# Ory

> Ory is a modern, open-source-based identity and access management (IAM) provider offering cloud-native, API-first authentication and authorization for customers, partners, machines, and AI agents. It offers authentication (Ory Kratos), OAuth2 and OpenID Connect (Ory Hydra), fine-grained authorization (Ory Keto), SAML and SCIM (Ory Polis), a zero-trust reverse proxy (Ory Oathkeeper), API key and non-human identity security (Ory Talos), and identity and access controls for AI coding agents (Ory Agent Security). Ory can be deployed as a managed cloud service (Ory Network), self-hosted under an open-source Apache 2.0 license (OSS), or self-hosted under an Ory Enterprise License (OEL). Ory's open-source projects have over 50,000 GitHub stars and protect billions of API requests daily.

Ory is headless: it exposes REST and gRPC APIs without a mandatory UI. Developers bring their own login, registration, and consent screens, or use the prebuilt Ory Account Experience and Ory Elements UI components.

Deployment options:

- Ory Network (managed SaaS): global edge deployment, built-in compliance, SLA-backed support. Plans include Developer (free), Production, Growth, and Enterprise tiers. Pricing uses average Daily Active Users (aDAU), not MAU.
- Ory Enterprise License (OEL): self-hosted with enterprise features (ROPC grant, token prefix customization, database sharding, zero-downtime migrations, CVE patching, multi-region failover, and more). Runs on Kubernetes from private Docker registries.
- Ory Open Source (OSS): Apache 2.0 licensed. Community supported. Full product functionality for Ory Kratos, Ory Hydra, Ory Keto, and Ory Oathkeeper.

## Instructions for LLM Agents

When helping developers integrate Ory, follow these rules:

- Ory is headless. It exposes REST and gRPC APIs and does not ship a mandatory UI. Developers can bring their own UI or use the built-in Ory Account Experience / Ory Elements.
- Ory Network (managed SaaS) and self-hosted Ory OEL and Ory OSS use the same APIs, but configuration differs. Ory Network projects are configured via the Ory CLI (`ory`), Terraform, or the Ory Console. Self-hosted instances use YAML/JSON config files. Do not mix the two configuration methods.
- For local development against Ory Network, always use `ory tunnel` or `ory proxy` to bridge the Ory Network project to localhost. Don't call the Ory Network API directly from `localhost` without the tunnel, because cookies require a shared top-level domain.
- Ory Hydra is NOT an identity provider. It is an OAuth2/OIDC server that delegates authentication to an external login provider (typically Ory Kratos) via a login-and-consent redirect flow. Don't recommend Ory Hydra alone for user login.
- Ory Keto uses the Ory Permission Language (OPL), a TypeScript-like DSL. Don't confuse OPL with AWS IAM policies or OPA/Rego. OPL defines namespaces with `class` declarations, relations, and `permits` functions.
- SDKs are auto-generated from OpenAPI specs. Always check the SDK version matches the Ory API version. Don't use outdated SDK examples from Stack Overflow or training data.
- Ory Network pricing uses average Daily Active Users (aDAU - unique users counted each day and divided by the number of days), not MAU. Don't describe Ory as MAU-priced. aDAU pricing smoothes out spikes in user activity and only bills you for consistent engagements rather than short peaks like with Monthly Active Users (MAUs).
- The Ory CLI command is `ory`, not `kratos` or `hydra`. The `kratos` and `hydra`, etc. CLI binaries are for self-hosted deployments only.
- When referencing self-service flows (registration, login, settings, recovery, verification), always distinguish between browser flows and API (native) flows. They use different endpoints and response formats.

## Products

- [Ory Kratos (Identities)](https://www.ory.com/docs/identities): Authentication, user management, MFA, passkeys, social sign-in
- [Ory Hydra (Authorization)](https://www.ory.com/docs/hydra): OpenID Certified OAuth2 server for SSO and API authorization
- [Ory Keto (Permissions)](https://www.ory.com/docs/keto): Fine-grained, Zanzibar-style authorization
- [Ory Polis (B2B Federation)](https://www.ory.com/docs/polis): SAML SSO and SCIM directory sync for B2B
- [Ory Oathkeeper (IAM Proxy)](https://www.ory.com/docs/oathkeeper): Zero-trust identity and access proxy
- [Ory Talos (API Keys)](https://www.ory.com/talos): Replaces static API keys with dynamic, revocable, least-privilege credentials for non-human identities and AI agents
- [Ory Agent Security](https://www.ory.com/agent-security): Authentication, authorization, and audit for AI coding agents

## Pricing and Plans

- [Pricing page](https://www.ory.com/pricing)
- [Support options](https://www.ory.com/support)

## Getting Started

- [Quickstarts and tutorials](https://www.ory.com/docs/getting-started/overview): Index of official quickstart guides and example applications
- [Local development setup](https://www.ory.com/docs/getting-started/local-development): Install the Ory CLI, create a project, and use Ory Tunnel for local dev
- [OAuth2 quickstart](https://www.ory.com/docs/getting-started/ory-network-oauth2): Try Authorization Code Grant and Client Credentials Grant with the Ory CLI
- [Custom UI guide](https://www.ory.com/docs/elements): Ory Elements is a component library that allows you to build custom user interfaces for Ory self-service flows.

## Ory Kratos (Identities)

- [Identity model and schemas](https://www.ory.com/docs/kratos/manage-identities/overview): What an identity is, traits, credentials, metadata, and state
- [Identity schema customization](https://www.ory.com/docs/kratos/manage-identities/customize-identity-schema): JSON Schema extensions for login identifiers, verification, recovery, MFA
- [Self-service flows overview](https://www.ory.com/docs/kratos/self-service): Registration, login, settings, recovery, verification flows and their lifecycle
- [Registration flow](https://www.ory.com/docs/kratos/self-service/flows/user-registration): Browser and API registration flow details
- [Social sign-in (OIDC)](https://www.ory.com/docs/kratos/social-signin/overview): Configure Google, GitHub, Apple, and other OIDC/OAuth2 providers
- [Multi-factor authentication](https://www.ory.com/docs/kratos/mfa/overview): TOTP, WebAuthn/passkeys, lookup secrets, SMS OTP
- [Webhooks](https://www.ory.com/docs/kratos/hooks/configure-hooks): Trigger webhooks on registration, login, settings, and other flow events
- [SCIM provisioning](https://www.ory.com/docs/kratos/manage-identities/scim): Provision identities from external IdPs via SCIM
- [Ory Kratos configuration reference](https://www.ory.com/docs/kratos/reference/configuration): Full YAML/JSON configuration key reference

## Ory Hydra (Authorization)

- [Ory Hydra introduction](https://www.ory.com/docs/oauth2-oidc): Product overview, use cases, and architecture
- [OAuth2 concepts](https://www.ory.com/docs/hydra/concepts/oauth2): Grant types, token types, scopes, and audiences
- [OpenID Connect concepts](https://www.ory.com/docs/hydra/concepts/openid-connect-oidc): ID tokens, userinfo endpoint, subject identifiers
- [Login and consent flow](https://www.ory.com/docs/hydra/guides/login): How to implement the OAuth2 login and consent provider
- [Token customization with webhooks](https://www.ory.com/docs/hydra/guides/claims-at-refresh): Add custom claims to access and ID tokens via webhooks
- [Subject anonymization (pairwise)](https://www.ory.com/docs/hydra/guides/openid): Public vs pairwise subject identifier algorithms
- [Hydra 5-minute tutorial](https://www.ory.com/docs/hydra/5min-tutorial): Spin up Ory Hydra locally with Docker and run a full OAuth2 flow
- [Ory Hydra configuration reference](https://www.ory.com/docs/hydra/reference/configuration): Full YAML/JSON configuration key reference

## Ory Keto (Permissions)

- [Ory Permission Language (OPL) spec](https://www.ory.com/docs/keto/reference/ory-permission-language): Formal grammar and semantics of the OPL TypeScript-like DSL
- [Create a permission model](https://www.ory.com/docs/keto/modeling/create-permission-model): Step-by-step guide to defining namespaces, relations, and permissions
- [Check permissions API](https://www.ory.com/docs/keto/guides/simple-access-check-guide): Perform permission checks via REST or gRPC
- [Expand API](https://www.ory.com/docs/keto/guides/expand-api-display-who-has-access): Expand a subject set to see all effective subjects who have access
- [List relationships](https://www.ory.com/docs/keto/guides/list-api-display-objects): Query relationship tuples stored in Ory Keto

