Nacho
Kinde IAM Provider
Developer-first CIAM platform built for modern SaaS. Ships authentication, billing, and access management in one SDK. Notable for making enterprise SSO (SAML) available on all paid plans rather than behind enterprise contracts, and a generous 10,500 MAU free tier.
Features
If you want to compare IAM features of different providers, please check out the (C)IAM Identity Providers benchmark.
Looking for Kinde’s OpenID Connect protocol compatibility? View Kinde on the OpenID Connect Providers benchmark.
Frequently Asked Questions
Does Kinde support Username and Password authentication method?
Kinde supports Username and Password authentication method. Email and password authentication with 8-character minimum and top 1,000,000 common passwords blocked. Read more
Does Kinde support Social Sign-in authentication method?
Kinde supports Social Sign-in authentication method. Google, GitHub, Microsoft, Apple, Discord, and more. Accounts are automatically linked across providers that share a verified email address. Read more
Does Kinde support Passkey authentication method?
Kinde does not support Passkey authentication method. Passkey authentication is in development and listed on Kinde's roadmap but not yet available. Read more
Does Kinde support Email Passwordless authentication method?
Kinde supports Email Passwordless authentication method. Email OTP is Kinde's default authentication method for new businesses. Users receive a one-time code via email. Read more
Does Kinde support Phone Passwordless authentication method?
Kinde supports Phone Passwordless authentication method. SMS OTP via Twilio integration. Users enter their phone number and receive a one-time code via SMS. Read more
Does Kinde support Magic Link authentication method?
Kinde supports Magic Link authentication method. Email magic code (one-time link/code) for passwordless sign-in. Read more
Does Kinde support Anonymous / Guest authentication method?
Kinde does not support Anonymous / Guest authentication method. Read more
Does Kinde support Time-based One-Time Password (TOTP) MFA?
Kinde supports Time-based One-Time Password (TOTP) MFA. Authenticator app TOTP (Google Authenticator, Authy, 1Password, etc.). Read more
Does Kinde support HMAC-based One-Time Password (HOTP) MFA?
Kinde does not support HMAC-based One-Time Password (HOTP) MFA. Read more
Does Kinde support Universal 2nd Factor (U2F) MFA?
Kinde does not support Universal 2nd Factor (U2F) MFA. Hardware security keys are not supported. Passkeys (which would cover WebAuthn) are still on the roadmap. Read more
Does Kinde support WebAuthn MFA?
Kinde does not support WebAuthn MFA. WebAuthn-based MFA is not available. Passkeys are on the roadmap but not yet shipped. Read more
Does Kinde support Email Code MFA?
Kinde supports Email Code MFA. Email OTP as a second factor. Read more
Does Kinde support Phone Code MFA?
Kinde supports Phone Code MFA. SMS OTP as a second factor. Read more
Does Kinde support Recovery Code MFA?
Kinde supports Recovery Code MFA. Backup recovery codes offered to users at first MFA enrollment. Can be disabled via dashboard toggle. Read more
Does Kinde support Push Notification MFA?
Kinde does not support Push Notification MFA. Read more
Does Kinde support Adaptive / Risk-Based MFA MFA?
Kinde does not support Adaptive / Risk-Based MFA MFA. Read more
Does Kinde support Cisco Duo MFA?
Kinde does not support Cisco Duo MFA. Read more
Does Kinde support Step-Up Authentication MFA?
Kinde partially supports Step-Up Authentication MFA. Achievable via the Pre-MFA workflow trigger, which allows custom logic to enforce additional verification before sensitive actions. No built-in step-up UI. Read more
Does Kinde support OpenID Connect (OIDC) integration protocol?
Kinde supports OpenID Connect (OIDC) integration protocol. Read more
Does Kinde support SAML 2.0 integration protocol?
Kinde supports SAML 2.0 integration protocol. SAML 2.0 as Identity Provider for enterprise SSO. Available on Plus plan and above — notably not gated behind an enterprise contract. Read more
Does Kinde support WS-Federation integration protocol?
Kinde does not support WS-Federation integration protocol. Read more
Does Kinde support Machine-to-Machine (M2M) Authentication integration protocol?
