Frontegg
Frontegg is a customer identity and access management (CIAM) platform for B2B SaaS. It provides self-serve authentication, multi-tenancy, role-based access control, single sign-on, SCIM provisioning, entitlements, and an admin portal that ships with the product. Frontegg publishes OpenAPI specifications for its Authentication and Identity, Account Management, Single Sign-On, SCIM Provisioning, Applications, Audits, Entitlements, Entitlements Agent (PDP), and Environment Authentication APIs, all served from regional gateway endpoints (api.frontegg.com, api.us.frontegg.com, api.au.frontegg.com, api.ca.frontegg.com).
10 APIs
10 Capabilities
0 Features
AuthenticationAuthorizationIdentity ManagementCIAMB2B SaaSMulti-TenancyRBACSSOSCIMEntitlementsOAuthOpenID Connect
The Frontegg Authentication and Identity Management API handles login, registration, MFA, passwordless flows, social logins, sessions, passwords, passkeys, OAuth, OIDC, JWT, use...
The Frontegg Account Management (Tenants) API manages B2B accounts, tenant hierarchies, sub-accounts, tenant metadata, invitations, and tenant-scoped configuration. Multi-tenanc...
The Frontegg Single Sign-On (Team) API manages SAML and OIDC SSO configurations, IdP metadata, JIT provisioning, enterprise connections, and domain claims. Frontegg ships with 5...
The Frontegg SCIM 2.0 Provisioning API implements directory provisioning for users and groups from external identity providers such as Okta, Azure AD, and Google Workspace.
The Frontegg Entitlements API manages feature flags, plans, subscriptions, packages, bundles, and entitlements that determine what users and tenants are allowed to do. 29 operat...
The Frontegg Entitlements Agent is a Policy Decision Point (PDP) that runs locally inside customer infrastructure to evaluate entitlements with millisecond latency. Default list...
The Frontegg Applications (Multi-Apps) API manages multiple application surfaces under a single Frontegg environment, each with its own login experience, integrations, and tenan...
The Frontegg Audits API exposes the audit log surface for compliance, SOC 2, and security incident response. Events are streamed and queryable by tenant.
The Frontegg Environment Authentication endpoint exchanges a Client ID and API Key for an environment-scoped JWT, which is then used as the Bearer token for Management APIs. Sin...
The combined OpenAPI specification bundles all Frontegg public services (Identity, Tenants, SSO, SCIM, Entitlements, Applications, Audits, and Environment Authentication) into a...
Run Capabilities with Naftiko — Deploy and orchestrate these API capabilities using Naftiko Fleet.
Run with Naftiko
Frontegg Applications API capability. 20 operations. Lead operation: Get all applications for an environment. Self-contained Naftiko capability for the Frontegg Frontegg Applica...
Run with Naftiko
Frontegg Audits API capability. 8 operations. Lead operation: Get audits. Self-contained Naftiko capability for the Frontegg Frontegg Audits business surface.
Run with Naftiko
Composed Naftiko capability orchestrating a complete B2B onboarding flow on Frontegg: obtain an environment token, create a tenant, invite users, configure SSO/SCIM, and enable ...
Run with Naftiko
Frontegg Entitlements Agent API capability. 3 operations. Lead operation: Is entitled to feature. Self-contained Naftiko capability for the Frontegg Frontegg Entitlements Agent ...
Run with Naftiko
Frontegg Entitlements API capability. 51 operations. Lead operation: Get account (tenant) plans. Self-contained Naftiko capability for the Frontegg Frontegg Entitlements busines...
Run with Naftiko
Frontegg Env Auth API capability. 1 operations. Lead operation: Authenticate with env credentials. Self-contained Naftiko capability for the Frontegg Frontegg Env Auth business ...
Run with Naftiko
Frontegg Identity API capability. 100 operations. Lead operation: Authenticate using API token. Self-contained Naftiko capability for the Frontegg Frontegg Identity business sur...
Run with Naftiko
Frontegg SCIM API capability. 5 operations. Lead operation: Get all SCIM configurations. Self-contained Naftiko capability for the Frontegg Frontegg SCIM business surface.
Run with Naftiko
Frontegg SSO API capability. 29 operations. Lead operation: Get vendor's SAML config. Self-contained Naftiko capability for the Frontegg Frontegg SSO business surface.
