The Curious Engineer

All blogs / Security

PropelAuth

propelauth.com

PropelAuth was founded on the idea that a great auth product gets out of your way. We provide you with the right tools out of the box—so you can quickly make your users' experiences as secure and smooth as possible.

SecurityWeb developmentAI / ML

’21’22’23’24’25’26
Posts
256 from 3 Nov 2021 to 20 Oct 2026
Posting
weekly (51 in the last year)
Kind
company blog

2026 47

  1. Announcing Enterprise MCPYour customers can now use Okta, Microsoft Entra, or another identity provider to control who can access your MCP server and what their AI assistants are allowed to do....
  2. Don't Trust Your AI Agent. Scope It.Every conversation about putting AI agents into a product eventually arrives at the same question: can we trust it? And the honest answer, today, is "...
  3. What is OIDC? OpenID Connect Explained (and How It Compares to SAML)OIDC (OpenID Connect) lets your app send a user somewhere else to log in, like Google or Okta, and get back a signed answer to one question: who is th...
  4. Enterprise-Ready MCP PermissionsYour enterprise customers have a new question on their security questionnaires: "When our employees connect an AI assistant to your product, who decid...
  5. How to Build a Good Consent Screen for OAuth and MCPA consent screen shows the user an application's name, a list of permissions, and two buttons. For a long time, the applications on it were registered...
  6. Announcing CIMD Support for MCPPropelAuth's MCP Authentication now supports Client ID Metadata Documents (CIMD), the client registration method the current MCP authorization spec re...
  7. MCP Default Resource: Connecting OAuth 2.0-Only ClientsSome MCP clients don't send the resource parameter that the MCP authorization spec requires. Microsoft Copilot Studio is the big one right now: its MC...
  8. Best Managed Auth for Startups in 2026Updated September 4, 2026 Short answer: For a B2B startup, PropelAuth is the best managed auth provider in 2026. Organizations, per-organization roles, and unlimited SAML/OIDC enterprise SSO are all included on a flat $150/month plan, so you're covered when a cu
  9. The Best Auth Providers for Fast-Moving B2B Startups (2026 Guide)Updated September 8, 2026 Quick answer: The best auth provider for a fast-moving B2B startup is one that ships organizations, roles, invitations, and...
  10. Auth Providers That Can Secure Your MCP Server (2026 Comparison)Your customers are starting to ask a new question: "Can I connect Claude, ChatGPT, or Cursor to my account in your product?" Saying yes means shippin...
  11. Multiple Enterprise SSO Connections per OrganizationAn organization in PropelAuth can now connect to more than one identity provider. Employees can log in through Okta, contractors through Entra ID, a n...
  12. Secure User Impersonation: Access Controls, Audit Logs & MoreUser impersonation is consistently one of our customers’ favorite features. Your team can select a user in the dashboard, click Impersonate User , and...
  13. User Impersonation Updates: Blocklist, direct links and moreImpersonation is one of those features that's incredibly useful right up until someone asks "wait, who approved that?" It's great for debugging, suppo...
  14. What is SCIM? A Practical Guide for B2B SaaS TeamsThe TL;DR * SCIM (System for Cross-domain Identity Management, pronounced like "skim") is an open standard (RFC 7643 / 7644) that lets an identity p...
  15. Introducing Member Audit LogsGive your customers visibility into their teammates' account activity with Member Audit Logs. Your customers ask for audit logs because they want ans...
  16. Introducing PropelAuth Session ManagementKnowing who's logged in, from where, and being able to do something about it shouldn't require digging through a database. Today, we're making that in...
  17. June 2026 UpdatesJune has been all about giving you more control and more visibility, from new identity provider support to sharper audit logging and tighter security ...
  18. Ping Identity Support: SAML, OIDC, and SCIMPropelAuth now supports Ping Identity across all three of the standards that matter most for enterprise customers: SAML, OIDC, and SCIM. Ping is one ...
  19. Migrate from Clerk and Auth0 with PropelAuth's MCP ServerMost teams budget a week for auth and lose a month. That's the problem the PropelAuth Integration MCP server solves: it gives your AI agent the right ...
  20. Authentication and Authorization for Internal MCP ServersPicture this: You’ve just built a brilliant Model Context Protocol (MCP) server. It’s the ultimate internal powerhouse, seamlessly bridging your organ...
  21. Introducing Developer and Customer Management RolesWe've added two new roles to the PropelAuth dashboard: Developer and Customer Management. The idea behind both is the same: give people access to everything they need for their job, without access to anything extra. In practice, the person setting u
  22. 6 Best Authentication Platforms for B2B SaaS in 2026Choosing an authentication platform for a B2B SaaS product is a decision you live with for years. The wrong choice shows up later as custom middleware...