Kinde supports Machine-to-Machine (M2M) Authentication integration protocol. OAuth 2.0 Client Credentials grant for M2M authentication. Read more
Does Kinde support OpenID Connect (OIDC) Federation identity federation?
Kinde supports OpenID Connect (OIDC) Federation identity federation. Any OAuth 2.0 compatible identity provider can be connected as an enterprise SSO connection. Available on Plus plan and above. Read more
Does Kinde support SAML 2.0 Federation identity federation?
Kinde supports SAML 2.0 Federation identity federation. Per-organization SAML SSO enterprise connections. Available on Plus plan and above. Read more
Does Kinde support Active Directory / LDAP identity federation?
Kinde does not support Active Directory / LDAP identity federation. No native LDAP/Active Directory protocol support. Microsoft Entra ID can be connected via OAuth 2.0 or SAML enterprise connection. Read more
Does Kinde support Azure Active Directory (Entra ID) identity federation?
Kinde supports Azure Active Directory (Entra ID) identity federation. Microsoft Entra ID via OAuth 2.0 and WS-Fed options as a social/enterprise connection. Available on Plus plan and above for SAML. Read more
Does Kinde support Bulk User Import user management?
Kinde supports Bulk User Import user management. Import users via CSV or NDJSON file upload (max 49MB). Kinde also provides migration guides from Auth0, Firebase, Okta, and other providers. Read more
Does Kinde support Password Hash Import (Multiple Formats) user management?
Kinde supports Password Hash Import (Multiple Formats) user management. Import password hashes in bcrypt, crypt, sha256, md5, and WordPress formats with configurable salt positioning. Read more
Does Kinde support Bulk User Export user management?
Kinde supports Bulk User Export user management. Read more
Does Kinde support Bulk User Update / Delete user management?
Kinde does not support Bulk User Update / Delete user management. Bulk update and delete are not supported. Individual user operations are available via the Management API. Bulk update via re-import is explicitly blocked — re-imported records for existing users are ignored. Read more
Does Kinde support Upsert on Import user management?
Kinde does not support Upsert on Import user management. No upsert semantics. Re-importing records for existing users is silently ignored — changes to already-imported users will not be applied. Read more
Does Kinde support Legacy Username Import (Non-Allowed Characters) user management?
Kinde supports Legacy Username Import (Non-Allowed Characters) user management. Username restrictions are not as strict as some providers; import supports a wide range of legacy user data formats. Read more
Does Kinde support MFA Enrollment Import user management?
Kinde supports MFA Enrollment Import user management. MFA enrollments and settings are preserved when migrating users from supported providers (Auth0, Firebase, Okta). Read more
Does Kinde support Inbound SCIM Provisioning user management?
Kinde partially supports Inbound SCIM Provisioning user management. SCIM inbound provisioning is on the roadmap and listed as 'coming soon' for Scale plan and above. Read more
Does Kinde support Outbound SCIM Provisioning user management?
Kinde does not support Outbound SCIM Provisioning user management. Read more
Does Kinde support SCIM Groups Provisioning user management?
Kinde does not support SCIM Groups Provisioning user management. Read more
Does Kinde support Just-In-Time (JIT) User Provisioning user management?
Kinde supports Just-In-Time (JIT) User Provisioning user management. Users are automatically created on first login via enterprise SSO connections. Read more
Does Kinde support Lazy / Trickle Migration from Legacy Database user management?
Kinde supports Lazy / Trickle Migration from Legacy Database user management. Drip-feed/trickle migration supported via the User Pre-Registration workflow: check credentials against a legacy database before creating the user in Kinde, enabling zero-downtime password migration without forced resets. Read more
Does Kinde support Self-Service Profile Management Portal user management?
Kinde supports Self-Service Profile Management Portal user management. Read more
Does Kinde support User Account Linking user management?
Kinde supports User Account Linking user management. Kinde automatically links accounts across different authentication providers when they share the same verified email address. Read more
Does Kinde support User Blocking / Banning user management?
Kinde supports User Blocking / Banning user management. Read more
Does Kinde support User Metadata user management?
Kinde supports User Metadata user management. Custom user properties stored per user via Kinde's Properties feature. Read more
Does Kinde support Application Metadata user management?