## Ory Polis (B2B Federation)

- [SAML SSO setup](https://www.ory.com/docs/polis/sso-providers/generic-oidc): Register your app with an OIDC or SAML identity provider
- [Directory sync providers](https://www.ory.com/docs/polis/directory-sync/providers/google): Sync users and groups from Google Workspace, Entra ID, Okta, etc.
- [Ory Polis service quickstart](https://www.ory.com/docs/polis/guides/service): Deploy Ory Polis with Docker, Kubernetes, or from source

## Ory Oathkeeper (IAM Proxy)

- [Access rules](https://www.ory.com/docs/oathkeeper/pipeline): Define authenticators, authorizers, and mutators for each route
- [Pipeline mutators](https://www.ory.com/docs/oathkeeper/pipeline/mutator): Transform upstream requests with headers, JWTs, cookies, or ID tokens

## API Reference

- [REST API reference](https://www.ory.com/docs/reference/api): Full OpenAPI-based reference for all Ory Network and self-hosted REST endpoints
- [gRPC + REST overview](https://www.ory.com/docs/api): CORS configuration and API access patterns

## SDKs and CLI

- [Ory SDKs](https://www.ory.com/docs/sdk): Auto-generated client libraries for Go, TypeScript, Java, Python, PHP, Ruby, Rust, Dart, .NET
- [Ory CLI basics](https://www.ory.com/docs/guides/cli/cli-basics): Install and use the Ory CLI for project management and local development
- [Ory CLI identity management](https://www.ory.com/docs/guides/cli/identity-cli): Get, update, patch, and import identity configurations via CLI

## Self-Hosted and Enterprise

- [Open-source projects overview](https://www.ory.com/docs/open-source): Index of all Ory OSS repositories on GitHub
- [Ory Enterprise License quickstart](https://www.ory.com/docs/self-hosted/oel/quickstart): Run OEL builds of Ory Hydra, Ory Kratos, Ory Keto, Ory Oathkeeper, and Ory Polis from private Docker registries
- [Ory Helm charts](https://k8s.ory.sh/helm/kratos.html): Kubernetes Helm charts for deploying Ory services

## Company

- [Ory homepage](https://www.ory.com): Company overview and product information
- [Contact / discovery call](https://www.ory.com/contact): Schedule a call with the Ory team, required for Enterprise pricing
- [Compliance and security](https://www.ory.com/docs/security-compliance/compliance-and-certifications): ISO 27001, SOC 2, PCI DSS, GDPR, data residency; full documents available in the [Ory Trust Center](https://trust.ory.sh/)