  23. SCIM Provisioning: What It Is and When You Need ItWhat Is SCIM? SCIM stands for System for Cross-domain Identity Management. It's an open standard (RFC 7643/7644) that automates user provisioning and...
  24. Scoped Backend API Keys in PropelAuthPropelAuth backend API keys now support granular permission scopes, giving you precise control over exactly what each key is authorized to do within y...
  25. MCP Organization Scopes in PropelAuthAs MCP (Model Context Protocol) becomes the standard way users connect AI assistants like Claude and ChatGPT to SaaS products, one question is becomin...
  26. 6 Auth Platforms With Enterprise SSO Support for B2B SaaS in 2026Enterprise SSO is one of those features that can quietly stall a deal that seemed almost closed. Your product is solid, the champion is on board, and ...
  27. How Anglera Uses PropelAuth to Win Fortune 500 CustomersAnglera is AI-powered product data infrastructure for enterprise retailers and distributors. The platform automates the enrichment, standardization, a...
  28. 4 Auth Companies With SCIM Support in 2026If you're building a B2B SaaS product, chances are your enterprise prospects are already asking about SCIM provisioning. It's one of those checklist i...
  29. 6 Best Auth Platforms for Python Developers in 2026 (FastAPI, Flask, and Django)Choosing a Python authentication platform is one of those decisions that's easy to get wrong and painful to undo. Whether you're building a FastAPI ba...
  30. PropelAuth HubSpot Integration: Sync Your Users to Your CRM AutomaticallyYour auth layer and your CRM have always held different pieces of the customer puzzle. Assembling them meant custom webhooks, manual exports, or just ...
  31. 5 Best Auth Platforms for React Developers in 2026 (Vite, Next.js, and React Router)Picking the wrong React authentication library is the kind of decision that feels fine at first and painful eighteen months later. By then you are either missing a feature that requires migrating providers, or your a
  32. A Type-Safe Stack for Building B2B Apps FastPicking a tech stack is an important decision for any product. There’s a lot of constraints that you need to balance. On the one hand, you want to ge...
  33. Announcing: Impersonatable Users TableIf you use our impersonation feature with the "By Request" setting, you know the drill. You submit a request, an approver reviews it, and once you're ...
  34. API Key InsightsWe shipped something we think you'll find useful: an Insights tab in the API Keys section of your dashboard. If you use PropelAuth's API key authenti...
  35. TanStack Router + Query with PropelAuthIf you've spent any time in the React ecosystem recently, you've likely noticed a massive shift in how developers handle routing and data fetching. Th...
  36. Building Custom UIs with Shadcn and PropelAuth’s Integration MCP ServerWith our recent release of the PropelAuth Integration MCP server, we wanted to put it plus our shadcn component registry to the test by building some ...
  37. Announcing Password Rotation Policies: a feature you shouldn’t useTypically, when we announce a feature, it’s a feature that we are excited about and want people to use. This feature is a little bit different and I t...
  38. PropelAuth’s shadcn-style componentsBy default, PropelAuth provides hosted pages for authentication, meaning we provide pages like a Login UI, Signup UI, account pages, organization mana...
  39. PropelAuth Integration MCP ServerWe keep track of a lot of metrics at PropelAuth, but one of the most important metrics is time to integrate. How long does it take from when someone ...
  40. Audit Logs in PropelAuthYour product just launched. Your first customers have been onboarded. Before you know it, the questions start coming in: Who updated our role configur...
  41. Isolated Organizations: An easier way to do user isolationWhen you're building a B2B product, one of the first architectural decisions you'll face is how to separate your customers from each other. This concept is commonly called an “organization” or “tenant,” and it essentially means you are defini
  42. Production-ready MCP server using Cloudflare WorkersModel Context Protocol (MCP) servers are a convenient way to allow AI applications (Claude, Gemini, ChatGPT, etc.) to connect to your product. In thi...
  43. Deep dive into OAuth 2.1 and MCP using Cloudflare WorkersModel Context Protocol (MCP) servers are a convenient way to allow AI applications (Claude, Gemini, ChatGPT, etc.) to connect to your product. We have...
  44. Guide to understanding MCP with examplesModel Context Protocol (MCP) is a standard for connecting AI applications (ChatGPT, Claude, Gemini, OpenCode) to external systems (Google, GitHub, You...
  45. MCP Authentication with FastMCPMCP servers are just a clean way to give an AI client (like Claude Desktop, Claude Code, ChatGPT, etc) a set of functions it can call. This can really...
  46. Why does DCR matter for MCP?Model Context Protocol (MCP) is a standard for connecting AI applications (Claude, ChatGPT, Gemini) to external applications (Linear, Google Calendar,...
  47. What is Dynamic Client Registration?Dynamic Client Registration (DCR) is an extension of OAuth that allows OAuth clients to be created programmatically. It wasn’t a very popular extensio...

