Single sign-on your finance team can price.
SAML and OpenID Connect for every application your staff sign in to — with multi-factor authentication, directory sync and audit logs in the price rather than beside it. No annual minimum, no seat commitment, no call with sales.
Create your organisation Why Testaract
Free for up to 10 people and 3 applications. No card.
What you get on the free tier
OpenID Connect and SAML 2.0
Authorization code flow with PKCE, and SAML for the applications that only speak it. Both from one session, so signing in once works across both.
Passkeys and TOTP
Phishing-resistant second factors, with recovery codes. Requiring a second factor is a property of the application, so you can demand it of your admin console without demanding it everywhere.
Your own SAML identity
Your own entity ID and your own signing certificate, not one shared across customers — with rotation you can stage, so service providers get a window to pick up the new key.
Built to be boring about the things that matter
Tenant isolation is enforced by the database, not by application code: every table carries row-level security keyed to your organisation, so a missing check returns nothing rather than somebody else’s rows. Sessions and tokens live in Postgres rather than an eventually consistent cache, because revoking access should mean revoked now.
No access token ever reaches browser storage. The admin console holds yours server-side behind an HttpOnly cookie — so a script on the page cannot walk off with a refresh token.
Start in a few minutes
Create your organisation, set a password from the link we email you, add a second factor, and register your first application. Nothing to install and nobody to talk to.