Feature overview

Identity features for real organizations.
From login to managed profiles.

Tuurio ID combines secure login, managed profiles, and delegated handling for agencies, SaaS teams, associations, schools, and communities.

Passkeys

Passwordless by default.

Hosted in EU

EU-hosted and designed for GDPR-ready operations.

Multi-tenant core

Tenant-scoped isolation in issuer, config, and data access.
All features

Everything you need for identity operations.

From secure login and passkeys to managed profiles, auditability, and delegated handling.

True multi-tenancy

Each tenant gets its own issuer context plus tenant-scoped configuration and data access.

Core feature

Two-factor protection

TOTP and passkeys/WebAuthn including brute-force protection.

Security

Deep branding

Own colors, own CSS, and own login domain for branded identity experiences.

Access control

Roles and permissions per tenant, including domain restrictions.

Custom permissions

Own permission sets per app and tenant, directly as token claims.

Audit logs

Complete audit trails for compliance and forensics.

NIS2 support

Internationalization

UI and mails in DE, EN, FR, IT, ES with automatic language detection.

Standards-based OIDC

Standards-compliant OAuth 2.0 / OIDC provider with discovery, JWKS, and standard integration patterns.

Managed profiles

Create profiles without credentials, assign responsible managers, and keep continuity when a login is added later.

Social and enterprise logins

Google, Microsoft, Apple, GitHub, plus custom SAML/OIDC providers.

Managed identities

Profiles with or without login

Separate the real person from the account without losing operational clarity.

Useful for associations, schools, communities, member systems, and any workflow where some people self-manage while others are represented by responsible members or staff.

Create records before credentials

Start with the real person, not the login account.

Assign responsibility explicitly

Model parents, guardians, staff, or responsible members without shared passwords or workaround accounts.

Keep the same identity later

When a managed profile receives its own login, the profile stays the same record.

Developer-friendly and standards-first.

  • REST API for tenant management
  • Spring Security 7 and Kotlin stack
  • Docker-ready deployment
  • Comprehensive API documentation
Access token example JWT
{ "sub": "user_123", "iss": "https://tenant.id.tuurio.com", "permissions": [ "invoice:read", "project:write" ] }

Your app validates the token while Tuurio handles login, profile, and relationship management centrally.

View integration
Popular sample guides

Ready for identity beyond login?

Start with secure login and grow into managed profiles, delegated handling, and audit-ready operations.