2025 32

  1. Announcing OIDC SupportWe're excited to announce that we now support OIDC connections for customers who log in using Enterprise SSO! What is OIDC? OIDC (OpenID Connect 2.0)...
  2. Decoding Common Customer Questions About Enterprise SSOCongratulations, you’re on track to close your first Enterprise customer! But… they’re starting to ask a bunch of questions about user management you...
  3. Announcing: More Ways to Secure Your SignupsGetting more attention around your product feels great. Who doesn't love to see their user count skyrocket? Unfortunately, sometimes extra attention ...
  4. How graph8 Uses PropelAuth to Power Their AI-first GTM Operating SystemBefore founding graph8, Thomas Cornelius and his teams built large-scale financial systems — high-volume transaction engines processing billions of operations, POS systems, CPQ platforms, subscription billing infrastructure, and
  5. Reanimating the GeoCities Experience with react-springHappy Halloween! And for Halloween, we wanted to make the scariest thing we could think of… a modern version of early 2000s web design patterns. We’r...
  6. Announcing PropelAuth BYO (self-hosted)We’re incredibly excited to announce a new way to add authentication and authorization to your product: PropelAuth Bring-Your-Own (BYO). PropelAuth B...
  7. How ShiftControl Uses PropelAuth to Empower Small Businesses & StartupsAbout ShiftControl ShiftControl gives startups and growing businesses the tools to run Google Workspace and their SaaS stack like a pro—securely, eff...
  8. How Wiv.ai Uses PropelAuth to transform B2B FinOps automationWiv.ai is the hyperautomation FinOps platform that turns cloud chaos into business clarity. Designed for enterprises tired of staring at dashboards an...
  9. July 2025 Updates: Dark Mode, JumpCloud SCIM and moreWhen you think of July, what comes to mind? Nice summer weather, beaches, dark mode and expanded SCIM support in your favorite auth product? If you s...
  10. OAuth 2.1 in Simple TermsIf you’ve ever searched for OAuth (or OAuth2 or OpenID connect/OIDC), you’ve probably been greeted with a picture that looks like this: along with so...
  11. Predicting Your Auth Roadmap: What Your B2B Customers Will Need As They GrowAuthentication is pretty simple when you first get started. Signup, login, password reset… maybe social login integrations or 2FA if you want to add s...
  12. Developer UncertaintyOne of the most challenging codebases I've ever worked in was a legacy Java codebase. And before your mind wanders to the Enterprise Fizz Buzz codebas...
  13. PropelAuth Updates: Account linking, async Python and moreWe've had a couple of exciting releases over the past few weeks. We're excited to share, so let's dive in! Social Account Linking Within PropelAuth...
  14. FastAPI vs Flask vs Django in 2025If you are starting a new project in Python, there’s three major contenders for your web framework: Django, Flask, and FastAPI. While there are many differences between these frameworks, which one you choose can be boiled down to a few personal preference questions.
  15. PropelAuth Updates: Audit log export, Dash support and moreAudit Log Export Now you can export your PropelAuth audit logs to S3 and DataDog! Just head over to the Integrations page, select your logging tool, ...
  16. SSO vs SAMLWhy single sign-on matters, what SAML actually is, and how to keep your customers happy (and secure) The TL;DR * Single sign-on (SSO) is the exper...
  17. Understanding SAML and SCIMIn the authentication space, SSO can be an unfortunately vague term. For some applications, it means “Sign in with Google.” For other applications, it...
  18. Dash with PropelAuth: Add Authentication to Your Data Apps with Just a Few Lines of CodeWe're excited to announce our new integration with Dash, the powerful Python framework from Plotly that enables data scientists and analysts to build ...
  19. Introducing Step-up MFA: Protect your users’ critical actionsMulti-factor authentication (MFA or 2FA) is an incredibly important security measure. Every PropelAuth project can already provide MFA to it’s users, ...
  20. Complete Guide to Debugging Cookie IssuesYou flip the dark mode toggle. Works on one page, but resets on another. You embed a site on a different domain within an <iframe>, but your settings ...
  21. Understanding Hydration Errors by building a SSR React ProjectIf you’ve written React code in any server-rendered framework, you’ve almost certainly gotten a hydration error. These look like: Text content does n...
  22. Make your LLMs worse with this MCP ToolWe are a remote company, and as a remote company, there just aren’t as many opportunities for hanging out, talking around the water cooler. Being a C...
  23. March 2025 UpdatesMarch has been a busy month here at PropelAuth, with a focus on making things easier - whether it’s improving initial integration experiences or savin...
  24. Streamlit Authentication/Authorization with PropelAuthStreamlit is an open-source Python framework that makes it incredibly easy for data scientists and machine learning engineers to create interactive web applications from their existing Python scripts. Think of it as a magic wand that transforms y
  25. Simplify Your Next.js Auth Setup with the PropelAuth CLIWhenever we build client libraries for any framework, we start by setting three key design goals: 1. Is it easy to understand? 2. Does it leverage ...
  26. Adding Authentication to Your Blazor Server App (.NET) with PropelAuthBlazor is a modern way to build interactive web applications entirely in C#. For .NET developers, it’s an excellent opportunity to leverage existing s...
  27. .NET Authentication/Authorization with PropelAuthWant to skip straight to it? See our reference documentation, our full-stack documentation (for Blazor), or an example app build with Blazor server. ...
  28. FastAPI in Prod: Handling DB migrations, auth, and moreFastAPI is a modern Python framework known for its speed, developer-friendly features, and (my personal favorite) automatic OpenAPI schema generation....
  29. Rate Limiting: A Practical Guide to Prevent OveruseRate limiting is a technique used to control the frequency of requests a client can make to a server over a specified period. Rate limits are commonl...
  30. Announcing ui.propelauth.comToday we’re announcing the beta launch of ui.propelauth.com - a full guide on how to build your own UIs on top of PropelAuth. Whether you’re looking ...
  31. API Key Insights, Rate Limits, and moreWe’re kicking off 2025 with some major upgrades to API keys! Our API Key feature allows your users and/or organizations to generate API Keys (this is...
  32. Adding Enterprise SSO / SAML to LaravelLaravel is a PHP-based web application framework. If you read through their marketing site, you’ll see a few common words like elegant, simple, and cl...

