LoginRadius is a customer identity and access management company. It runs the registration, login and profile layer for consumer and business facing applications as a managed service, so mid-market and enterprise organisations can offer single sign-on, passwordless login and consent handling without building and operating their own identity servers.
The same identity layer also covers backend services and AI agents acting for users, so one set of policies decides who and what can reach customer data.
At A Glance
| Vendor | LoginRadius |
|---|---|
| Category | Customer identity and access management (CIAM), identity as a service |
| Identities covered | Customers, partners, machine-to-machine apps, AI agents |
| Deployment | Fully managed SaaS across 20+ data centre regions |
| Agentic AI | Agentic IAM and Auth for MCP |
| Customers | IFMA, Harry Rosen, BroadcastMed, Rede Gazeta, Mapegy |
| Certifications | SOC 2 Type II, ISO/IEC 27001, 27017, 27018, CSA STAR CCM |
What LoginRadius Does
Every customer facing application needs sign-up, sign-in, profile storage and privacy controls, and each one built in house tends to drift from the others. LoginRadius offers this as fully managed customer IAM: a customer configures authentication methods, branding, workflows and data storage in a tenant, and LoginRadius runs the service behind it. The aim is one consistent identity layer across every application a brand runs, with the same consent and token model applied to people, backend services and AI agents.
Products
Authentication
The authentication product covers the ways people sign in. It suits teams that want modern login options without writing them from scratch, and it includes:
- Single sign-on and federation protocols
- Passkeys and passwordless login
- Adaptive MFA and push notification MFA
- Hosted pages, plugins and widgets for login screens
Consent Management And Customer Insights
Organisations subject to GDPR need a record of what each customer agreed to. Consent management captures that consent at registration and later, while customer insights reports on the user data held in the platform, so privacy and marketing teams work from the same profiles.
Machine-To-Machine Authorisation
Backend services and integrations also need to prove who they are. LoginRadius issues a credential set to each M2M app, which uses the OAuth client credentials flow to authenticate and obtain tokens. Predefined scopes limit each app to the data it needs.
Agentic IAM
Agentic IAM is for product teams letting AI agents act on behalf of their users. Each agent is registered as an identity with its own scoped credentials, lifecycle and audit history, and its access can be revoked at any time.
Auth For MCP
Auth for MCP is the authorisation layer for organisations exposing MCP servers, tools and APIs to AI agents. LoginRadius acts as the authorisation server, issuing short-lived tokens tied to a user, a scope and a target server.
AI Auth Studio
AI Auth Studio helps teams design login screens quickly. It produces “branded auth flows from screenshot, URL, or prompt”, which can then be edited in HTML, CSS and JavaScript.
How It Works
LoginRadius is delivered as a fully managed cloud service, hosted in more than 20 data centre regions, which lets customers choose where identity data lives.
| Component | What it does |
|---|---|
| Tenant and data stores | Each customer configures a tenant. Data stores can be isolated or combined per brand, so a group with several brands can keep customer records separate or share them. |
| APIs and SDKs | An API reference documents every endpoint with request and response schemas, alongside web and mobile SDKs and CLI scripting. |
| Hosted pages and orchestration | Hosted login pages, plugins and widgets sit in front of drag and drop workflow orchestration, with custom scripts, configurable email and SMS providers, templates and dynamic forms. |
| Connectors and webhooks | Cloud connectors and client-side connectors pass profile data to third-party applications, and webhooks deliver real-time updates. |
Identities And Systems Covered
| Customers and members | Consumer and member identities, with social login, SSO and passwordless options. |
|---|---|
| Partners | Partner IAM and federated SSO for business partners. |
| Machine-to-machine apps | Backend services authenticated with client credentials and scopes. |
| AI agents | Agents registered as first-class identities with short-lived, scope-bound tokens. |
| MCP servers and tools | Token-based authorisation for MCP servers, tools and APIs, with each token bound to one target server. |
| AI hosts | Delegated tokens issued to hosts such as Claude Desktop and Cursor. |
Agentic AI Capabilities
Delegated Agent Tokens
Agents act for users through delegated OAuth 2.1 access tokens. The user’s consent is captured before the agent gets access, and revoking that consent ends the delegation immediately. Agents and external clients onboard through Dynamic Client Registration and CIMD without handling user credentials, and token exchange (RFC 8693) passes narrower tokens to downstream tools.
MCP Authorisation Flow
For MCP, LoginRadius issues the initial user-rooted token through OAuth 2.1 with PKCE. Tokens are short-lived and scoped to single actions, for example mcp:tool:invoke:book_flight, and bound to a specific server so they cannot be forwarded elsewhere. An agent needs explicit user approval and scoped permissions before it reaches a third-party system, and consent screens are customisable OIDC and OAuth flows.
Step-Up And Audit
High-risk actions can require human-in-the-loop approval, Adaptive MFA or re-approval. Audit logs record the user, agent, tool and action for every call, showing who acted, on whose behalf, when and why, which supports SOX and GDPR reporting.
AI Assistance In The Product
AI Search and Assistance answers questions over the LoginRadius documentation with source-linked responses, and a LoginRadius MCP server lets teams automate platform administration from AI tools.
Availability
Auth for MCP is generally available.
Integrations
| Area | Integrations |
|---|---|
| SIEM | Audit log integration with Splunk |
| Marketing and analytics | Marketo, CXense, Google Analytics |
| Custom identity providers | Doximity |
| Social login | Google, Facebook, Twitter, LinkedIn |
Company Background
| Founded | 2012, in Canada. |
|---|---|
| Headquarters | Vancouver, British Columbia, Canada. |
| Other offices | San Francisco, United States; Jaipur and Hyderabad, India. |
| Leadership | Rakesh Soni (CEO) and Ajoy Anand (Chief Operating Officer). |
| Funding | First venture round in 2014 from Real Ventures, BDC and Yaletown Venture Partners, followed by a $17M Series A in 2018 led by M12, Microsoft’s venture fund, and ForgePoint Capital. |
| Ownership | Acquired by Volaris Group, a division of Constellation Software, in a deal announced on 20 August 2026. LoginRadius continues to operate independently within the Volaris security portfolio. |
| Scale | A reported 500+ brands, 1.5B+ identities and 7.6B+ API calls a month. |
| Compliance | HIPAA, GDPR and CCPA support alongside the certifications above. |
| Recognition | Included in the KuppingerCole Leadership Compass for CIAM (2024). |
Note: This overview is compiled from LoginRadius’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.