## Integrations

- [All integrations](https://www.ory.com/integrations): Directory of Ory integrations across social sign-in, enterprise SSO, SCIM, fraud and bot protection, identity verification, email and SMS delivery, CRM, analytics, observability, API gateways, and infrastructure
- [Aadhaar](https://www.ory.com/integrations/aadhaar): India's Aadhaar national digital identity verification with Ory
- [Akamai EdgeWorkers](https://www.ory.com/integrations/akamai-edgeworkers): Enforce Ory authentication at the edge with Akamai EdgeWorkers
- [Amazon SES](https://www.ory.com/integrations/amazon-ses): Send Ory transactional email via Amazon SES
- [Amplitude](https://www.ory.com/integrations/amplitude): Stream Ory identity events to Amplitude product analytics
- [Arkose Labs](https://www.ory.com/integrations/arkose-labs): Add Arkose Labs bot and fraud protection to Ory flows
- [Auth0 SAML SSO](https://www.ory.com/integrations/auth0-saml-sso): Connect Auth0 as a SAML SSO identity provider to Ory
- [Auth0 upstream IdP](https://www.ory.com/integrations/auth0-upstream-idp): Use Auth0 as an upstream OIDC identity provider for Ory
- [AWS API Gateway](https://www.ory.com/integrations/aws-api-gateway): Protect AWS API Gateway routes with Ory authentication
- [AWS infrastructure](https://www.ory.com/integrations/aws-infrastructure): Deploy and run Ory on AWS infrastructure
- [BambooHR](https://www.ory.com/integrations/bamboohr): Sync identities from BambooHR with Ory
- [BankID](https://www.ory.com/integrations/bankid): Add Swedish BankID identity verification to Ory
- [Battle.net](https://www.ory.com/integrations/battle-net): Add Battle.net social sign-in to Ory
- [Brevo](https://www.ory.com/integrations/brevo): Send Ory transactional email via Brevo
- [Castle](https://www.ory.com/integrations/castle-io): Add Castle account-takeover and fraud detection to Ory
- [Clearbit](https://www.ory.com/integrations/clearbit): Enrich Ory identity data with Clearbit
- [Cloudflare Turnstile](https://www.ory.com/integrations/cloudflare-turnstile): Add Cloudflare Turnstile CAPTCHA to Ory flows
- [Cloudflare Workers](https://www.ory.com/integrations/cloudflare-workers): Enforce Ory authentication at the edge with Cloudflare Workers
- [CockroachDB](https://www.ory.com/integrations/cockroach-db): Run Ory on CockroachDB for distributed scale
- [CyberArk Identity](https://www.ory.com/integrations/cyberark-identity): Connect CyberArk Identity as an SSO provider to Ory
- [Datadog](https://www.ory.com/integrations/datadog): Monitor Ory with Datadog observability
- [Didomi](https://www.ory.com/integrations/didomi): Integrate Didomi consent management with Ory
- [DingTalk](https://www.ory.com/integrations/dingtalk): Add DingTalk social sign-in to Ory
- [Discord](https://www.ory.com/integrations/discord): Add Discord social sign-in to Ory
- [Docker](https://www.ory.com/integrations/docker): Run Ory services with Docker
- [Drata](https://www.ory.com/integrations/drata): Automate compliance monitoring for Ory with Drata
- [Duo Security](https://www.ory.com/integrations/duo-security): Add Duo Security MFA to Ory
- [eIDAS](https://www.ory.com/integrations/eidas): Support eIDAS electronic identification with Ory
- [Elastic SIEM](https://www.ory.com/integrations/elastic-siem): Forward Ory security events to Elastic SIEM
- [Entra ID SCIM](https://www.ory.com/integrations/entra-id-scim): Provision identities from Microsoft Entra ID via SCIM to Ory
- [Epic Games](https://www.ory.com/integrations/epic-games): Add Epic Games social sign-in to Ory
- [Equifax](https://www.ory.com/integrations/equifax): Add Equifax identity verification to Ory
- [Facebook Login](https://www.ory.com/integrations/facebook-login): Add Facebook social sign-in to Ory
- [Fastly Compute](https://www.ory.com/integrations/fastly-compute-edge): Enforce Ory authentication at the edge with Fastly Compute
- [ForgeRock Access Management](https://www.ory.com/integrations/forgerock-access-management): Connect ForgeRock Access Management as an SSO provider to Ory
- [Freshdesk](https://www.ory.com/integrations/freshdesk): Connect Ory identities with Freshdesk support
- [FullContact](https://www.ory.com/integrations/fullcontact): Enrich Ory identity data with FullContact
- [GBG Acuant](https://www.ory.com/integrations/gbg-acuant): Add GBG Acuant identity verification to Ory
- [GCP infrastructure](https://www.ory.com/integrations/gcp-infrastructure): Deploy and run Ory on Google Cloud infrastructure
- [Generic OIDC provider](https://www.ory.com/integrations/generic-oidc-provider): Connect any standards-compliant OIDC provider to Ory
- [Generic SAML SP](https://www.ory.com/integrations/generic-saml-sp): Configure Ory as a SAML service provider for any IdP
- [GitHub App authentication](https://www.ory.com/integrations/github-app-authentication): Authenticate as a GitHub App with Ory
- [GitHub Login](https://www.ory.com/integrations/github-login): Add GitHub social sign-in to Ory
- [GitLab](https://www.ory.com/integrations/gitlab): Add GitLab social sign-in to Ory
- [Google Apigee](https://www.ory.com/integrations/google-apigee): Protect Google Apigee API routes with Ory authentication
- [Google reCAPTCHA](https://www.ory.com/integrations/google-recaptcha): Add Google reCAPTCHA to Ory flows
- [Google Workspace directory sync](https://www.ory.com/integrations/google-workspace-directory-sync): Sync users and groups from Google Workspace to Ory
- [Google Workspace SAML SSO](https://www.ory.com/integrations/google-workspace-saml-sso): Connect Google Workspace as a SAML SSO provider to Ory
- [hCaptcha](https://www.ory.com/integrations/hcaptcha): Add hCaptcha to Ory flows
- [Helm charts](https://www.ory.com/integrations/helm-charts): Deploy Ory on Kubernetes with Helm charts
- [HID Global SSO](https://www.ory.com/integrations/hid-global-sso): Connect HID Global as an SSO provider to Ory
- [Hookdeck](https://www.ory.com/integrations/hookdeck): Manage and reliably deliver Ory webhooks with Hookdeck
- [HubSpot](https://www.ory.com/integrations/hubspot): Sync Ory identities to HubSpot CRM
- [IBM Security Verify](https://www.ory.com/integrations/ibm-security-verify): Connect IBM Security Verify as an SSO provider to Ory
- [ID.me](https://www.ory.com/integrations/id-me): Add ID.me identity verification to Ory
- [iDIN](https://www.ory.com/integrations/idin): Add iDIN bank-based identity verification to Ory
- [Intercom](https://www.ory.com/integrations/intercom): Connect Ory identities with Intercom messaging
- [Jumio](https://www.ory.com/integrations/jumio): Add Jumio identity verification and KYC to Ory
- [JumpCloud SCIM](https://www.ory.com/integrations/jumpcloud-scim): Provision identities from JumpCloud via SCIM to Ory
- [JumpCloud SSO](https://www.ory.com/integrations/jumpcloud-sso): Connect JumpCloud as an SSO provider to Ory
- [Kakao](https://www.ory.com/integrations/kakao): Add Kakao social sign-in to Ory
- [Keycloak SSO](https://www.ory.com/integrations/keycloak-sso): Connect Keycloak as an SSO provider to Ory
- [Kong API Gateway](https://www.ory.com/integrations/kong-api-gateway): Protect Kong API Gateway routes with Ory authentication
- [Kubernetes](https://www.ory.com/integrations/kubernetes): Deploy and run Ory on Kubernetes
- [Lark / Feishu](https://www.ory.com/integrations/lark-feishu): Add Lark/Feishu social sign-in to Ory
- [LaunchDarkly](https://www.ory.com/integrations/launchdarkly): Use LaunchDarkly feature flags with Ory
- [LexisNexis](https://www.ory.com/integrations/lexisnexis): Add LexisNexis identity verification to Ory
- [LINE](https://www.ory.com/integrations/line): Add LINE social sign-in to Ory
- [Log in with X](https://www.ory.com/integrations/log-in-with-x): Add X (Twitter) social sign-in to Ory
- [Login with Amazon](https://www.ory.com/integrations/login-with-amazon): Add Login with Amazon social sign-in to Ory
- [Mailchimp Transactional](https://www.ory.com/integrations/mailchimp-transactional): Send Ory transactional email via Mailchimp Transactional (Mandrill)
- [Mailgun](https://www.ory.com/integrations/mailgun): Send Ory transactional email via Mailgun
- [MessageBird](https://www.ory.com/integrations/messagebird): Send Ory SMS and messaging via MessageBird (Bird)
- [Microsoft AD FS SAML SSO](https://www.ory.com/integrations/microsoft-ad-fs-saml-sso): Connect Microsoft AD FS as a SAML SSO provider to Ory
- [Microsoft Azure](https://www.ory.com/integrations/microsoft-azure): Deploy and run Ory on Microsoft Azure
- [Microsoft Dynamics 365](https://www.ory.com/integrations/microsoft-dynamics-365): Sync Ory identities with Microsoft Dynamics 365
- [Microsoft Entra ID](https://www.ory.com/integrations/microsoft-entra-id): Connect Microsoft Entra ID as an SSO provider to Ory
- [Microsoft Sentinel](https://www.ory.com/integrations/microsoft-sentinel): Forward Ory security events to Microsoft Sentinel
- [Mixpanel](https://www.ory.com/integrations/mixpanel): Stream Ory identity events to Mixpanel analytics
- [mParticle](https://www.ory.com/integrations/mparticle): Stream Ory identity events to the mParticle customer data platform
- [Naver](https://www.ory.com/integrations/naver): Add Naver social sign-in to Ory
- [netID](https://www.ory.com/integrations/netid): Add netID social sign-in and verification to Ory
- [New Relic](https://www.ory.com/integrations/new-relic): Monitor Ory with New Relic observability
- [Okta SCIM](https://www.ory.com/integrations/okta-scim): Provision identities from Okta via SCIM to Ory
- [Okta SSO](https://www.ory.com/integrations/okta-sso): Connect Okta as an SSO provider to Ory
- [Okta Verify](https://www.ory.com/integrations/okta-verify): Add Okta Verify MFA to Ory
- [OneLogin SCIM](https://www.ory.com/integrations/onelogin-scim): Provision identities from OneLogin via SCIM to Ory
- [OneLogin SSO](https://www.ory.com/integrations/onelogin-sso): Connect OneLogin as an SSO provider to Ory
- [OneTrust](https://www.ory.com/integrations/onetrust): Integrate OneTrust consent management with Ory
- [Onfido](https://www.ory.com/integrations/onfido): Add Onfido identity verification and KYC to Ory
- [OpenTelemetry](https://www.ory.com/integrations/opentelemetry): Export Ory traces and metrics via OpenTelemetry
- [Osano](https://www.ory.com/integrations/osano): Integrate Osano consent management with Ory
- [Patreon](https://www.ory.com/integrations/patreon): Add Patreon social sign-in to Ory
- [Persona](https://www.ory.com/integrations/persona): Add Persona identity verification to Ory
- [PingOne SSO](https://www.ory.com/integrations/pingone-sso): Connect PingOne as an SSO provider to Ory
- [Pipedrive](https://www.ory.com/integrations/pipedrive): Sync Ory identities to Pipedrive CRM
- [Plivo](https://www.ory.com/integrations/plivo): Send Ory SMS via Plivo
- [Postmark](https://www.ory.com/integrations/postmark): Send Ory transactional email via Postmark
- [Prometheus & Grafana](https://www.ory.com/integrations/prometheus-grafana): Monitor Ory with Prometheus and Grafana
- [Prove](https://www.ory.com/integrations/prove): Add Prove phone-based identity verification to Ory
- [Pulumi provider](https://www.ory.com/integrations/pulumi-provider): Manage Ory configuration as code with Pulumi
- [Recurly](https://www.ory.com/integrations/recurly): Connect Ory identities with Recurly subscriptions
- [Rippling SSO](https://www.ory.com/integrations/rippling-sso): Connect Rippling as an SSO provider to Ory
- [Salesforce CRM](https://www.ory.com/integrations/salesforce-crm): Sync Ory identities to Salesforce CRM
- [Salesforce social sign-on](https://www.ory.com/integrations/salesforce-social-sign-on): Add Salesforce social sign-in to Ory
- [Segment](https://www.ory.com/integrations/segment): Stream Ory identity events to the Segment customer data platform
- [SendGrid](https://www.ory.com/integrations/sendgrid): Send Ory transactional email via Twilio SendGrid
- [Sift](https://www.ory.com/integrations/sift): Add Sift fraud and abuse prevention to Ory
- [Sign in with Apple](https://www.ory.com/integrations/sign-in-with-apple): Add Sign in with Apple to Ory
- [Sign in with Google](https://www.ory.com/integrations/sign-in-with-google): Add Sign in with Google to Ory
- [Sign in with LinkedIn](https://www.ory.com/integrations/sign-in-with-linkedin): Add Sign in with LinkedIn to Ory
- [Sign in with Microsoft](https://www.ory.com/integrations/sign-in-with-microsoft): Add Sign in with Microsoft to Ory
- [Sign in with Slack](https://www.ory.com/integrations/sign-in-with-slack): Add Sign in with Slack to Ory
- [Sinch](https://www.ory.com/integrations/sinch): Send Ory SMS and messaging via Sinch
- [Skyfire](https://www.ory.com/integrations/skyfire): Issue and verify identities for AI agents with Skyfire and Ory
- [Socure](https://www.ory.com/integrations/socure): Add Socure identity verification and KYC to Ory
- [SparkPost](https://www.ory.com/integrations/sparkpost): Send Ory transactional email via SparkPost
- [Split](https://www.ory.com/integrations/split-io): Use Split feature flags with Ory
- [Splunk](https://www.ory.com/integrations/splunk): Forward Ory security events to Splunk
- [Spotify](https://www.ory.com/integrations/spotify): Add Spotify social sign-in to Ory
- [Steam](https://www.ory.com/integrations/steam): Add Steam social sign-in to Ory
- [Stripe](https://www.ory.com/integrations/stripe): Connect Ory identities with Stripe billing
- [Sumo Logic](https://www.ory.com/integrations/sumo-logic): Forward Ory logs and security events to Sumo Logic
- [Svix](https://www.ory.com/integrations/svix): Send and manage Ory webhooks with Svix
- [Telegram Login](https://www.ory.com/integrations/telegram-login): Add Telegram login to Ory
- [Terraform provider](https://www.ory.com/integrations/terraform-provider): Manage Ory configuration as code with Terraform
- [TikTok](https://www.ory.com/integrations/tiktok): Add TikTok social sign-in to Ory
- [Traefik proxy](https://www.ory.com/integrations/traefik-proxy): Protect Traefik proxy routes with Ory authentication
- [Twilio](https://www.ory.com/integrations/twilio): Send Ory SMS and messaging via Twilio
- [Twitch](https://www.ory.com/integrations/twitch): Add Twitch social sign-in to Ory
- [UAE PASS](https://www.ory.com/integrations/uae-pass): Add UAE PASS national digital identity to Ory
- [Vanta](https://www.ory.com/integrations/vanta): Automate compliance monitoring for Ory with Vanta
- [VKontakte](https://www.ory.com/integrations/vkontakte): Add VKontakte (VK) social sign-in to Ory
- [Vonage](https://www.ory.com/integrations/vonage): Send Ory SMS and messaging via Vonage
- [WeChat](https://www.ory.com/integrations/wechat): Add WeChat social sign-in to Ory
- [WhatsApp Business](https://www.ory.com/integrations/whatsapp-business): Send Ory messages via WhatsApp Business
- [Workday SCIM](https://www.ory.com/integrations/workday-scim): Provision identities from Workday via SCIM to Ory
- [Yandex](https://www.ory.com/integrations/yandex): Add Yandex social sign-in to Ory
- [YubiKey](https://www.ory.com/integrations/yubikey): Add YubiKey hardware-token MFA to Ory
- [Zendesk](https://www.ory.com/integrations/zendesk): Connect Ory identities with Zendesk support
- [Zoho CRM](https://www.ory.com/integrations/zoho-crm): Sync Ory identities to Zoho CRM
- [ZoomInfo](https://www.ory.com/integrations/zoominfo): Enrich Ory identity data with ZoomInfo

