Authentication
Aero2 supports multiple authentication methods. You can enable one or more methods per application depending on your requirements.
Available Methods
Social Login (OAuth/OIDC)
Sign in with GitHub, Google, or any OAuth2/OIDC-compliant identity provider. Aero2 handles the full OAuth flow and creates local user accounts automatically.
Email & Password
:::warning Not Planned Aero2 is passwordless-first. Use email code or social login instead. :::
Email/password is deferred indefinitely.
Passwordless / Magic Links
:::info Coming Soon This feature is under active development. The design below reflects our planned implementation. :::
One-click email sign-in without passwords. Users receive a single-use link that signs them in instantly.
Multi-Factor Authentication (MFA)
Add a second layer of security with TOTP authenticator apps, WebAuthn/Passkeys, recovery codes, and per-app policies (off / optional / required). SMS OTP is planned.
Single Sign-On (SSO)
:::info Coming Soon This feature is under active development. The design below reflects our planned implementation. :::
SAML 2.0 support for enterprise identity providers such as Okta, Azure AD, and OneLogin.