Kinde supports Application Metadata user management. Application-level properties and feature flags stored per user or organization. Read more
Does Kinde support Metadata Size Limits user management?
Kinde supports Metadata Size Limits user management. Read more
Does Kinde support User Search user management?
Kinde supports User Search user management. Read more
Does Kinde support Role-Based Access Control (RBAC) user management?
Kinde supports Role-Based Access Control (RBAC) user management. Roles and permissions with per-organization assignment. Custom roles available on Pro plan and above. Read more
Does Kinde support Organizations (Multi-Tenancy B2B) user management?
Kinde supports Organizations (Multi-Tenancy B2B) user management. Full B2B organizations model with member management, roles, invitations, and per-org SSO configuration. Read more
Does Kinde support Password Strength Policies user management?
Kinde supports Password Strength Policies user management. 8-character minimum enforced; top 1,000,000 most common passwords are blocked globally. Read more
Does Kinde support Username Restrictions user management?
Kinde supports Username Restrictions user management. Read more
Does Kinde support Progressive Profiling / Forms user management?
Kinde partially supports Progressive Profiling / Forms user management. Custom sign-up fields can be configured. Full conditional progressive profiling flows require custom workflow logic. Read more
Does Kinde support Attribute-Based Access Control (ABAC) access control?
Kinde does not support Attribute-Based Access Control (ABAC) access control.
Does Kinde support Fine-Grained Authorization (FGA / ReBAC) access control?
Kinde does not support Fine-Grained Authorization (FGA / ReBAC) access control.
Does Kinde support API Authorization (Scopes / Permissions) access control?
Kinde supports API Authorization (Scopes / Permissions) access control. OAuth 2.0 scopes and audience-based API authorization. API scopes available on Plus plan and above. Read more
Does Kinde support Audit Log Retention security feature?
Kinde supports Audit Log Retention security feature. Retention varies by plan: Free (1 day), Pro (7 days), Plus (14 days), Scale (30 days), Enterprise (contact sales). Read more
Does Kinde support Audit Log Streaming security feature?
Kinde does not support Audit Log Streaming security feature. Audit logs are viewable in the Kinde dashboard only. Real-time streaming to external SIEM is not available; webhook delivery covers user events but not a full audit stream. Read more
Does Kinde support Security Center (Threat Monitoring Dashboard) security feature?
Kinde does not support Security Center (Threat Monitoring Dashboard) security feature. No dedicated threat monitoring or security center dashboard. Security features are distributed across the Kinde dashboard. Read more
Does Kinde support Encryption at Rest security feature?
Kinde supports Encryption at Rest security feature. Read more
Does Kinde support Encryption in Transit security feature?
Kinde supports Encryption in Transit security feature. TLS 1.2 and 1.3 enforced on all public-facing endpoints with AES-GCM and ChaCha20-Poly1305 cipher suites. Read more
Does Kinde support Customer Managed Keys (BYOK) security feature?
Kinde does not support Customer Managed Keys (BYOK) security feature. Read more
Does Kinde support Bot Detection security feature?
Kinde supports Bot Detection security feature. AWS WAF blocks traffic matching OWASP threat rules and known malicious IPs. Customers can add Cloudflare Turnstile for CAPTCHA on custom domains. Read more
Does Kinde support Brute Force Protection security feature?
Kinde supports Brute Force Protection security feature. Accounts are automatically locked out after 5 consecutive failed login attempts. Read more
Does Kinde support Suspicious IP Throttling security feature?
Kinde supports Suspicious IP Throttling security feature. Application-level rate limiting restricts connections from individual IPs across API, admin, and authentication endpoints. Read more
Does Kinde support Breached Password Detection security feature?
Kinde supports Breached Password Detection security feature. Kinde checks passwords against known breach databases and warns users about compromised credentials. Read more
Does Kinde support Credential Guard (Dark Web Monitoring) security feature?
Kinde does not support Credential Guard (Dark Web Monitoring) security feature. No standalone dark web monitoring product. Breached password detection at sign-up/sign-in is covered separately. Read more
Does Kinde support Tenant Access Control List (IP ACL) security feature?