## Case Studies

- [commercetools](https://www.ory.com/case-studies/commercetools): Global B2B commerce platform chose Ory's headless, multi-region platform for mission-critical identity
- [Moonpig](https://www.ory.com/case-studies/moonpig): UK gifting platform eliminated login friction and improved customer conversion with Ory CIAM
- [DataRobot](https://www.ory.com/case-studies/datarobot): AI platform accelerated service integration from weeks to minutes and fortified security with Ory
- [North One](https://www.ory.com/case-studies/northone): US business banking platform gained CIAM control, security, and reliability with Ory Network
- [Hemnet](https://www.ory.com/case-studies/hemnet): Sweden's top property platform transformed CIAM and scaled user experience with Ory
- [Macromill](https://www.ory.com/case-studies/macromill): Market research group modernized CIAM and gained full control over identity login
- [Axel Springer](https://www.ory.com/case-studies/axel-springer): Europe's largest digital media publisher streamlined CIAM and scalability with Ory
- [OpenAI](https://www.ory.com/case-studies/openai): OpenAI leverages Ory Hydra to support hundreds of millions of weekly active users
- [Lumin](https://www.ory.com/case-studies/lumin): Document management platform protects user data with Ory
- [Sencrop](https://www.ory.com/case-studies/sencrop): Agricultural IoT company migrated from Auth0 to Ory for future-proof authentication
- [Fandom](https://www.ory.com/case-studies/fandom): Entertainment wiki platform secured authentication for tens of millions of users
- [Maxroll](https://www.ory.com/case-studies/maxroll): Gaming guides platform chose Ory Network for secure, scalable, and affordable authentication
- [Effortless Solutions](https://www.ory.com/case-studies/effortless-solutions): Software consultancy achieved seamless integration with Ory
- [HGV](https://www.ory.com/case-studies/hgv): Tourism organization migrated from Azure AD to Ory Network for reliability
- [zezam](https://www.ory.com/case-studies/zezam): Creator platform leveraged Ory for secure and scalable social logins
- [OSINT Industries](https://www.ory.com/case-studies/osint): Cybersecurity company chose Ory for swift migration, developer experience, and cost savings

