Aadhi

What Aadhi does

• Modern sign-inPasskeys, authenticator apps with QR setup, recovery codes, email links and password reset, with self-registration when you want it.
• Single sign-onOpenID Connect and SAML 2.0 for your apps, with logout across all of them. Let people sign in with Google, Microsoft or GitHub too.
• Built for AI agentsAgents get scoped, short-lived tokens that record who they act for. People see which agents act for them and can revoke any of them in one click.
• OrganizationsEach customer gets its own users, signing keys and sign-in address. SCIM 2.0 keeps user lists in sync with their directory.
• Adaptive securityEvery sign-in gets a risk score from new devices, impossible travel and repeated failures, with the reason written to the audit log. Breached passwords can be checked too.
• Strong tokensDPoP and PAR keep stolen tokens useless. Signing keys can live in AWS, Google Cloud or Azure key management, or in a hardware security module.
• An audit log you can trustEvery event is hash-chained so tampering shows. Stream it out with webhooks and Shared Signals, and watch Aadhi with metrics and traces.
• Make it yoursYour own sign-in page templates, sign-in hooks that can allow, deny or step up, and an admin API with Go and TypeScript clients.
• Simple to runOne binary or container image plus Postgres. Docker Compose for a single server, a Helm chart for Kubernetes. Upgrades are checked before they touch your database.