masks

Get started

Run masks from its container image, inside a Rails app, or on your computer from the repository.

• Host masks yourself
• Add it to a Rails app
• Try it on your computer

Guides

Tenants, actors, clients, and scopes, and how to set up each part of masks.

• Core concepts
• Organizations
• Single sign-on and SAML

Reference

The specifications masks implements, the manage API, the SDKs, and the environment variables.

• OpenID Connect and OAuth
• The manage API
• Environment variables

Features

OpenID Connect and OAuth 2.0Passes four OpenID Foundation certification plans with no failures.TenantsEach tenant has its own actors, clients, and signing keys.Passkeys and second factorsPasskeys, authenticator apps, backup codes, and sign-in codes by email or text message.Single sign-onSign in with Google, Microsoft, or any OpenID Connect or SAML provider.OrganizationsEach organization has its own members, roles, and sign-in policy.Event streamsmasks records each sign-in and change as an event, and sends events to a URL you choose.

SDKs

• Ruby and Rails
• Browser
• JavaScript
• Python
• Go