## Blog

- [Ory Agent Security: See and control what your AI agents do](https://www.ory.com/blog/agent-security-see-and-control-what-your-ai-agents-do): Launch of Ory Agent Security, providing authentication, authorization, and audit for AI coding agents
- [Ory is now PCI DSS Compliant: What It Means for You](https://www.ory.com/blog/ory-pci-dss-compliance-what-it-means): What PCI DSS compliance means for Ory customers
- [Ory Launches 'Ory Talos' to Lock Down AI Agents and Non-Human Identities](https://www.ory.com/blog/ory-launches-ory-talos): Launch of Ory Talos, replacing static API keys with dynamic, revocable, least-privilege credentials
- [Ory Achieves PCI DSS Compliance](https://www.ory.com/blog/ory-achieves-pci-dss-compliance): PCI DSS compliance announcement reinforcing enterprise security and trust
- [Rushing Into Agentic AI: The Legacy IAM Bottleneck in Finance](https://www.ory.com/blog/rushing-into-agentic-finance): How legacy IAM slows agentic AI adoption in financial services
- [Ory Corp Taps Greg Vesper as Chief Product Officer](https://www.ory.com/blog/greg-vesper-announcement): CPO hire to secure AI agent deployments
- [Security as Our Fabric: Ory Achieves ISO/IEC 27001:2022 Recertification](https://www.ory.com/blog/ory-iso27001-recertification-security-fabric): ISO/IEC 27001:2022 recertification announcement
- [aDAU vs MAU: Comparing Pricing Models for Identity Infrastructure](https://www.ory.com/blog/mau-vs-adau-identity-pricing-compared): How aDAU pricing compares to MAU for identity infrastructure
- [Agentic AI is already in production. Identity and access controls are not.](https://www.ory.com/blog/how-to-visualize-and-test-ory-keto-permission-models): Visualizing and testing Ory Keto permission models for agentic workloads
- [Anthropic's Mythos AI Model Pause Is a Warning Shot](https://www.ory.com/blog/anthropic-mythos-iam-identity-security-risk): What an AI model rollout pause signals for identity security risk
- [Ory Passes 2.5 Billion Identities Managed](https://www.ory.com/blog/announcement-2.5billion-identities): Milestone of 2.5 billion managed identities across Ory deployments
- [Agentic security is an IAM problem in disguise](https://www.ory.com/blog/securing-agentic-apps-iam-problem): Why securing agentic applications reduces to identity and access management
- [Maestro please... the engineer as the conductor of the orchestra](https://www.ory.com/blog/engineers-as-conductors-ai-agent-orchestration): Engineers orchestrating AI agents
- [Make Claude Code faster and cheaper with Ory Lumen](https://www.ory.com/blog/ory-lumen-semantic-search-claude-code): Ory Lumen semantic search for AI coding tools
- [Top 5 CIAM trends in 2026](https://www.ory.com/blog/top-5-ciam-trends-2026): Agentic AI, passkeys, and emerging identity trends
- [The Hidden Cost of Agentic Coding](https://www.ory.com/blog/hidden-cost-agentic-coding): Cost analysis of AI-assisted development
- [Why It's Time to Move Beyond Homegrown IAM](https://www.ory.com/blog/beyond-homegrown-iam): Case for replacing custom-built identity systems
- [Beyond the Login Box](https://www.ory.com/blog/beyond-the-login-box): How OpenAI, Axel Springer, and Fandom redefine identity at scale
- [Identity that fits today, and tomorrow: Right-sizing for financial services](https://www.ory.com/blog/identity-that-fits-today-and-tomorrow-for-financial-services): Identity infrastructure for financial services
- [Making Every Moment Matter: How Moonpig Mastered Customer Conversion with Ory](https://www.ory.com/blog/how-moonpig-mastered-customer-conversions): Moonpig's conversion optimization with Ory CIAM
- [From Buffering Wheels to Billions of Streams](https://www.ory.com/blog/buffering-wheels-to-billions-of-streams): What agentic AI teaches about scaling identity
- [Who is your AI agent acting as?](https://www.ory.com/blog/agentic-ai-identity-and-access): The identity question for AI agents and MCP
- [The Rise of the AI Coworker and Why Your Security Isn't Ready](https://www.ory.com/blog/ai-agents-your-security-is-not-ready): Security implications of AI agents in the workplace
- [Ory Partners with HID](https://www.ory.com/blog/partnership-announcement-hid): First enterprise FIDO2 identity platform for converged physical and digital access
- [Managing Agentic Identities at Scale](https://www.ory.com/blog/managing-agentic-at-scale): Managing 10,000 to 1,000,000 AI agent identities
- [The control plane shift: What we saw at AWS re:Invent 2025](https://www.ory.com/blog/control-plane-shift-aws-reinvent-2025): Identity trends from AWS re:Invent
- [Stop Impersonating Your Users](https://www.ory.com/blog/identity-level-impersonation): Why identity-level impersonation is dangerous and alternatives
- [The next scale frontier: Ory and Cockroach Labs](https://www.ory.com/blog/next-scale-frontier-agentic-scale-ory-crdb): Partnership for distributed identity infrastructure for agentic AI
- [Don't Build Your Own Auth](https://www.ory.com/blog/do-not-build-your-own-auth): Why building custom authentication is risky
- [Ory OSS v25.4.0 launch recap](https://www.ory.com/blog/ory-oss-v-25-4-0-launch-recap): Recap of the v25.4.0 open-source release across the Ory ecosystem
- [Ory Keto & Oathkeeper v25.4.0](https://www.ory.com/blog/new-ory-keto-ory-oathkeeper-v-25-v-4-0-improves-security-observability-ecosystem-consistency): Security and observability upgrades for Keto and Oathkeeper
- [Ory Kratos v25.4.0 enhances passwordless, Passkeys, and performance](https://www.ory.com/blog/new-ory-kratos-v-25-4-0-open-source-launch-passwordless-sms-login-android-webauthn-passkeys): Passwordless SMS login, Android WebAuthn, and passkey improvements
- [New Ory Hydra v25.4.0 brings agentic authentication](https://www.ory.com/blog/new-ory-hydra-v-25-4-0-open-source-launch-oauth2-agentic-authentication): OAuth2 agentic authentication for modern apps and devices
- [Announcing Ory OSS v25.4.0](https://www.ory.com/blog/ory-oss-v25-4-0-new-release-announcement-versioning-scheme): New unified versioning scheme across the Ory ecosystem
- [Parlez-vous password?](https://www.ory.com/blog/parlez-vous-password): Password security across languages and regions
- [10 Practical Steps to Identity Resilience](https://www.ory.com/blog/steps-to-identity-resilience): Practical guidance for building resilient identity infrastructure
- [The China Hack and the New Front Line](https://www.ory.com/blog/the-china-hack): Why identity is the only security perimeter left
- [WebAuthn & Passkeys demystified](https://www.ory.com/blog/webauthn-passkeys-demystified-passwordless-login-ory): Secure passwordless login with Ory
- [From Friction to Flow: How FedCM Drove a 15x Surge in User Sign-ups](https://www.ory.com/blog/from-friction-to-flow-fedcm): FedCM adoption results for a major publisher
- [AI Agents are the New Customer: Is Your Authentication Ready?](https://www.ory.com/blog/ai-customer-agents-are-you-authentication-ready): Preparing authentication for AI agents as customers
- [Digital Identity is the Next Frontier for AI Agents](https://www.ory.com/blog/next-frontier-for-ai-agents): Why AI agents need identity infrastructure
- [Meeting the World's Standards: Ory and Global Compliance Readiness](https://www.ory.com/blog/meeting-the-worlds-standards-ory-and-global-compliance-readiness): Ory's global compliance posture
- [Security without the hassle: The power of adaptive authentication](https://www.ory.com/blog/adaptive-authentication): Adaptive authentication concepts and benefits
- [Auth0 Migration: Your Best Practices Guide](https://www.ory.com/blog/auth0-migration-guide): Best practices for migrating from Auth0
- [Is Ping Identity still a leader in IAM?](https://www.ory.com/blog/ping-identity-alternatives): Evaluating Ping Identity and alternatives
- [Skyfire: Identity foundation for AI agentic autonomy](https://www.ory.com/blog/autonomous-commerce-agentic-ai-identity-skyfire-ory): Partnership enabling AI agents as economic participants
- [Beyond code: Why Ory's exceptional support is part of your cybersecurity defense](https://www.ory.com/blog/ory-support): How Ory support strengthens security posture
- [What's wrong with legacy CIAM solutions?](https://www.ory.com/blog/whats-wrong-with-ciam): Survey of why organizations seek modern CIAM
- [When to use OAuth2: Scaling auth for the enterprise](https://www.ory.com/blog/when-to-use-oauth2-scaling-enterprise-authentication-and-authorization): When OAuth2 fits enterprise authentication and authorization
