Roadmap

Built in order, in public.

Each release is a GitHub milestone you can watch, with every ticket linked. We finish one before starting the next, and a release only counts once a stranger can use it: code, docs, a guide, and a release note.

Shipped today

v0.18.0, released 8 October 2026. Passkeys, magic links, codes, TOTP, sessions, audit and SDKs for 11 frameworks.

Release notes →
The releases

From sign-in to the whole stack.

  1. v0.19AuthIn progress

    The right choice today

    • Fix what early adopters trip on
    • Honest comparison pages and a cost calculator
    • Security posture page and published FIDO conformance results
  2. v0.20Auth

    Never locked out

    • Recovery codes and self-service recovery
    • Break-glass admin no policy can disable
    • Draft, publish and roll back auth policy
  3. v0.21Auth

    OpenID Provider

    • Any app can sign in with Seamless, no SDK needed
    • Hosted, branded login pages
    • OpenID conformance tests in CI, then certification
  4. v0.22Auth

    Roles, permissions and hooks

    • Permissions and organization-scoped roles in the token
    • Custom claims, signed webhooks and login hooks
    • Audit streaming to your SIEM
  5. v1.0Auth

    Stable platform

    • Frozen API and token contracts with an upgrade policy
    • Config as code and full export
    • An independent security review
  6. v1.1Auth

    B2B organizations and enterprise SSO

    • Invitations and verified domains
    • OIDC and SAML connections per organization
    • Self-service SSO setup for your customers' admins
  7. v1.2Identity

    SCIM and attack protection

    • SCIM 2.0 server for users and groups
    • Credential-stuffing detection and pluggable CAPTCHA
    • Translated login pages
  8. v2.0Identity

    Workforce identity

    • SAML identity provider and an app launcher
    • Directory sync with Google Workspace and Entra ID
    • Joiner, mover and leaver lifecycle
  9. v2.1Access

    Strong auth everywhere

    • Forward-auth for reverse proxies
    • RADIUS and LDAP for VPNs and legacy apps
    • Shared Signals for instant session revocation
  10. v3.0Secrets

    Secrets on Seamless identity

    • Vaults unlocked with a passkey
    • Sharing through Seamless groups
    • Scope revisited once v2.1 ships
Four lanes

How the releases add up.

Available now, v0.18.0

Auth

Sign people in to your apps. The job teams rent Auth0 for today.

Planned, v2.0

Identity

Run the directory for your whole workforce. The job teams rent Okta for today.

Planned, v2.1

Access

Put strong auth in front of everything else. The job teams rent Duo for today.

Later, v3.0

Secrets

Keep your team's passwords and keys safe. The job teams rent 1Password for today.

Secrets is furthest out on purpose. A password vault needs native apps and browser extensions, and good self-hosted vaults already exist. We'll look at its scope again once v2.1 ships.

Don't wait for the roadmap.

Sign-in, passkeys and sessions work today. Start with those, and the rest arrives as releases you can upgrade into.

$ npx seamless-cli init my-app
Start the quickstartStar it on GitHub

Want help hosting or migrating? Say hello