2024 49

  1. Announcing Laravel SupportPropelAuth now supports Laravel! Laravel is a popular open-source PHP web application framework designed to simplify and accelerate web development. ...
  2. CSV User ImportIt’s easier than ever to onboard your users in PropelAuth with our new CSV import. Whther you’re doing a full migration, complete with password hashes and existing 2FA secrets, or you’re just looking to create a bunch of accounts quickly without writing any code, our CSV importer make
  3. End-User Audit LogsGive your customers full insight into their organization activity with our end-user audit logs. This option is great for your security-conscious cust...
  4. Email Template UpdatesIt's day 3 of our Launch Week and we are excited to share that our email templates have gotten a makeover! When it comes to authentication related em...
  5. PropelAuth's Terraform ProviderAuthentication is a critical part of your infrastructure. And just like other pieces of infrastructure, you’ll want an easy way to update, revert, and...
  6. User Impersonation Approval FlowsToday, we’re announcing an upgrade to one of our most popular features: User Impersonation. As a quick refresher, User Impersonation makes it possibl...
  7. Authentication with Next.js and SupabaseIn this guide, we’ll build an example Next.js server-side rendered application with PropelAuth and Supabase. We cover the Pages Router version of Next...
  8. Authentication with Next App Router and SupabaseIn this guide, we’ll build an example Next.js application with PropelAuth and Supabase. We cover the App Router version of Next.js 13, and demonstrate...
  9. Drawing a Turkey with CSSWe learned how to generate arbitrary shapes with CSS. We then learned how to scale, rotate, and position those shapes in order to create your own artw...
  10. Gating Paid Features with PropelAuth’s Role MappingsLearn how to use role mappings to set roles and permissions that gate features based on the user's pricing plan....
  11. PropelAuth Python v4 ReleaseToday, we are excited to release a new version of our base Python library, as well as releases of our framework-specific libraries for FastAPI, Flask,...
  12. Securing a GenAI Service with API Key Validation and Trial ManagementLearn how to secure a GenAI service with PropelAuth's API key authentication, custom user properties, and account management features....
  13. Protecting a Multi-tenant Next.js client/server app with PropelAuthLearn how to create a B2B Next.js app that creates digital coupons on demand using OpenAI's API and PropelAuth to secure it....
  14. Building internal AI tools with StreamlitMost companies have a ton of valuable data internally. This could be analytics data on your customers interactions with your product. This could be an...
  15. Limiting sign ups with PropelAuthPropelAuth offers a variety of customization options when it comes to controlling who can access your product - everything from completely disabling p...
  16. FastAPI Auth with Dependency InjectionFastAPI is a modern web framework for building APIs in Python. It’s one of my personal favorite web frameworks as it has built-in support for OpenAPI ...
  17. Libraries for writing raw SQL safelyOne of my responsibilities at PropelAuth is writing example apps / guides in various languages / frameworks. It’s truly one of the most fun parts of m...
  18. Remix AuthenticationWe are very excited to officially release the @propelauth/remix library - a library that makes it incredibly easy to add authentication, authorization...
  19. CarbonHQ: a better way to manage carbon projectsPropelAuth is proud to be the auth provider of choice for companies working to make the world a better place. In this series, we’ll showcase some of o...
  20. Own Your Beliefs: easily invest in our planetPropelAuth is proud to be the auth provider of choice for companies working to make the world a better place. In this series, we’ll showcase some of o...
  21. CarbonBright: friction free product environmental impact infoPropelAuth is proud to be the auth provider of choice for companies working to make the world a better place. In this series, we’ll showcase some of o...
  22. Guide to Dependency Injection with FastAPI's DependsOne of the first concepts I learned at my first job was dependency injection. In this post we'll go over what it is and how to effectively use it, with FastAPI’s depends....
  23. PropelAuth July UpdatesHope you’re all having a great summer! We’ve got a lot of exciting news for you, so let's jump right in. Audit Logging Whether you want it for debu...
  24. Complete Guide to State Management in ReactIf you are writing a React application, you are almost certainly managing state somewhere. State is surprisingly hard to define, but easier to underst...
  25. React/FastAPI Starter GuideThis guide walks through the process of setting up authentication using PropelAuth on top of a product built in FastAPI & React. Setting up our Auth...
  26. PropelAuth June UpdatesWe’ve had a bunch of miscellaneous changes go out over the past couple of weeks - here’s a roundup: * New SSO option: Login with Apple * New Framew...
  27. Spring Boot Authentication and Authorization w/ Spring SecuritySpring Boot makes it easy to create stand-alone, production-grade applications. Spring Security is the standard for securing Spring-based applications...
  28. Advanced Roles and PermissionsToday we’re bringing our RBAC system to the next level with the addition of Roles & Permission Mappings. Mappings make it possible for you to configu...
  29. Recreating Stripe’s Roles in PropelAuthStripe is a platform that allows companies of all sizes to accept payments, issue invoices and generally manage their billing. Their offering is neces...
  30. PropelAuth May UpdatesWe’re bringing you a variety of updates today, with no particular theme, so let’s dive right in! Enterprise SSO Role/Group Mappings If your users a...
  31. What Working at a Senior Dog Rescue Taught Me About Sales & MarketingAround 5 years ago, in between startup jobs, I worked at a place called Muttville Senior Dog Rescue. Muttville is, as the name implies, a dog rescue f...
  32. It’s not just you, Next.js is getting harder to useI wrote a blog post the other day about how Next.js Middleware can be useful for working around some of the restrictions imposed by server components. This led to some fun discussions in the world about whether this was a reasonable approach or if N
  33. Guide to RBAC for B2B SaaSRole based access control (RBAC) is a method of answering the question “Can a user do this thing?” If you’ve ever used a product where some users are...
  34. Getting the Current URL in Next.js Server ComponentsYou are writing a server component using the new(ish) App Router in Next.js, when you realize you need to get the current URL’s path. This could be fo...
  35. How RunBear Scaled to 1500 Organizations in 4 Months With PropelAuthRunBear is a no-code solution that allows users to integrate their custom AI apps with familiar tools like Slack, MS Teams, or HubSpot. It enables sea...
  36. JWT Authentication Explained with Code ExamplesWhen I’m trying to understand a concept, I like to play around with relevant libraries. We’ll try this out with JWTs using the popular javascript libr...
  37. Active orgs, SAML links, and moreToday's theme is making it easier to manage things: helping your users manage SAML connections, helping you manage the orgs your users are in, helping...
  38. New Login Flows, Improved API Keys, and moreToday's release is a mix of features, improvements and bug fixes primarily focused on SSO/SAML, API keys and Roles & Permissions. There's a lot of sur...
  39. Checklist for Auth MigrationsAuthentication, like every other aspect of your product, needs to evolve over time. Sometimes, this means that you need to seek out a new auth solutio...
  40. New SSO & SAML options, React Native, .NETFor this release, we focused on bringing you a few new ways to integrate with PropelAuth and log your customers in: SSO We’ve added 3 new SSO provi...
  41. Take Full Control of your PropelAuth EmailsToday we’re bringing you some pretty exciting news: you can now replace the default PropelAuth transactional emails with your own, so you can have ful...
  42. Internal Roles, 2FA Org Requirement, and SCIMSometimes, we try to think of a theme around our releases. Today’s theme is roughly: controlling security and access. It’s a little abstract… so let’s just jump into the features: Internal Roles If you like to give your employees access to one of your use
  43. Perfectly Contrasting Text on a Gradient BackgroundGradient backgrounds are one of the more popular current web design trends, and I must admit they can look very pretty. What doesn’t look so nice is p...
  44. A new look & feel for our hosted pagesToday we have some very exciting news for you: we’re releasing a new version of our Look & Feel editor. Here’s what it can do: Your existing UIs hav...
  45. New Documentation and Waitlist SupportToday we’re bringing you two big announcements: we’ve refreshed our documentation and we’ve added support for waitlists. Documentation Refresh As a...
  46. PostHog + PropelAuthAt PropelAuth, we believe that user acquisition is only the beginning - in order to build a thriving business, you need to deeply understand your user...
  47. Imposter Syndrome Is For EveryoneFor those unfamiliar with the term, Wikipedia defines imposter syndrome as “a psychological occurrence in which an individual doubts their skills, tal...
  48. Streamlit AuthenticationStreamlit is a powerful tool for creating “data apps.” The easiest way to understand it is with this picture (from Streamlit’s marketing site): You w...
  49. Becoming a Dungeon Master for an InterviewInterviews should be as close as possible to the work that the candidate would do if they join. While that seems like a pretty tautological statement...

