Overview:
Tesseral is open source auth infrastructure for business software, designed as a multi-tenant, API-first service for cloud deployment. It bundles user management for B2B SaaS applications, handling login, permissions, and enterprise features. Instead of a language-specific library, Tesseral works with any tech stack. It is primarily aimed at developers building business software who need to implement authentication for their customers. It can be used as a managed service or self-hosted.
Core Features:
Hosted, customizable login pages: Prebuilt UIs that can be tailored to a brand, allowing login methods to be added or removed via the Tesseral Console.
B2B multitenancy: Customer admins control login methods for their tenant and can add or remove users at will.
Enterprise SSO (SAML & OIDC): Support for SAML and OpenID Connect can be added to a product without writing code.
SCIM (Enterprise Directory Sync): Users can be provisioned from enterprise directories without writing code.
Role-based access control (RBAC): Fine-grained permissions can be added to a product, with pre-built UI and
hasPermissioncalls.Audit logs & Webhooks: Comprehensive logs of all user actions are available, and data can be synced in real-time via webhooks.
Use Cases:
Developers building B2B SaaS: Integrating authentication, multitenancy, and user management into a new or existing application.
Adding enterprise features: Implementing SAML, OIDC, or SCIM for customer organizations without coding from scratch.
Customer self-service: Providing pre-built settings pages where customer admins can invite coworkers, manage login settings, and configure permissions.
Support and debugging: Using user impersonation to see exactly what a user sees in order to diagnose and fix issues.
Why It Matters:
As an API-first, multi-tenant service, Tesseral offers a distinct architecture for auth in business software. It is not a library tied to a single framework, allowing integration with any tech stack. The option to self-host or use a managed service provides deployment flexibility. README evidence confirms support for key enterprise standards (SAML, OIDC, SCIM) and core B2B features (RBAC, audit logs, webhooks, API keys) as bundled capabilities rather than optional integrations.
