Logto
Logto is an open-source identity and access management platform. It acts as an OpenID Connect, OAuth 2.1 and SAML provider with social and enterprise SSO, MFA, role-based access control and organizations, all managed from a web Admin Console.
Logto
In Development
This script is currently in active development and may be unstable or incomplete. Use in production environments is not recommended.
This script is currently in active development and may be unstable or incomplete. Use in production environments is not recommended.
Installation
Default install:
1
bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/DevScripts/main/ct/logto.sh)"
Notes
There is no default account and only one admin is allowed. Create it in the Admin Console on port 3002 right after the install, before anyone else does.
Both ports use a self-signed certificate. Accept it on https://[IP]:3001 as well as on port 3002, or the Admin Console cannot reach the API.
For real OIDC use, put Logto behind a reverse proxy: set ENDPOINT and ADMIN_ENDPOINT in /opt/logto_data/.env to your HTTPS domains, add TRUST_PROXY_HEADER=1, drop the HTTPS_* lines and restart logto.