2023 58

  1. New User Insights to Help You GrowThe best way to figure out how to get new users is to get a good understanding of your current users. Once you know who loves your product the most an...
  2. Charts, User Activity, and moreAt PropelAuth we believe it’s not enough to help you get your users onboarded - we also want to provide you with the tools you need to keep an eye on ...
  3. Writing Clean Code with FastAPI Dependency InjectionBefore anyone else read the code that I wrote, “clean code” wasn’t really a thing for me. I had no issues reading my code because, well, I wrote it. That was also pretty true for me in college as well. Classes rarely worried about the readability o
  4. How PropelAuth Enables Letter.AI to Ship Lightning FastLetter AI is a revenue and sales enablement platform powered by AI, empowering sales and customer success teams to perform at the top of their game wi...
  5. Building a Multi-Tenant App with FastAPI, SQLModel, and PropelAuthBuilding a multi-tenant (sometimes also known as B2B) product can be a trickier than building for consumers. Instead of handling users as individuals,...
  6. PropelAuth Tips: End the Year Strong!December can be tough for startups - acquiring customers during holiday season is an extra special challenge, as is keeping the attention of customers...
  7. Should I Apply for a Startup Accelerator?If you’re a startup founder, you likely have one thing on your mind: How do I build the best company possible? There are many great strategies out th...
  8. A Founder’s Guide to Surviving Family Holiday PartiesThe holidays are coming, and along with that will come many questions from well-meaning relatives about the “project” you’ve been working on… also kno...
  9. So You Have a Customer Retention Problem… Now What?A high churn rate can be an absolute company killer, since it will start to negate your customer acquisition efforts. This guide will walk you through...
  10. A Complete Guide To Using Cookies in Next.jsAs Next.js has grown in complexity, it means there are a number of different ways to use cookies, each with their own caveats. You can read them in se...
  11. Do This Before Launching a New FeatureA mistake that’s all too common among founders is to get a feature built, release it to the world and… move onto the next feature, perhaps expecting t...
  12. More User Insights: Churn & Reengagement ReportsA couple of weeks ago, we announced the addition of metrics to our dashboard to make it easier to see what’s going on with your users at a glance. Ho...
  13. Custom Email Domain & MetricsWe’re excited to announce some new features: the ability to send emails from your own domain and a visual of signup and activity metrics. Sending Emails from Your Own Domain There are plenty of reasons you may want to make sure PropelAuth transactional emails are coming
  14. What is Password Hashing?If you’ve been paying attention in the past few years, you may have seen that password breaches have made headlines more than a few times. In many of ...
  15. Why we still use React HOCsIf you’ve integrated with our React library, @propelauth/react, you’ve probably seen that we offer a pretty standard React hook useAuthInfo. It return...
  16. September Release NotesHope you’re all having a great autumn so far! September’s been a busy month for PropelAuth - we kicked it off with a refresh of our account and org pa...
  17. Test your React Libraries Locally with YalcBuilding and maintaining a React library can be a large task, even for small libraries. You start off thinking that you just have to figure out how t...
  18. Using Astro View Transitions for my Chess LibraryAstro 3.0 was released recently, and one of the headlining features is their support for the View Transitions API. View Transitions are a surprisingly...
  19. PropelAuth has received SOC2 certificationWe are excited to announce that PropelAuth has successfully completed a System and Organization Controls (SOC) 2 Type II audit, performed by Sensiba L...
  20. Define Your Own User SchemaWhat information do you want to collect from your users? Maybe you want to find out how they first found out about you. Maybe you want them to agree t...
  21. FastAPI Authentication GuideFastAPI is a modern web framework for building out APIs using Python. It’s fast, lightweight, and quick to build with, so it’s no wonder that many dev...
  22. The Joy of Pointless ProjectsWhen I was a kid, I learned how to code with QBasic and VB6. One of the first projects I ever had someone else use was... if we are being polite, a pa...
  23. 5 Common Pitfalls with Server Components in Next13 (with examples)The App Router is a new feature in NextJS 13, and it was recently switched to being the recommended option when you create a new NextJS application. This effectively replaces the Pages Router, and NextJS has documentation on how you c
  24. Announcing: NextJS 13 SupportWe’re excited to announce the release of our support for Next.js 13, and applications built using App Router! This library provides a simple way to i...
  25. Redirecting Users in PropelAuthPropelAuth provides configurable UIs for login, signup, and org management. We host these for you so you can start testing them, even before you’ve wr...
  26. API Key AuthenticationWe are excited to announce the release of API Key authentication, a powerful feature that adds another way for your users to make requests to your pro...
  27. Abra-QR-dabra: Watch Passwordless Mobile Auth Magically AppearA few days ago, a post on hacker news caught my eye, where folks were playing around with and linking to various QR Code designers. This got me to thi...
  28. Using useMutation to make an advanced toggle in ReactRecently, we were adding some new functionality to our dashboard, and we wanted an experience like this: The basic features are: * The toggle shoul...
  29. Dev Tools to Make Debugging EasierThroughout my career, I’ve found that debugging is one of the most valuable skills a developer can have. This can range from debugging small issues li...
