022. Read more
Does FusionAuth support FedRAMP Authorization compliance?
FusionAuth does not support FedRAMP Authorization compliance. FusionAuth is not FedRAMP authorized. Self-hosted deployments can be run in FedRAMP environments (e.g. AWS GovCloud). Read more
Does FusionAuth support GDPR: Data Export (Portability) compliance?
FusionAuth supports GDPR: Data Export (Portability) compliance. Read more
Does FusionAuth support GDPR: Right to be Forgotten (User Deletion) compliance?
FusionAuth supports GDPR: Right to be Forgotten (User Deletion) compliance. Read more
Does FusionAuth support Consent Management compliance?
FusionAuth supports Consent Management compliance. Read more
Does FusionAuth support Region Deployment compliance?
FusionAuth supports Region Deployment compliance. Self-hosted in any region; FusionAuth Cloud available in multiple AWS regions. Read more
Does FusionAuth support Private Cloud Deployment compliance?
FusionAuth supports Private Cloud Deployment compliance. Deploy self-hosted on AWS, Azure, GCP, or use FusionAuth's dedicated Cloud offering on AWS. Read more
Does FusionAuth support SDK Coverage developer integration?
FusionAuth supports SDK Coverage developer integration. SDKs for React, Vue, Angular, iOS (Swift), Android (Kotlin), Go, .NET, Python, PHP, Ruby, and more. Read more
Does FusionAuth support Management API developer integration?
FusionAuth supports Management API developer integration. Read more
Does FusionAuth support Authentication API Rate Limits developer integration?
FusionAuth partially supports Authentication API Rate Limits developer integration. FusionAuth Cloud applies WAF-based rate limiting (HTTP 429). Self-hosted instances have login attempt throttling via Advanced Threat Detection but no documented global API rate limits. Read more
Does FusionAuth support Actions / Extensibility Pipeline developer integration?
FusionAuth supports Actions / Extensibility Pipeline developer integration. Lambdas (JavaScript/Groovy) for customizing tokens and auth flows. Connectors for custom auth sources. Read more
Does FusionAuth support TypeScript Support in Extensibility developer integration?
FusionAuth partially supports TypeScript Support in Extensibility developer integration. Lambdas run JavaScript on GraalJS (ECMAScript 2021). TypeScript must be transpiled to JavaScript before deployment. Read more
Does FusionAuth support Custom Domain developer integration?
FusionAuth supports Custom Domain developer integration. Read more
Does FusionAuth support Deploy CLI (Infrastructure as Code) developer integration?
FusionAuth supports Deploy CLI (Infrastructure as Code) developer integration. FusionAuth CLI (npx fusionauth) with Kickstart for declarative IaC configuration. Kickstart works on fresh installs for CI/CD environments. Read more
Does FusionAuth support Terraform Provider developer integration?
FusionAuth supports Terraform Provider developer integration. Read more
Does FusionAuth support Custom Database Connections developer integration?
FusionAuth supports Custom Database Connections developer integration. FusionAuth Connectors for authenticating against custom databases. Read more
Does FusionAuth support Native Webhook Support developer integration?
FusionAuth supports Native Webhook Support developer integration. Read more
Does FusionAuth support Universal Login / Hosted Login Page Customization developer integration?
FusionAuth supports Universal Login / Hosted Login Page Customization developer integration. Full FreeMarker theming with templates for every page. Read more
Does FusionAuth support Custom Email Provider (SMTP) developer integration?
FusionAuth supports Custom Email Provider (SMTP) developer integration. Configure custom SMTP server for transactional emails. Read more
Does FusionAuth support Email Templates developer integration?
FusionAuth supports Email Templates developer integration. Read more
Does FusionAuth support Custom OIDC Claims / Token Enrichment developer integration?
FusionAuth supports Custom OIDC Claims / Token Enrichment developer integration. Custom claims via Lambda functions in token generation. Read more
Does FusionAuth support No-Code Auth Flow Builder / Orchestration feature?
FusionAuth does not support No-Code Auth Flow Builder / Orchestration feature.
Does FusionAuth support Identity Verification / Document Proofing feature?
FusionAuth does not support Identity Verification / Document Proofing feature. No built-in document scanning or biometric identity proofing. Identity pre-verification via email/phone available but not formal identity proofing. Read more
Does FusionAuth support Decentralized / Verifiable Credentials feature?
FusionAuth does not support Decentralized / Verifiable Credentials feature. No support for DIDs or verifiable credentials. FusionAuth focuses on traditional OAuth2/OIDC/SAML protocols. Read more
Does FusionAuth support Built-in Billing / Subscription Management feature?
FusionAuth does not support Built-in Billing / Subscription Management feature. No native billing/payment integration. FusionAuth manages its own subscription billing but does not provide billing APIs for tenant applications. Read more
Does FusionAuth support Agentic AI / MCP Server Authentication feature?
FusionAuth partially supports Agentic AI / MCP Server Authentication feature. AI agents modeled as Entities using M2M OAuth 2.1 client credentials. FusionAuth MCP Server available. No native agent-specific identity delegation standard. Read more
Note: The current data is based on provider documentation/experience and may not be 100% accurate. Please open an issue if you have spotted any inconsistencies.