Run with Naftiko
Frontegg Tenants API capability. 25 operations. Lead operation: Get account (tenant) by ID. Self-contained Naftiko capability for the Frontegg Frontegg Tenants business surface.
Run with Naftiko
Run Capabilities with Naftiko — Deploy and orchestrate these API capabilities using Naftiko Fleet.
Run with Naftiko
9 rules ·
3 errors
3 warnings
3 info
SPECTRAL
9 rules ·
3 errors
3 warnings
3 info
SPECTRAL
9 rules ·
3 errors
3 warnings
3 info
SPECTRAL
9 rules ·
3 errors
3 warnings
3 info
SPECTRAL
9 rules ·
3 errors
3 warnings
3 info
SPECTRAL
9 rules ·
3 errors
3 warnings
3 info
SPECTRAL
9 rules ·
3 errors
3 warnings
3 info
SPECTRAL
9 rules ·
3 errors
3 warnings
3 info
SPECTRAL
9 rules ·
3 errors
3 warnings
3 info
SPECTRAL
aid: frontegg
name: Frontegg
description: |
Frontegg is a customer identity and access management (CIAM) platform for B2B SaaS. It provides self-serve authentication,
multi-tenancy, role-based access control, single sign-on, SCIM provisioning, entitlements, and an admin portal that ships
with the product. Frontegg publishes OpenAPI specifications for its Authentication and Identity, Account Management,
Single Sign-On, SCIM Provisioning, Applications, Audits, Entitlements, Entitlements Agent (PDP), and Environment
Authentication APIs, all served from regional gateway endpoints (api.frontegg.com, api.us.frontegg.com, api.au.frontegg.com,
api.ca.frontegg.com).
type: Index
image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg
tags:
- Authentication
- Authorization
- Identity Management
- CIAM
- B2B SaaS
- Multi-Tenancy
- RBAC
- SSO
- SCIM
- Entitlements
- OAuth
- OpenID Connect
url: https://raw.githubusercontent.com/api-evangelist/frontegg/refs/heads/main/apis.yml
created: '2026-05-22'
modified: '2026-05-22'
specificationVersion: '0.19'
apis:
- aid: frontegg:frontegg-identity
name: Frontegg Authentication and Identity Management API
description: |
The Frontegg Authentication and Identity Management API handles login, registration, MFA, passwordless flows, social
logins, sessions, passwords, passkeys, OAuth, OIDC, JWT, user management, roles, permissions, groups, and tenant
membership. With 232 documented operations across 305 schemas, this is the core of the Frontegg CIAM platform.
humanURL: https://developers.frontegg.com/ciam/api/identity
baseURL: https://api.frontegg.com/identity
tags:
- Authentication
- Identity
- User Management
- MFA
- Passwordless
- OAuth
- OpenID Connect
- JWT
- Sessions
properties:
- type: Documentation
url: https://developers.frontegg.com/ciam/api/identity
- type: APIReference
url: https://developers.frontegg.com/ciam/api/identity
- type: OpenAPI
url: openapi/frontegg-identity-openapi.yml
- type: SpectralRules
url: rules/frontegg-identity-rules.yml
- type: NaftikoCapability
url: capabilities/frontegg-identity.yaml
- aid: frontegg:frontegg-tenants
name: Frontegg Account Management API
description: |
The Frontegg Account Management (Tenants) API manages B2B accounts, tenant hierarchies, sub-accounts, tenant metadata,
invitations, and tenant-scoped configuration. Multi-tenancy is a core Frontegg concept and this API is how callers
create and manage the tenant graph.
humanURL: https://developers.frontegg.com/ciam/api/tenants
baseURL: https://api.frontegg.com/tenants
tags:
- Tenants
- Accounts
- Multi-Tenancy
- B2B
properties:
- type: Documentation
url: https://developers.frontegg.com/ciam/api/tenants
- type: OpenAPI
url: openapi/frontegg-tenants-openapi.yml
- type: SpectralRules
url: rules/frontegg-tenants-rules.yml
- type: NaftikoCapability
url: capabilities/frontegg-tenants.yaml
- aid: frontegg:frontegg-sso
name: Frontegg Single Sign-On API
description: |
The Frontegg Single Sign-On (Team) API manages SAML and OIDC SSO configurations, IdP metadata, JIT provisioning,
enterprise connections, and domain claims. Frontegg ships with 5 Enterprise Connections included on the free Pay
As You Go tier.