  30. Authentication in GoWe are thrilled to announce that we now officially support Go! If you want to skip right to it, you can check out our getting started guides or the re...
  31. What My Cousin Vinny can teach us about debuggingIf you haven’t seen My Cousin Vinny yet, go watch it real quick, we’ll wait. Great movie, right? Marisa Tomei absolutely deserved her Academy Awa...
  32. Who can sign up for your product?At PropelAuth, we believe that your authentication requirements will change over time. The features you need when building your MVP are very different...
  33. Announcing User Impersonation in PropelAuthWe are incredibly excited today to announce that User Impersonation support is now live in PropelAuth! User impersonation, masquerading, ghosting, assume identity, delegated access… this feature goes by a lot of different names. No matter what you call it,
  34. Custom Metadata: How It WorksLast week, we released a long awaited and asked for feature in PropelAuth, Custom Metadata on both users and organizations! However, the term “metadat...
  35. PropelAuth Product Updates: Dashboard Revamp, Staging Env, and MoreWe are often working on large feature releases or product improvements, but this time around we have been hard at work on something truly large and im...
  36. Why Our Startup Program Has No Time LimitNote: Free Until Funded has been discontinued. If you are an early stage startup, please email support@propelauth.com to learn about our latest startu...
  37. Building a production ready LLM application with BerriAI, PropelAuth, and Next.jsBerri.ai is a powerful product that allows you to easily add AI to your applications. You can, for example, create a chatbot that can answer questions...
  38. PropelAuth’s Annual Security Audit (2023)PropelAuth is deeply committed to the security of data within our platform. We have features like 2FA, enterprise SSO/SAML, brute force detection, cus...
  39. Don't forget this on your YC applicationI was fortunate enough to go through YC with my company PropelAuth for the W22 batch. As an authentication company, we have a lot of customers that ar...
  40. What Does Timing Attack Actually Mean?Timing attacks Timing attacks are a class of malicious attacks against a product where the length of time that your application takes to perform a ta...
  41. Pair Programming with GPT-4: CrosswordGPTNow that GPT-4 has been released and a lot of incredible demos are coming out, I wanted to give it a try with a complex project. I settled on a React-...
  42. Drizzle - An ORM that lets you just write SQLIf you're a developer who's already comfortable with SQL, you know how frustrating it can be to switch to an ORM that requires you to learn a whole ne...
  43. What Does Identity Provider Actually Mean?When it comes to online security and authentication, the term "Identity Provider" is often thrown around. But what does it actually mean? In simple te...
  44. What Does Authorization Actually MeanThe word “auth” is complicated because there are a wide range of topics that fall in the bucket of “auth.” In this series, we’ll take a practical approach to understanding many of these topics with examples to learn from. What is Authorization? Authorization is t
  45. Chrome Extension Authentication with PlasmoChrome extensions can be an incredibly powerful medium for a product. With over two billion active Chrome browsers in the world, an extension can help...
  46. What Does Passwordless Actually Mean?Passwords have been around for a long time, and while they are easy to understand, they do come with some drawbacks. They are essential for keeping ou...
  47. What Does 2FA Actually Mean?Amongst the crowd of acronyms in the authentication space, 2FA, or Two Factor Authentication, seems to be one of the more self explanatory names. But ...
  48. What Does SSO Actually Mean?Before answering the question at hand, you should know that you’ve probably used SSO already. Any time you’ve signed up for or logged into a product u...
  49. I love building a startup in Rust. I wouldn't pick it again.For almost two years now, the vast majority of our backend code was written in Rust (aside from a little bit of Python). I love Rust, it’s by far my f...
  50. React/Rust + Axum Multi-Tenant Starter AppIn this guide, we’ll build an example B2B application in React where users can sign up, login, manage their accounts, and view organization and member...
  51. Production-Ready OpenAI (GPT) TemplateOpenAI has a great quickstart template to help build applications using their APIs. Their APIs have been used for pretty much everything at this point...
  52. React/Python + Chalice Starter AppIn this guide, we’ll build an example B2B application in React where users can sign up, login, manage their accounts, and view organization and member...
  53. React/Express Starter AppIn this guide, we’ll build an example B2B application in React where users can sign up, login, manage their accounts, and view organization and member...
  54. React/Flask Starter AppIn this guide, we’ll build an example B2B application in React where users can sign up, login, manage their accounts, and view organization and member information, PropelAuth, React, and Flask. We're going to use the following technologies for this blog post: * React.js - for
  55. Adding Multi-Account Support to Your ProductWhen starting a startup, the initial focus is usually on getting your product into peoples hands as quickly as possible. You want to cut any features ...
  56. 5 Creative Uses of Magic LinksMagic links, also known as passwordless logins or one-time links, have become an increasingly popular way to improve the user experience and increase ...
  57. Next.js Multi-Tenant Starter ApplicationIn this guide, we’ll build an example B2B application in Next.js where users can sign up, login, manage their accounts, and view organization and memb...
  58. Authentication for Cloudflare WorkersWe are thrilled to announce the release of @propelauth/cloudflare-worker - a Javascript/Typescript library that makes it easy to add authentication an...