Kinde does not support Tenant Access Control List (IP ACL) security feature. No user-configurable IP-based ACLs or geo-blocking. Kinde applies internal WAF rules via AWS WAF. Read more
Does Kinde support Device Fingerprinting security feature?
Kinde supports Device Fingerprinting security feature. Device fingerprinting is used internally during authentication to prevent session hijacking between different browsers or devices. Read more
Does Kinde support Per-Organization Branding multi-tenancy?
Kinde supports Per-Organization Branding multi-tenancy. Custom domains and branding can be configured per organization. Read more
Does Kinde support Per-Organization MFA Policy multi-tenancy?
Kinde supports Per-Organization MFA Policy multi-tenancy. MFA can be enforced at the organization level on Scale plan and above, with the ability to exclude certain roles or connection types. Read more
Does Kinde support Hosted / Universal Login Page branding feature?
Kinde supports Hosted / Universal Login Page branding feature. Kinde provides a centrally hosted authentication page by default. Read more
Does Kinde support Embedded / Native Login Components branding feature?
Kinde partially supports Embedded / Native Login Components branding feature. SDKs for 21+ frameworks include pre-built auth components. The primary flow is redirect-based (hosted page); fully embedded no-redirect login is not a first-class feature. Read more
Does Kinde support White-Label / Full Brand Removal branding feature?
Kinde supports White-Label / Full Brand Removal branding feature. Custom domain for auth pages; Kinde branding removal available on paid plans. Read more
Does Kinde support Localization / i18n branding feature?
Kinde supports Localization / i18n branding feature. Supports English (en/en-US/en-AU/en-GB), Dutch, German, Polish, Hebrew, Italian, French, Malay, Spanish, Russian, Portuguese (Brazilian), Norwegian, and Swedish on user-facing auth pages. Read more
Does Kinde support Prebuilt UI Components (SDK) branding feature?
Kinde supports Prebuilt UI Components (SDK) branding feature. Official SDKs for 21+ frameworks including React, JavaScript, Angular, Next.js, Vue, iOS, Android, Flutter, React Native, and Expo. Read more
Does Kinde support Login / Auth Analytics Dashboard analytics?
Kinde supports Login / Auth Analytics Dashboard analytics. Dashboard analytics for authentication events, active users, sign-up/sign-in trends. Read more
Does Kinde support SOC 2 Type II Certification compliance?
Kinde supports SOC 2 Type II Certification compliance. SOC 2 Type II certified (AssuranceLab). Full report available on Scale and Enterprise plans. Read more
Does Kinde support ISO 27001 / 27017 / 27018 Certification compliance?
Kinde supports ISO 27001 / 27017 / 27018 Certification compliance. ISO 27001:2022 certified by Compass Assurance Services. Certificate downloadable from Kinde's trust center. Read more
Does Kinde support HIPAA Business Associate Agreement (BAA) compliance?
Kinde supports HIPAA Business Associate Agreement (BAA) compliance. Kinde is HIPAA compliant and acts as a Business Associate. BAAs available upon request. Read more
Does Kinde support PCI DSS Compliance compliance?
Kinde partially supports PCI DSS Compliance compliance. Kinde currently uses a third-party SAQ-A approach for payment processing. Preparing SAQ for full PCI DSS compliance as billing features expand. Not yet holding a QSA-issued ROC. Read more
Does Kinde support CSA STAR Certification compliance?
Kinde does not support CSA STAR Certification compliance. Read more
Does Kinde support FedRAMP Authorization compliance?
Kinde does not support FedRAMP Authorization compliance.
Does Kinde support GDPR: Data Export (Portability) compliance?
Kinde supports GDPR: Data Export (Portability) compliance. Read more
Does Kinde support GDPR: Right to be Forgotten (User Deletion) compliance?
Kinde supports GDPR: Right to be Forgotten (User Deletion) compliance. Read more
Does Kinde support Consent Management compliance?
Kinde does not support Consent Management compliance.
Does Kinde support Region Deployment compliance?
Kinde does not support Region Deployment compliance. Kinde is a SaaS-only product with no data residency region selection for customers.
Does Kinde support Private Cloud Deployment compliance?