humanURL: https://developers.frontegg.com/ciam/api/team
baseURL: https://api.frontegg.com/team
tags:
- SSO
- SAML
- OIDC
- Enterprise
properties:
- type: Documentation
url: https://developers.frontegg.com/ciam/api/team
- type: OpenAPI
url: openapi/frontegg-sso-openapi.yml
- type: SpectralRules
url: rules/frontegg-sso-rules.yml
- type: NaftikoCapability
url: capabilities/frontegg-sso.yaml
- aid: frontegg:frontegg-scim
name: Frontegg SCIM Provisioning API
description: |
The Frontegg SCIM 2.0 Provisioning API implements directory provisioning for users and groups from external identity
providers such as Okta, Azure AD, and Google Workspace.
humanURL: https://developers.frontegg.com/ciam/api/scim
baseURL: https://api.frontegg.com/directory
tags:
- SCIM
- Provisioning
- Directory
- Identity
properties:
- type: Documentation
url: https://developers.frontegg.com/ciam/api/scim
- type: OpenAPI
url: openapi/frontegg-scim-openapi.yml
- type: SpectralRules
url: rules/frontegg-scim-rules.yml
- type: NaftikoCapability
url: capabilities/frontegg-scim.yaml
- aid: frontegg:frontegg-entitlements
name: Frontegg Entitlements API
description: |
The Frontegg Entitlements API manages feature flags, plans, subscriptions, packages, bundles, and entitlements that
determine what users and tenants are allowed to do. 29 operations across 52 schemas govern entitlement decisions in
the CIAM platform.
humanURL: https://developers.frontegg.com/ciam/api/entitlements
baseURL: https://api.frontegg.com/entitlements
tags:
- Entitlements
- Feature Flags
- Authorization
- Plans
- Subscriptions
properties:
- type: Documentation
url: https://developers.frontegg.com/ciam/api/entitlements
- type: OpenAPI
url: openapi/frontegg-entitlements-openapi.yml
- type: SpectralRules
url: rules/frontegg-entitlements-rules.yml
- type: NaftikoCapability
url: capabilities/frontegg-entitlements.yaml
- aid: frontegg:frontegg-entitlements-agent
name: Frontegg Entitlements Agent (PDP)
description: |
The Frontegg Entitlements Agent is a Policy Decision Point (PDP) that runs locally inside customer infrastructure to
evaluate entitlements with millisecond latency. Default listen port 8181. Java and Node.js bindings ship as separate
SDKs.
humanURL: https://developers.frontegg.com/ciam/api/agent
baseURL: http://localhost:8181
tags:
- PDP
- Policy Decision Point
- Entitlements
- Authorization
- Sidecar
properties:
- type: Documentation
url: https://developers.frontegg.com/ciam/api/agent
- type: OpenAPI
url: openapi/frontegg-entitlements-agent-openapi.yml
- type: SpectralRules
url: rules/frontegg-entitlements-agent-rules.yml
- type: NaftikoCapability
url: capabilities/frontegg-entitlements-agent.yaml
- aid: frontegg:frontegg-applications
name: Frontegg Multi-Apps API
description: |
The Frontegg Applications (Multi-Apps) API manages multiple application surfaces under a single Frontegg environment,
each with its own login experience, integrations, and tenant scope. Useful for portfolio SaaS vendors.
humanURL: https://developers.frontegg.com/ciam/api/applications
baseURL: https://api.frontegg.com/applications
tags:
- Applications
- Multi-App
- Tenant Scoping
properties:
- type: Documentation
url: https://developers.frontegg.com/ciam/api/applications
- type: OpenAPI
url: openapi/frontegg-applications-openapi.yml
- type: SpectralRules
url: rules/frontegg-applications-rules.yml
- type: NaftikoCapability
url: capabilities/frontegg-applications.yaml
- aid: frontegg:frontegg-audits
name: Frontegg Audits API
description: |
The Frontegg Audits API exposes the audit log surface for compliance, SOC 2, and security incident response. Events
are streamed and queryable by tenant.