2022 67

  1. Clean Code with Rust & AxumOne of my favorite parts of the book Clean Code was seeing a code snippet that starts off gross and unmanageable and watching it iteratively improve. ...
  2. Rust Authentication with PropelAuthWe are incredibly excited to release the propelauth crate, which you can use to add authentication and authorization to your Rust backend. We have su...
  3. React Hooks for Multi-Tenancy and Authorization w/ PropelAuthSay you built a SaaS application for restaurants to track information about their orders. There are multiple people at the restaurants who need access...
  4. Not Another Cold Email: How to successfully ask for product feedbackIt takes a village to raise a child start a company. Whether you’re looking for user testimonials, searching for beta testers, or trying to expand yo...
  5. Roles and Permissions in Plain EnglishLet’s say you build newspaper websites for local newspapers. Your simplest product is a newspaper website where everyone can post articles and everyone can read them. That’s not good....
  6. Should You Turn Your Side Project Into a Business?Say you’ve been building an app as a side project over the past year. Maybe it started out as a hobby to take your mind off of your day job or perhaps...
  7. Adding Customizable Roles and Permissions to PropelAuthWe’re happy to share the latest update to PropelAuth—adding more customizability to role based access control (RBAC), so you can have full control ove...
  8. The Startup Founder’s Gift GuideBeing a founder isn’t easy, but it doesn’t have to be all hard work and no play. Whether they’re still crafting their mission statement or about to st...
  9. Should You Disable Public Signups?By manually onboarding your users, you can invite selected users while keeping your product private to the greater public. In this blog we’ll highligh...
  10. How We Incrementally Migrated to Next.js and VercelRecently, we switched our marketing site over to Next.js and Vercel. Our frontend developers are able to create designs in a format they are already c...
  11. Serverless Multi-Tenant Python Apps Made Easy with Chalice and PropelAuthServerless functions are very powerful but historically have a poor developer experience. Chalice allows us to quickly deploy API routes with very lit...
  12. Understanding Auth Terminology with Examples Part TwoIn our first post, we defined some common auth terminology to help clarify the jargon used when discussing ‘auth’. There’s no shortage of terminology,...
  13. Custom Organization NamingWhen users sign up for your product, do they sign up as individuals or in groups? If you are building a B2B product, they likely sign up in groups alo...
  14. Generating Chess Puzzles with Genetic AlgorithmsWe took a library used for function minimization, attached Stockfish to it, and used it to generate surprisingly complex mate in 3 chess puzzles witho...
  15. ELI5: SAMLSecurity Assertion Markup Language (SAML) is an authentication feature that grants users access to different company web applications using their employee login credentials....
  16. Instant Multi-Tenant GraphQL APIs with PostGraphile, RLS, and PropelAuthGraphQL is a query language for APIs that can help your engineering team move faster. Just one set of developers can build and maintain the overall sc...
  17. This Menu Takes 20 Seconds to Scroll ThroughA common cycle that products go through is: Someone builds an easy to use, slightly opinionated product. It gains adoption because it perfectly solves...
  18. Why B2B Companies Waste More Time on AuthenticationB2B companies have a lot of additional user authentication needs than B2C. You start with an organization ID and an invitation flow, and slowly you ar...
  19. How PropelAuth Solved Tennr's B2B Auth NeedsOne of the many pressing questions that every new company must determine is, “When should we implement auth?” And, soon after, “Should I build auth my...
  20. Azure AD SAML Connections in One ClickSAML enables our customers to provide Enterprise SSO within their products in a single click. Earlier this week we launched with support for many of t...
  21. PropelAuth Launches Self-service SAMLWe’re excited to say that our SAML (also called Enterprise SSO) implementation is out of beta and now available to all our customers! This feature all...
  22. The Importance of Product Led Growth for Dev ToolsProduct led growth (PLG) is a fairly simple concept. It’s the idea that your product should be the driving force of your company’s growth. Your produc...
  23. Nine Apps that are Free and Essential for Early-stage StartupsIf you’ve just started your own company or are thinking about becoming an entrepreneur, the currently downward trending economic climate is probably t...
  24. Multi-Tenant Next.js App with Prisma and PropelAuthIn this post, we’ll show how to build a multi-tenant application using Next.js, Prisma, and PropelAuth. We’ll build a simple B2B application where eac...
  25. Updates to Our Hosted Auth PagesWe’re excited to share new user interface (UI) and feature updates to our hosted auth pages! These are the UIs that we host on your behalf for your users....
  26. Seamless Migration to PropelAuthWe’re excited to announce the release of our migration API to allow companies with existing auth systems to switch over without any user interruption...
  27. Tools to Use When Setting up a JavaScript RepoSetting up a JavaScript repo for the first time can be tricky, but it doesn't have to be! This blog will walk you through setting up your first reposi...
  28. How PropelAuth’s Simplicity Helped This Data Infrastructure Business Develop Their MVPPropelAuth allowed us to focus on our main product features, while not worrying about the auth portion. We were able to dedicate our engineering resou...
  29. Avoiding CORS Issues in React/Next.jsThe simplest way to fix any CORS issues in React and Next.js is actually not to change anything in React or Next.js but instead to fix your server...
  30. PropelAuth raises $2.59M to address the specific authentication requirements of B2B companiesFollowing their completion of the W22 cohort at Y Combinator, PropelAuth, a remote-based firm that offers end-to-end authentication for B2B companies,...
  31. Using PugSQL and FastAPIMost of the tutorials/guides that I read about FastAPI and Python web frameworks in general use SQLAlchemy directly. While SQLAlchemy is great, I pers...
  32. Customer Specific URLs in SaaS ApplicationsThere are many ways to structure your URLs for your customers. You can explicitly reference the customer in the URL or you can manage that separately....
  33. PropelAuth Announces Improvements to Organization ConceptsPropelAuth today announced the launch of improved Organization concepts along with updated front-end and back-end libraries. PropelAuth customers will...
  34. Dynamic Organization Routing with ReactIn this post, we'll look at how to create a dynamic route for the organization a user is a member of in React using react-router and PropelAuth...
  35. Walk-up Usable CodebasesThe term “Walk-up usable” (sometimes called walk-up-and-use) describes a system that is so intuitive, a new user can immediately be effective. When I think about developer experiences, I think about the walk-up usability of the codebase....