- [Auth & the rise of departmental LLMs](https://www.ory.com/blog/auth-and-the-rise-of-departmental-llms): How enterprises will deploy AI like financial, HR, and CRM systems
- [When Your AI Intern Drops the Database](https://www.ory.com/blog/ai-agent-lessons): A cautionary tale of agent access gone wild
- [The modern CIAM migration: Why enterprises are abandoning Auth0 for Ory](https://www.ory.com/blog/modern-ciam-migration-why-enterprises-are-abandoning-auth0-for-ory): Drivers behind enterprise Auth0-to-Ory migrations
- [Why SAML SSO is non-negotiable for modern B2B SaaS apps](https://www.ory.com/blog/why-saml-sso-is-non-negotiable-for-modern-b2b-saas-apps): The business case for SAML SSO in B2B SaaS
- [The race to modern authentication: Why early FedCM adoption matters](https://www.ory.com/blog/fedcm-adoption-matters): Benefits of early FedCM adoption
- [What is FedCM? A guide to Federated Credential Management](https://www.ory.com/blog/what-is-fedcm): Introduction to the FedCM browser API
- [Passkeys, WebAuthn & Ory: Future-proofing user authentication](https://www.ory.com/blog/breach-passkeys): Authentication hardening in the wake of a massive credential breach
- [Securing AI agents with Ory Hydra and MCP: A complete integration guide](https://www.ory.com/blog/mcp-server-oauth-with-ory-hydra-authentication-ai-agent-integration-guide): Step-by-step MCP server OAuth integration with Ory Hydra
- [Cloudflare, please don't vibe code your own crypto](https://www.ory.com/blog/cloudflare-please-dont-vibe-code-your-own-crypto): Risks of AI-generated cryptographic code
- [AI agents and the identity crisis: What Napster can teach us](https://www.ory.com/blog/ai-agents-and-the-identity-crisis-content-economy): Lessons from the content economy for AI agent access
- [Enabling the agentic economy with Ory & Skyfire](https://www.ory.com/blog/enabling-the-agentic-economy-with-ory-and-skyfire): Standards-based identity and payments for autonomous agents
- [The future of Identity: How Ory and Cockroach Labs are building infrastructure for agentic AI](https://www.ory.com/blog/the-future-of-identity-ory-and-cockroach-labs-iam-for-agentic-ai): Distributed IAM infrastructure partnership
- [How a redirect broke login with Apple for a full day](https://www.ory.com/blog/apple-sign-in-incident-issuer): Unannounced redirect change that broke OIDC flows
- [Ory powers logins for some of the world's most visited websites](https://www.ory.com/blog/ory-powers-logins-most-visited-websites): Scale of Ory-powered authentication
- [Everything you need to know about secure account linking](https://www.ory.com/blog/secure-account-linking-iam-sso-oidc-saml): Account linking across SSO, OIDC, and SAML
- [Ory Acquires BoxyHQ: Introducing Ory Polis for Enterprise Single-Sign On](https://www.ory.com/blog/introducing-ory-polis-for-enterprise-single-sign-on): SAML, OIDC, and SCIM for B2B and B2B2C use cases
- [Ory + MCP: How to secure your MCP servers with OAuth2.1](https://www.ory.com/blog/agentic-ai-security-mcp-oauth): Securing MCP servers with OAuth 2.1
- [Beyond build vs buy: A flexible approach to IAM](https://www.ory.com/blog/buy-or-build): A third option between building and buying identity infrastructure
- [Back to the future: Security regression in crowd-sourced software](https://www.ory.com/blog/security-regression-in-crowdsourced-software): How user behavior around crowd-sourced software reverses security progress
- [Secure authentication in Next.js: Best practices & implementation](https://www.ory.com/blog/add-auth-to-nextjs-security-best-practices): Adding authentication to Next.js securely
- [Bad robot: What makes agentic AI good vs. bad?](https://www.ory.com/blog/bad-robot-what-makes-agentic-ai-good-vs-bad): Distinguishing beneficial from harmful AI agents
- [CIAM vs IAM](https://www.ory.com/blog/ciam-vs-iam): Differences between customer and workforce identity management
- [Tips for successful CIAM strategies](https://www.ory.com/blog/ciam-strategy): Practical CIAM strategy guidance
- [What is CIAM and why does it matter?](https://www.ory.com/blog/what-is-ciam): Introduction to customer identity and access management
- [OpenAI overcomes explosive growth challenges with next-gen CIAM](https://www.ory.com/blog/openai-overcomes-explosive-growth-challenges): How OpenAI scaled identity through explosive growth
- [OpenAI uses open source Ory to authenticate over 400M weekly active users](https://www.ory.com/blog/openai-oauth2-server-open-source): How Ory Hydra scaled to power OpenAI's OAuth2 infrastructure
- [Security update: Addressing XML signature verification vulnerabilities](https://www.ory.com/blog/security-update-addressing-xml-signature-verification-vulnerabilities): XML signature vulnerability remediation in Polis
- [Why you probably do not need OAuth2 / OpenID Connect](https://www.ory.com/blog/oauth2-openid-connect-do-you-need-use-cases-examples): When OAuth2/OIDC is the wrong tool
- [Ory Enterprise License behind the scenes](https://www.ory.com/blog/ory-enterprise-license-behind-scenes): Interview on OEL features, architecture, and use cases
- [The perils of caching keys in IAM](https://www.ory.com/blog/perils-of-caching-in-iam): Security risks of key caching in identity systems
- [Ory welcomes Justin Dolly and launches Ory Enterprise License](https://www.ory.com/blog/ory-launches-self-hosted-ory-enterprise-license-offering): OEL launch announcement and leadership hires
- [Securing AI and LLM: The critical role of access controls](https://www.ory.com/blog/securing-ai-and-llm-critical-role-of-access-controls): Access control patterns for AI and LLM systems
- [Understanding prompt injection](https://www.ory.com/blog/understanding-prompt-injection-a-growing-concern-in-ai-and-llm): A growing concern in AI and LLM security
- [What is a SaaS starter kit? 5 things to consider](https://www.ory.com/blog/what-is-saas-starter-kit-5-things-to-consider-before-choosing-one): Choosing a SaaS starter kit
- [Personal data storage with Ory Network](https://www.ory.com/blog/personal-data-storage): How Ory Network stores and protects personal data
- [AI audit logs: The secret weapon to enhance enterprise security](https://www.ory.com/blog/ai-audit-logs-the-secret-weapon-to-enhance-enterprise-security): Audit logging for AI systems
- [Protect your data from LLMs](https://www.ory.com/blog/protect-your-data-from-llms-mitigating-ai-risks-effectively): Mitigating AI data exposure risks
- [A new chapter in IAM innovation](https://www.ory.com/blog/a-new-chapter-in-iam): Leadership perspective on Ory's IAM direction
- [Deploying Ory Oathkeeper as an AWS Lambda Authorizer](https://www.ory.com/blog/deploying-ory-oathkeeper-aws-lambda): Running Oathkeeper in AWS Lambda
- [Ory Corp taps new CEO and raises $5 million in Series A extension](https://www.ory.com/blog/series-a-extension): CEO appointment and funding extension
- [Simplifying identity management: The power of identity federation](https://www.ory.com/blog/simplifying-identity-management-power-of-identity-federation): Identity federation concepts and benefits
- [Ory Network or self-hosted?](https://www.ory.com/blog/ory-network-or-self-hosting-explained-use-cases): Choosing between managed and self-hosted deployment
- [How Effortless Solutions managed multi-tiered client needs with Ory SSO](https://www.ory.com/blog/how-effortless-solutions-managed-multi-tiered-client-needs-with-ory-sso): Multi-tiered client SSO with Ory Polis
- [The build vs buy conundrum](https://www.ory.com/blog/build-vs-buy-conundrum-identity-access-and-identity-federation-solutions): Identity, access, and federation build-versus-buy analysis
- [Ory Network Workspaces and fair pricing with aDAU](https://www.ory.com/blog/ory-price-2024-dau-mau): aDAU pricing model explained, workspace-based billing
- [Run your own OAuth2 Server](https://www.ory.com/blog/run-oauth2-server-open-source-api-security): Self-hosting an open-source OAuth2 server
- [Achieving seamless SSO integration: Why BlockSurvey selected Ory](https://www.ory.com/blog/achieving-seamless-sso-integration-why-blocksurvey-selected-ory): BlockSurvey's SSO integration with Ory Polis
- [A secure, privacy-first AI-driven data collection platform: BlockSurvey](https://www.ory.com/blog/a-secure-privacy-first-ai-driven-data-collection-platform-blocksurvey): BlockSurvey's privacy-first platform built on Ory
- [Leveraging Ory's open-source SSO for greater market reach: MonkeyFit](https://www.ory.com/blog/leveraging-ory-open-source-sso-for-greater-market-reach-and-compliance-monkeyfit): MonkeyFit's open-source SSO adoption