Kinde does not support Private Cloud Deployment compliance.
Does Kinde support SDK Coverage developer integration?
Kinde supports SDK Coverage developer integration. 21+ official SDKs with TypeScript definitions throughout. Backends: .NET, Go, Python, Node.js, Express, Next.js, Java, Ruby, PHP, Elixir. Frontend: React, JavaScript, Angular. Mobile: iOS, Android, Flutter, React Native, Expo. Read more
Does Kinde support Management API developer integration?
Kinde supports Management API developer integration. Read more
Does Kinde support Authentication API Rate Limits developer integration?
Kinde supports Authentication API Rate Limits developer integration. Read more
Does Kinde support Actions / Extensibility Pipeline developer integration?
Kinde supports Actions / Extensibility Pipeline developer integration. Workflows execute custom TypeScript/JavaScript at 9 trigger points: user pre-registration, post-authentication, token generation, M2M token generation, pre-MFA, new password, existing password, plan selection, plan cancellation. Code syncs from a connected Git repository. Read more
Does Kinde support TypeScript Support in Extensibility developer integration?
Kinde supports TypeScript Support in Extensibility developer integration. Kinde Workflows natively support TypeScript, synced from a connected Git repository and run in your IDE. Read more
Does Kinde support Custom Domain developer integration?
Kinde supports Custom Domain developer integration. Read more
Does Kinde support Deploy CLI (Infrastructure as Code) developer integration?
Kinde supports Deploy CLI (Infrastructure as Code) developer integration. Kinde CLI supports infrastructure-as-code workflows for managing environments, feature flags, and permissions via version control. Read more
Does Kinde support Terraform Provider developer integration?
Kinde partially supports Terraform Provider developer integration. A community-maintained Terraform provider (axatol/kinde) is available on the Terraform Registry. No official Kinde-maintained provider. Read more
Does Kinde support Custom Database Connections developer integration?
Kinde partially supports Custom Database Connections developer integration. Achievable via the lazy migration / drip-feed pattern using the User Pre-Registration workflow to proxy credentials against an external database. No dedicated 'custom database connection' UI as in Auth0. Read more
Does Kinde support Native Webhook Support developer integration?
Kinde supports Native Webhook Support developer integration. Webhook delivery for user events with JWT-signed payloads, idempotency headers, and automatic retry. Free plan: 1 webhook; Pro and above: unlimited. Read more
Does Kinde support Universal Login / Hosted Login Page Customization developer integration?
Kinde supports Universal Login / Hosted Login Page Customization developer integration. Full visual customization via the Kinde dashboard Page Designer and custom HTML/CSS/JS. Read more
Does Kinde support Custom Email Provider (SMTP) developer integration?
Kinde supports Custom Email Provider (SMTP) developer integration. Custom SMTP configuration supported, including a documented Resend integration. Read more
Does Kinde support Email Templates developer integration?
Kinde supports Email Templates developer integration. Read more
Does Kinde support Custom OIDC Claims / Token Enrichment developer integration?
Kinde supports Custom OIDC Claims / Token Enrichment developer integration. Custom claims added to access and ID tokens via the Token Generation workflow. Read more
Does Kinde support No-Code Auth Flow Builder / Orchestration feature?
Kinde does not support No-Code Auth Flow Builder / Orchestration feature.
Does Kinde support Identity Verification / Document Proofing feature?
Kinde does not support Identity Verification / Document Proofing feature.
Does Kinde support Decentralized / Verifiable Credentials feature?
Kinde does not support Decentralized / Verifiable Credentials feature.
Does Kinde support Built-in Billing / Subscription Management feature?
Kinde supports Built-in Billing / Subscription Management feature. Native billing and subscription management built into the Kinde platform. Supports plan creation, pricing tables, and revenue collection directly from the identity layer. Read more
Does Kinde support Agentic AI / MCP Server Authentication feature?
Kinde supports Agentic AI / MCP Server Authentication feature. Kinde provides an MCP (Model Context Protocol) server for AI agent authentication integration. Read more
Note: The current data is based on provider documentation/experience and may not be 100% accurate. Please open an issue if you have spotted any inconsistencies.