  36. PropelAuth Adds Support for Django REST FrameworkWith PropelAuth's Django REST framework support, you can add a few additional lines of code and automatically make sure your APIs can only be reached ...
  37. The Basics of User AuthenticationAuthentication is a broad topic that can be both very simple and very complicated. In this series we’ll describe what it is and different approaches t...
  38. Production-ready Backend with dbmate, PugSQL, PropelAuth, and FastAPIIn this post, we’ll build a fully production-ready backend complete with DB migrations, B2B authentication, to show off all the cool features that Fas...
  39. Understanding Auth Terminology with ExamplesWhether you are new to the auth space or not, there’s a lot of overlapping terminology that can be hard to decipher. In this post, we’ll look at some ...
  40. Build or Buy: User AuthenticationIf you have users, then a reliable auth system is going to be a requirement for your company—whether it’s small or large. And like any project, settin...
  41. Autogenerating Clients with FastAPI and Github ActionsIn this post, we'll learn how to use FastAPI and Github Actions to make sure your client and server never get out of sync....
  42. RBAC Application Examples in Real World B2B ProductsRole based access control (RBAC) is a method of deciding who gets access to what based on their role. In this post, we’ll look at some real world appl...
  43. Auth Needs From MVP to IPO: The Different Stages of User AuthenticationThe authentication requirements of a product change over time. When you first start out, you may only want to let a select set of beta customers into ...
  44. Setting up a Responsive Multi-Tenant Template with Grommet, PropelAuth, and Next.jsGrommet is a React-based framework that provides tools for you to quickly build responsive and accessible applications. It has some of the most intuit...
  45. Add Personalized Content to your Docs with MarkDoc, Next.js, and PropelAuthStripe open sourced Markdoc which is a Markdown-based authoring framework. The ability to quickly and easily add arbitrary React components to a markdown file is really cool! It allows you to be really creative and easily add
  46. Creating Advanced Reusable Forms in Next.jsIn this guide, we’ll create a form that we can use across our product. We’ll start with something simple and slowly add in more complexity like preven...
  47. PropelAuth vs Auth0It’s hard to have a company with "Auth" in your name and not get asked: "How are you different than Auth0?" In this post, we wanted to document some o...
  48. PropelAuth Works Before You Write Any CodePropelAuth is a user authentication product that works before you write any code. But, what exactly does that mean? That means that from the moment yo...
  49. Why Traditional Auth Tools Won't Cut It For B2B BusinessesYour business deserves more. We've spoken to hundreds of startup founders about their auth experiences, and we discovered a few things......
  50. Creating a B2B Next.js ApplicationIn this guide, we’ll build an example B2B application in Next.js where users can sign up, invite their coworkers to the product, and manage permission...
  51. Step-by-step Guide to Add SSO with MicrosoftLogging in with an SSO provider like Microsoft, Google, Github, etc. provides one of the lowest friction ways of signing up new users, but requires yo...
  52. Sign In and Account Merges with SlackPropelAuth manages the entire OAuth flow so all you have to do is enter some basic information and your users can sign in with Slack. These accounts a...
  53. Onboarding Users from a WaitlistWith PropelAuth you can now disable public signups. This will do a few obvious things, like removing the user facing signup page and any links to it....
  54. Notifications on User SignupEnter a Slack webhook URL and we'll notify you every time a new user signs up. You can also set different webhooks for your test and production enviro...
  55. Syncing Your User and Org Tables with WebhooksToday, we're excited to show off our Webhook support. Webhooks allow you to reliably receive an HTTP request when a specific action occurs, like a user signing up, joining an organization, or having their role change....
  56. RBAC Authorization with FastAPI and PropelAuthRole based access control (RBAC) is a method of deciding who gets access to what based on their role. In this post, we'll look at how to setup RBAC qu...
  57. Fast Serverless Authentication with Next.js and PropelAuthNext.js is a React framework that provides a lot of useful features out of the box. One of these powerful features is API routes, which allows you to ...
  58. Supporting FastAPI AuthenticationAt PropelAuth, we're excited to show off our first-class support for FastAPI. The user is injected directly into your function. Users without valid ac...
  59. React + Express Authentication GuideIn this guide, we’ll build an example application in React/Express where users can sign up, login, and manage their accounts. We'll include social log...
  60. React + Flask Authentication GuideIn this guide, we’ll build an example application in React and Flask where users can sign up, login, and manage their accounts. We'll include social l...
  61. React + FastAPI Authentication GuideIn this guide, we’ll build an example application in React and FastAPI where users can sign up, login, and manage their accounts. We'll include social...
  62. Next.js + PropelAuth Authentication GuideIn this guide, we’ll build an example application in Next.js where users can sign up, login, and manage their accounts. We'll include social logins (L...
  63. Webflow Authentication with PropelAuthIn this post, we're going to add authentication to a Webflow project, but first, let's talk about some reasons why you would want to use PropelAuth wi...
  64. PropelAuth Supports Custom User Schemas & Profile PicturesAt PropelAuth, our mission is to provide our customers with easy-to-use authentication and user management. We do this by providing pre-built UIs and ...
  65. PropelAuth backed by Y CombinatorExciting news: PropelAuth is now backed by Y Combinator as part of its W22 Batch! It’s been an incredible journey so far, and I wanted to spend some time reflecting on it and how we got here. As a developer, one thing I learned pretty quickly is that complexity is in
  66. PropelAuth's Independent Security AuditPropelAuth is deeply committed to the security of data within our platform. Furthering this commitment, we recently worked with a security firm to do ...
  67. Passwordless Support with PropelAuthPropelAuth now supports passwordless logins via magic links. In one click, your users can receive an email with a link that will log them in. We do st...

2021 3

  1. Announcing Support For Two-factor AuthenticationCompanies using PropelAuth as their authentication solution can now offer their end user the option of using an authenticator app to verify their iden...
  2. PropelAuth Now Supports Next.jsWe're excited to announce that PropelAuth supports Next.js on both the frontend and backend. With PropelAuth, you can easily build and configure login...
  3. 5 Reasons Why You Should Use PropelAuthPropelAuth is an easy to use authentication service. It provides easily configurable login, signup, profile pages, organization management and more. H...