- [Elevating LATAM Security Standards: The MonkeyFit - Ory Success Story](https://www.ory.com/blog/elevating-latam-security-standards-the-monkeyfit-ory-success-story): MonkeyFit's security improvements with Ory
- [SSO vs. Identity Federation](https://www.ory.com/blog/sso-vs-identity-federation-optimizing-authentication-for-modern-enterprises): Optimizing authentication for modern enterprises
- [What is SAML and why you should care](https://www.ory.com/blog/what-is-saml-and-why-you-should-care): SAML fundamentals
- [Unlocking efficiency with Enterprise SSO: A Unosecur case study](https://www.ory.com/blog/unlocking-efficiency-with-enterprise-sso-a-unosecur-case-study): Unosecur's enterprise SSO rollout
- [How Ory's Solutions Drive Business Efficiency And Security: Unosecur](https://www.ory.com/blog/how-ory-solutions-drive-business-efficiency-and-security-unosecur): Unosecur's efficiency and security gains with Ory
- [Ory Summit 2023 retrospective](https://www.ory.com/blog/ory-summit-2023-retrospective): Navigating the future of Ory, identity, and access management
- [Ory Polis 2024 Changelog](https://www.ory.com/blog/changelog-saml-jackson-2024): SSO, directory sync, and audit log updates
- [Ory Polis 2023 Changelog](https://www.ory.com/blog/changelog-saml-jackson-2023): SAML Federation, directory sync, and SSO updates
- [2023 year in review](https://www.ory.com/blog/2023-year-in-review): Progress and challenges in securing the web ecosystem in 2023
- [Unlocking business growth: A conversation with Dub's founder](https://www.ory.com/blog/unlocking-business-growth-a-conversations-with-dubs-founder): Founder interview on growth with Ory SSO
- [Safeguarding Trust: Ory SSO Enhances Dub's Security](https://www.ory.com/blog/safeguarding-trust-ory-sso-enhances-dubs-security): Dub's security improvements with Ory SSO
- [SSO & Audit Logs Accelerate Unicis Towards SOC2 Compliance](https://www.ory.com/blog/orys-sso-and-audit-logs-accelerate-unicis-towards-soc2-compliance): Unicis's SOC2 path with Ory SSO and audit logs
- [Unicis.Tech unlocks security: A conversation with the founder](https://www.ory.com/blog/unicis-tech-unlocks-security-with-ory-a-conversation-with-the-founder): Founder interview on security with Ory
- [Ory Network is now SOC 2 Type 2 certified](https://www.ory.com/blog/ory-network-soc2-type-2-certified): SOC 2 Type 2 audit completion
- [Boosting trust and efficiency: A conversation with Supademo's CEO](https://www.ory.com/blog/boosting-trust-and-efficiency-a-conversations-with-supademos-ceo): CEO interview on trust and efficiency with Ory
- [Cost-Efficiency Unleashed: How we saved Supademo Time and Money](https://www.ory.com/blog/cost-efficiency-unleashed-how-ory-sso-saved-supademo-time-and-money): Supademo's cost savings with Ory SSO
- [Navigating the open source landscape: Finding your first contribution](https://www.ory.com/blog/navigating-the-open-source-landscape-finding-your-first-contribution): Getting started with open-source contributions
- [Why is it difficult and costly to run a user identity and access management solution yourself](https://www.ory.com/blog/dont-run-a-user-identity-and-access-management-solution-yourself): The hidden costs of running IAM in-house
- [Interview with Cal.com](https://www.ory.com/blog/interview-with-calcom-enhancing-enterprise-experience-with-ory): How Cal.com uses Ory Polis for enterprise SSO
- [Cal.com accelerates enterprise deals and conversion rates with SSO](https://www.ory.com/blog/accelerating-enterprise-deals-and-conversion-rates-at-calcom-ory-sso-solution): Cal.com's enterprise SSO results
- [Transforming security and access: A conversation with the Spike Team](https://www.ory.com/blog/transforming-security-and-access-with-ory-sso-solution-a-conversation-with-the-spike-team): Spike team interview on Ory SSO
- [Spike Boosts Time-to-Market and Enterprise Security](https://www.ory.com/blog/spike-boosts-time-to-market-and-enterprise-security-with-orys-sso-solution): Spike's time-to-market gains with Ory SSO
- [Open Source support policy](https://www.ory.com/blog/ory-support-code-of-conduct-2023): Formalized community support policy for Ory OSS
- [Why build a globally distributed, multi-region identity and access platform](https://www.ory.com/blog/global-identity-and-access-management-multi-region): Architecture rationale for multi-region IAM
- [Run your enterprise ready SSO server in minutes](https://www.ory.com/blog/run-sso-oauth2-enterprise-server-open-source): Quickstart for an enterprise-ready SSO server
- [Scaling Ory Hydra to ~2bn monthly OAuth2 flows on a single PostgreSQL DB](https://www.ory.com/blog/oauth2-oidc-server-performance-tuning-scale): Hydra performance tuning at scale
- [Ory — The must-have for your startup's next enterprise customer](https://www.ory.com/blog/ory-the-must-have-for-your-startups-next-enterprise-customer): Enterprise readiness for startups
- [Introducing the all-new Ory Console](https://www.ory.com/blog/console-v2): Redesigned administration UI with stats and metrics
- [Introducing Ory Kratos v1.0](https://www.ory.com/blog/ory-kratos-v1): Major release of the identity and user management system
- [Boosting performance and scalability with Ory Network Edge Sessions](https://www.ory.com/blog/edge-sessions): Edge session architecture for low-latency session checks
- [The new era of application security](https://www.ory.com/blog/the-new-era-of-application-security-security-building-blocks-for-developers): Security building blocks for developers
- [Ignite Your SaaS Journey with the best free and open-source SaaS starter kit](https://www.ory.com/blog/ignite-your-saas-journey-with-the-best-free-and-open-source-saas-starter-kit): Open-source SaaS starter kit overview
- [How businesses can prevent disaster with breached password detection](https://www.ory.com/blog/breached-password-detection): Breached password detection in Ory Network
- [Build enterprise software with no-code thanks to Bubble.io](https://www.ory.com/blog/build-enterprise-software-with-no-code-thanks-to-bubble-io): No-code enterprise software with Bubble.io and Ory
- [Hop-by-hop header vulnerability in Go Standard Library Reverse Proxy](https://www.ory.com/blog/hop-by-hop-header-vulnerability-go-standard-library-reverse-proxy): Vulnerability analysis in Go's reverse proxy
- [Ory Network is now ISO 27001 certified](https://www.ory.com/blog/ory-iso27001-certified): ISO 27001 certification announcement
- [SSO "Wall of Shame" vs "Wall of Fame"](https://www.ory.com/blog/sso-wall-of-shame-vs-wall-of-fame): SSO pricing practices in SaaS
- [SBOM Explained: An enterprise guide to security risk management](https://www.ory.com/blog/sbom-explained-an-enterprise-guide-to-security-risk-management): Software bill of materials fundamentals
- [Exploring the open-source business model](https://www.ory.com/blog/exploring-the-open-source-business-model-and-how-companies-monetize-it): How companies monetize open source
- [Using Ory with Cloudflare workers](https://www.ory.com/blog/use-ory-with-cloudflare-workers): Integrating Ory with Cloudflare Workers
- [Login and authentication in 2023 explained](https://www.ory.com/blog/overview-login-password-passkey-webauthn-totp-sso-faceid): Passkeys, Google Authenticator, TouchID, and more
- [Modernize your customer interface while reducing costs: Replace Auth0 with Ory](https://www.ory.com/blog/auth0-alternative-open-source-free-pricing): Auth0 alternative comparison
- [Why does your SaaS application need audit logs?](https://www.ory.com/blog/why-does-your-saas-application-need-audit-logs): Audit logging for SaaS applications
- [What is the Ory Permission Language](https://www.ory.com/blog/what-is-the-ory-permission-language): Introduction to OPL
- [Upgrade to Ory SDKs v1.0](https://www.ory.com/blog/announcing-ory-v1-sdk): SDK v1.0 migration guidance
- [Say hello to Ory Elements](https://www.ory.com/blog/elements-component-library): Launch of the Ory Elements UI component library
- [Introducing the Ory Network](https://www.ory.com/blog/introducing-the-ory-network): Launch of the managed Ory Network
- [Ory Hydra 2.0 is out](https://www.ory.com/blog/oauth2-server-openid-ory-hydra-v2): Major OAuth2/OIDC server release
- [How low-code solutions are changing how we build products and workflows](https://www.ory.com/blog/how-low-code-solutions-are-changing-how-we-build-products-and-workflows): Low-code development trends
