Authsignal
Drop-in passkeys, risk-based adaptive MFA, and omnichannel verification on top of the identity stack you already have. No migration needed. Live in weeks.
Authsignal is a drop-in authentication API layer that sits on top of the identity stack you already run, and adds the capabilities it's missing: passkeys, adaptive MFA, omnichannel verification, and a no-code rules engine. No user migration. No re-architecture required.
Authsignal supports the full spectrum of authentication methods: passkeys (FIDO2/WebAuthn), biometrics (face, palm print/vein via Qualcomm partnership), SMS and WhatsApp OTP, email OTP, email magic links, push notifications, and ID verification with biometric face match. These methods are orchestrated by a no-code rules engine that applies the right challenge at the right moment in the customer journey based on real-time risk signals. This is adaptive authentication across login, transactions, account recovery, and sensitive actions, not just login-screen MFA.
The no-code rules engine is Authsignal's core differentiator. Product managers, compliance officers, and fraud analysts define and test authentication rules across the entire customer journey without writing code or filing engineering tickets. The engine ingests real-time risk signals (device, IP, behavioral, network, and custom data), makes adaptive decisions (allow, challenge, step-up, block), and provides conversion rate visibility so teams can see the direct impact of security decisions on the customer experience.
Authsignal integrates with Auth0, AWS Cognito, Azure AD B2C, Keycloak, Duende IdentityServer, WSO2, and any custom identity stack. It deploys as a layer on top of your identity provider, or called wherever your business logic sits. There is no user migration or re-architecture required, and no platform lock-in. Most customers are live in weeks. Some customers who start with Authsignal as a drop-in layer discover over time that the separate IdP is no longer necessary, with the authentication foundation already in place.
Authsignal processes 12 million+ authentication events per month. KuppingerCole named Authsignal a 2025 Rising Star in CIAM and Passwordless Authentication. The platform is SOC 2 Type II certified, ISO 27001 certified, and FIDO Certified. It is used by financial institutions and other industries across North America, Europe, and APAC.
Email OTP and email magic links
Access and refresh token durations are configurable per app client
The session management APIs let you issue, validate, refresh and revoke access tokens and refresh tokens
Token expiry configurable; scopes not supported
Authsignal provides a prebuild UI or you can build a fully custom UI using Authsignal's Client SDKs
Authsignal integrates with popular identity providers like AWS Cognito, Azure AD B2C, Auth0, Keycloak and Duende IdentityServer via OIDC
Authsignal’s risk rules engine can challenge or block users based on anonymous IPs or country information indicating suspicious access
Authsignal focuses on passwordless and MFA flows therefore no breached password protection needed
Authsignal’s no‑code rules evaluate contextual risk and decide whether to allow, challenge, review or block a user, enabling adaptive MFA flows
Authsignal’s admin portal provides rich analytics and an audit trail of customer activity for fraud teams to monitor authentication flows
There is no feature for importing users. Authsignal relies on your existing identity provider for user management
Authsignal supports multiple tenants within a single account, allowing agencies or platforms to manage separate environments or brands
You can define custom data points in the Authsignal portal and include them when tracking actions. Persistent user custom data can be updated via the user APIs
The Authsignal portal lets administrators configure authenticators, create rules and view analytics and audit trails
Built-in and configurable OTP send/verify limits, plus multiple SMS rate limits
Authsignal's log events webhook ships action and challenge logs to any SIEM or data lake
Authsignal supports multiple tenants or environments within a single account
Enterprise plan includes uptime and support SLAs
Enterprise customers get white‑glove support with dedicated Slack or Microsoft Teams channels and a named account manager
Authsignal provides monitoring and logging of all state changes and offers analytics dashboards and audit trails in its admin portal
FIDO
GDPR
HIPAA
ISO 27001
PCI DSS
PSD2
SOC2Similar to Authsignal :
Descope
