Workforce identity for modern teams.
Identity, solved.
Manage how your employees sign in, what they can access, and when access is revoked, all on a platform built and hosted in Europe.
OIDC · SAML 2.0 · SCIM 2.0 · WebAuthn
From day one to departure
Joiner, mover, leaver: the whole lifecycle security teams worry about, followed through one employee.
Day 1 · 08:52
Alice joins
HR adds her to the directory. SCIM provisions her account, groups, and app access before she reaches her desk.
← scim: alice@acme.eu created · engineering · 6 apps granted
Day 1 · 09:04
She signs in
No password to set, nothing to remember. She registers a passkey with Touch ID and is in.
✓ webauthn: passkey registered · signed in · 12ms
Every day
She forgets we exist
One identity opens Slack, GitHub, Figma, and every internal tool. Zero passwords across all of them.
sso: 6 apps · oidc + saml · 0 passwords
Month 14
She moves up
The promotion lands in the HR system and access follows on its own. New grants issued, stale ones revoked, every change logged.
role: engineer → staff · 2 grants · 1 revocation · logged
Day 731
She moves on
Deactivated in the HR system once. Every session dies within seconds, and nobody has to remember a checklist.
← scim: active=false · 14 sessions revoked · 300ms
The complete record of those 731 days is one API call away.
See audit loggingEverything you need
A complete identity platform, not just an auth library.
Multi-factor authentication
Passkeys, TOTP, and recovery codes. Enforce MFA policies per user, group, or tenant.
webauthn · totp · recovery codes
Single sign-on
OIDC and SAML support out of the box. Connect any application with standard protocols.
oidc · saml 2.0
Directory sync (SCIM)
Automatic user provisioning and deprovisioning. Keep your directory in sync with HR systems.
/scim/v2 · users · groups
Multi-tenancy
Isolated tenants with per-tenant configuration. Perfect for SaaS and managed services.
isolation: strict
API-first
Every feature available through a comprehensive REST API. Automate everything.
/v1 · openapi 3.1
Audit logging
Complete audit trail for every authentication event, admin action, and configuration change.
append-only · signed
Built on open standards
Interoperable by design. No proprietary lock-in.
OIDC
OpenID Connect
Modern authentication built on OAuth 2.0.
/.well-known/openid-configuration
SAML 2.0
Security Assertion Markup Language
Enterprise single sign-on, standards-compliant.
/saml/metadata
SCIM 2.0
System for Cross-domain Identity Management
Automated user provisioning and deprovisioning.
/scim/v2
Developer experience
Integrate identity in minutes with clean, well-documented APIs.
Official SDKs
Client libraries for TypeScript, Python, Go, and Java. Idiomatic, typed, and maintained by us.
import { NooID } from '@noo/id'
const noo = new NooID({
domain: 'auth.yourapp.com'
})
// Create a new user
const user = await noo.users.create({
email: 'alice@company.eu',
role: 'member'
}) Powerful CLI
Manage users, roles, and policies from the command line. Script anything, automate everything.
Real-time webhooks
Get notified instantly when users sign in, roles change, or access is revoked. Signed payloads with automatic retries.
How Noo ID compares
See how Noo ID stacks up against the incumbents.
| Feature | Noo ID | Okta | Entra ID | |
|---|---|---|---|---|
| Passkey-first auth | Yes | Partial | Partial | Partial |
| Auditable source | Yes | No | No | No |
| EU-hosted | Yes | No | Partial | Partial |
| CLOUD Act resistant | Yes | No | No | No |
| SCIM provisioning | Yes | Yes | Yes | Yes |
| Multi-tenancy | Yes | Yes | Yes | No |
| Full API | Yes | Yes | Partial | Partial |
| Transparent pricing | Yes | No | No | No |