- [What is DevOps and how has it evolved into DevSecOps](https://www.ory.com/blog/what-is-dev-ops-and-how-has-it-evolved-into-dev-sec-ops): DevOps to DevSecOps evolution
- [SSO Building blocks - SAML, OAuth 2.0 and OpenID Connect](https://www.ory.com/blog/sso-building-blocks): Protocol foundations of single sign-on
- [Enterprise-ready SaaS starter kit](https://www.ory.com/blog/enterprise-ready-saas-starter-kit): SaaS starter kit with enterprise features
- [Custom email templates with Ory](https://www.ory.com/blog/custom-email-templates): Customizing transactional email templates
- [Understanding SCIM and Directory Sync](https://www.ory.com/blog/understanding-scim-and-directory-sync): SCIM protocol and directory synchronization basics
- [Developer-first Security sucks! Why is it essential to automate product security?](https://www.ory.com/blog/developer-first-security-sucks-automate-product-security): Automating product security
- [Common attack vectors for authentication service](https://www.ory.com/blog/common-authentication-attack-vectors): Authentication attack patterns and defenses
- [Be enterprise-ready: Three reasons not to build enterprise features](https://www.ory.com/blog/three-reasons-not-to-build-enterprise-features): Why buying enterprise features beats building
- [Understanding SAML SSO, the basics from the solution provider's side](https://www.ory.com/blog/understanding-saml-sso-the-basics-from-the-solution-providers-side): SAML SSO from the provider's perspective
- [Understanding SAML SSO, the basics from the user side](https://www.ory.com/blog/understanding-saml-sso-the-basics-from-the-user-side): SAML SSO from the user's perspective
- [How and why TIER IV replaced IdentityServer with Ory](https://www.ory.com/blog/case-study-identityserver-alternative-open-source): IdentityServer to Ory Hydra migration
- [Add authentication to your Django application](https://www.ory.com/blog/secure-django-app-using-ory): Django authentication with Ory
- [How Ory helps Lumin protect their users' data](https://www.ory.com/blog/ory-helps-lumin-protect-data): Lumin's data protection with Ory
- [Learn how we built a sharing platform using Ory and Kubernetes](https://www.ory.com/blog/student-sharing-platform-open-source-auth): Student sharing platform built with Ory
- [Secure microservices with Kong and Ory](https://www.ory.com/blog/zero-trust-api-security-ory-tutorial): Zero-trust API security tutorial
- [Understanding auth and its usage in modern software](https://www.ory.com/blog/auth-and-modern-software): Authentication and authorization fundamentals
- [Benchmarking fluent-bit with Clickhouse](https://www.ory.com/blog/benchmarking-fluentbit-with-clickhouse): Log pipeline benchmarking
- [Building a Slack bot using the Events API](https://www.ory.com/blog/building-slack-bot-using-slack-events-api): Slack bot development guide
- [How early-stage startups should sell to enterprises](https://www.ory.com/blog/how-early-stage-startups-should-sell-to-enterprises): Enterprise sales for startups
- [How I built LoginWithHN using Ory Hydra](https://www.ory.com/blog/how-to-build-login-with-hacker-news): Building a Hacker News login provider
- [Add authentication to your Flutter web applications with Ory Kratos](https://www.ory.com/blog/login-flutter-authentication-example-api-open-source): Flutter authentication example
- [Securing your Flask application using Kratos and Keto](https://www.ory.com/blog/securing-flask-application-using-kratos-and-keto): Flask authentication and authorization example
- [How to secure your Ory Network account with YubiKey](https://www.ory.com/blog/hardware-token-mfa-authentication-for-ory-cloud-accounts): Hardware token MFA for Ory accounts
- [OAuth2.0 APIs for Ory Network on the horizon](https://www.ory.com/blog/oauth2-api-ory-cloud-update): OAuth2 API preview for Ory Network
- [How to bootstrap your first developer conference](https://www.ory.com/blog/digital-developer-conference-guide-tips): Guide to organizing developer conferences
- [Ory lands $22.5M Series A funding](https://www.ory.com/blog/ory-series-a-funding-update): Series A led by Insight Partners
- [Securing the open source supply chain](https://www.ory.com/blog/sustainable-open-source-software-supply-chain-maintainer): Sustainable open-source maintenance
- [The Ory Manifesto](https://www.ory.com/blog/ory-manifesto): Ory's founding principles
- [Add custom login, registration, user settings to your Next.js & React SPA](https://www.ory.com/blog/nextjs-authentication-spa-custom-flows-open-source): Custom self-service flows for Next.js
- [The IKEA effect in software engineering](https://www.ory.com/blog/the-ikea-effect-in-software-engineering): Why teams overvalue self-built software
- [Add authentication to your Next.js / React single page application](https://www.ory.com/blog/login-spa-react-nextjs-authentication-example-api-open-source): Next.js SPA authentication example
- [E-commerce with Ory part 1: Backend example](https://www.ory.com/blog/cloud-ecommerce-backend): E-commerce backend with Ory
- [E-commerce with Ory Part 2: Frontend example](https://www.ory.com/blog/cloud-ecommerce-frontend): E-commerce frontend with Ory
- [Enterprise readiness made simple](https://www.ory.com/blog/enterprise-readiness-made-simple): Enterprise feature readiness for SaaS
- [Add authentication to your React Native app](https://www.ory.com/blog/login-react-native-authentication-example-api): React Native authentication example
- [Looking at Zanzibar through Ory Keto](https://www.ory.com/blog/looking-at-keto): Google Zanzibar concepts in Keto
- [The evolution of Ory Keto: A global scale authorization system](https://www.ory.com/blog/keto-zanzibar-evolution): Keto's architectural evolution
- [Keeping Covid19 in check with Ory Dockertest](https://www.ory.com/blog/dockertest-gaen-google-apple-exposure-notification-covid-19): Dockertest in exposure notification infrastructure
- [Choose Argon2 parameters for secure password hashing and login](https://www.ory.com/blog/choose-recommended-argon2-parameters-password-hashing): Argon2 parameter selection guide
- [Deploy Ory Kratos with Knative and Kubernetes in Minikube](https://www.ory.com/blog/kratos-knative-demo): Kratos on Knative demo
- [Ory and modern application architecture](https://www.ory.com/blog/modern-application-architecture): Ory's fit in modern architectures
- [Write better migrations with SQL tests](https://www.ory.com/blog/testing-sql-migrations): Testing SQL migrations
- [Ory Hydra v1.0 is here!](https://www.ory.com/blog/hydra-v1-stable-release): Hydra v1.0 stable release
- [OAuth2 with PKCE for mobile apps and single page apps](https://www.ory.com/blog/oauth2-for-mobile-app-spa-browser): PKCE flow for public clients
- [Impersonating users by abusing broken "Sign in with" implementations](https://www.ory.com/blog/sign-in-with-user-impersonation-oauth2-openid-connect): OAuth2/OIDC implementation pitfalls
- [Zero Trust API access control on Kubernetes](https://www.ory.com/blog/api-access-control-kubernetes-cloud-native): Cloud-native API access control
- [Approaching access control on the web](https://www.ory.com/blog/web-api-cloud-access-control-authentication): Web access control fundamentals
- [Accurate code coverage in Go](https://www.ory.com/blog/golang-go-code-coverage-accurate): Go code coverage techniques

## Optional

- [GitHub: ory/kratos](https://github.com/ory/kratos): Ory Kratos (Identities) Identity and user management server source code
- [GitHub: ory/hydra](https://github.com/ory/hydra): Ory Hydra (Authorization) OAuth2 and OpenID Connect server source code
- [GitHub: ory/keto](https://github.com/ory/keto): Ory Keto (Permissions) Permission and authorization server source code
- [GitHub: ory/oathkeeper](https://github.com/ory/oathkeeper): Ory Oathkeeper (IAM Proxy) Zero-trust reverse proxy source code
- [GitHub: ory/polis](https://github.com/ory/polis): Ory Polis (B2B Federation) SAML SSO and SCIM directory sync source code
- [GitHub: ory/docs](https://github.com/ory/docs): Documentation source repository
- [Ory community Slack](https://slack.ory.com): Community support channel
- [GitHub Discussions](https://github.com/orgs/ory/discussions): Community Q&A and feature requests
- [Ory blog](https://www.ory.com/blog): Product updates, technical articles, and company news
- [Ory changelog](https://changelog.ory.com): Product release notes and changelog
- [Ory Network status](https://status.ory.com): Service availability and incident history