humanURL: https://developers.frontegg.com/ciam/api/audits
baseURL: https://api.frontegg.com/audits
tags:
- Audits
- Logging
- Compliance
- Security
properties:
- type: Documentation
url: https://developers.frontegg.com/ciam/api/audits
- type: OpenAPI
url: openapi/frontegg-audits-openapi.yml
- type: SpectralRules
url: rules/frontegg-audits-rules.yml
- type: NaftikoCapability
url: capabilities/frontegg-audits.yaml
- aid: frontegg:frontegg-env-auth
name: Frontegg Environment Authentication API
description: |
The Frontegg Environment Authentication endpoint exchanges a Client ID and API Key for an environment-scoped JWT,
which is then used as the Bearer token for Management APIs. Single operation at /auth/vendor.
humanURL: https://developers.frontegg.com/ciam/api/overview
baseURL: https://api.frontegg.com/auth/vendor
tags:
- Authentication
- Vendor
- Environment
- JWT
properties:
- type: Documentation
url: https://developers.frontegg.com/ciam/api/overview
- type: OpenAPI
url: openapi/frontegg-env-auth-openapi.yml
- aid: frontegg:frontegg-combined
name: Frontegg Combined API
description: |
The combined OpenAPI specification bundles all Frontegg public services (Identity, Tenants, SSO, SCIM, Entitlements,
Applications, Audits, and Environment Authentication) into a single document for end-to-end client generation.
humanURL: https://github.com/frontegg/openapi-public
baseURL: https://api.frontegg.com
tags:
- Combined
- Aggregated
- CIAM
properties:
- type: SourceCode
url: https://github.com/frontegg/openapi-public
- type: OpenAPI
url: openapi/frontegg-combined-openapi.yml
common:
- type: Portal
url: https://frontegg.com
- type: SignUp
url: https://frontegg-prod.us.frontegg.com/oauth/account/sign-up
- type: Documentation
url: https://developers.frontegg.com
- type: APIReference
url: https://developers.frontegg.com/ciam/api/overview
- type: GettingStarted
url: https://developers.frontegg.com/guides/getting-started/home
- type: Pricing
url: https://frontegg.com/pricing
- type: Blog
url: https://frontegg.com/blog
- type: StatusPage
url: https://status.frontegg.com
- type: StatusAtom
url: https://status.frontegg.com/history.atom
- type: StatusRSS
url: https://status.frontegg.com/history.rss
- type: GitHub
url: https://github.com/frontegg
- type: OpenAPIRepository
url: https://github.com/frontegg/openapi-public
- type: SDK
url: https://github.com/frontegg/frontegg-react
name: React SDK
- type: SDK
url: https://github.com/frontegg/frontegg-nextjs
name: Next.js SDK
- type: SDK
url: https://github.com/frontegg/frontegg-angular
name: Angular SDK
- type: SDK
url: https://github.com/frontegg/frontegg-vue
name: Vue.js SDK
- type: SDK
url: https://github.com/frontegg/nodejs-sdk
name: Node.js SDK
- type: SDK
url: https://github.com/frontegg/python-sdk
name: Python SDK
- type: SDK
url: https://github.com/frontegg/frontegg-flutter
name: Flutter SDK
- type: SDK
url: https://github.com/frontegg/frontegg-ios-swift
name: iOS Swift SDK
- type: SDK
url: https://github.com/frontegg/frontegg-android-kotlin
name: Android Kotlin SDK
- type: SDK
url: https://github.com/frontegg/frontegg-ionic-capacitor
name: Ionic Capacitor SDK
- type: Tool
url: https://github.com/frontegg/terraform-provider-frontegg
name: Terraform Provider
- type: Tool
url: https://github.com/frontegg/frontegg-mcp-server
name: MCP Server
- type: Tool
url: https://github.com/frontegg/harmor
name: Harmor (data masking)
- type: Plans
url: plans/frontegg-plans-pricing.yml
- type: RateLimits
url: rate-limits/frontegg-rate-limits.yml
- type: FinOps
url: finops/frontegg-finops.yml
- type: Vocabulary
url: vocabulary/frontegg-vocabulary.yml
- type: JSONLDContext
url: json-ld/frontegg-context.jsonld
maintainers:
- FN: Kin Lane
email: [email protected]