Identity infrastructure built for
autonomous agents & teams
Stand up Customer IAM (CIAM), Workforce IAM (WIAM), and an Agent Control Plane (AIAM) in a single tool call. Pure usage-based pricing with zero seat licensing and zero SSO tax.
Connect to https://id.ulexid.com/mcp and set up Ulexid CIAM for this web app. Give me the approval link to sign in and authorize you.A unified identity control plane
Customer identity for your users, workforce identity for your corporate teams, and an agent control plane for autonomous AI development.
Customer Identity & Access Management
Drop-in modern authentication for web applications and SaaS (Auth0, Clerk & AWS Cognito parity). Passkeys, passwordless 6-digit email OTP, branded social logins, and B2B corporate SSO.
- ✓ Passkeys & Email OTP: FIDO2 biometric login and 6-digit verification codes
- ✓ Social & B2B SSO: Google, GitHub, Microsoft, Apple, Okta, and Entra ID
- ✓ User Token Management: Scoped tokens, custom TTLs (60s–24h), session revocation
- ✓ Zero Seat Fees: Unlimited end-users with no per-user pricing tiers
Workforce Identity & Access Management
Enterprise identity control for internal employees and corporate organizations (Microsoft Entra ID & WorkOS parity). Full SAML 2.0 IdP & SP, real-time SCIM 2.0 automated directory syncing, and the Employee App Launchpad.
- ✓ SAML 2.0 IdP & SP: Authoritative identity provider with XML-DSig SHA-256
- ✓ SCIM 2.0 Lifecycle: Inbound & outbound automated directory sync
- ✓ Employee Keys & PATs: Self-service personal access tokens with fine-grained RBAC
- ✓ Employee Launchpad: Centralized corporate SSO portal at
/app/launchpad
Agent Identity & Access Management
Built directly into both CIAM and WIAM to govern autonomous AI coding agents and background workloads. Zero-touch RFC 8628 developer consent, 90+ MCP tools, and RFC 8693 token exchange for service delegation.
- ✓ Zero-Touch Deep Links: Agent calls
ulex_connect_agent, prints/activatelink - ✓ RFC 8693 Token Exchange: Secure delegation across agents and microservices
- ✓ Attenuated Runtime Keys: Enforced scope subsets and automatic family revocation
- ✓ Headless Simulation: 90+ deterministic MCP tools with zero phone/CAPTCHA blockers
How agents build identity with Ulexid
No cloud credentials to copy-paste. No CAPTCHAs. Your agent requests authorization, and you approve in one click.
Prompt Your Agent
Tell your coding assistant: "Connect to https://id.ulexid.com/mcp and implement Ulexid auth."
Agent Generates Deep Link
The agent calls ulex_connect_agent and outputs a deep link:
https://id.ulexid.com/activate?code=ABCD-EFGH
One-Click Developer Consent
You click the link, sign in (or an isolated new tenant is auto-created), review requested scopes, and click Approve.
Agent Ships Complete Code
The agent claims scoped credentials, fetches Next.js/React recipes via ulex_get_integration_guide, and generates working code.
Pure usage pricing. Zero seat tax.
Only pay for what you store and what you request. No per-seat penalties, no enterprise SSO upcharges, and no surprise tier traps.
Feature comparison across CIAM, WIAM & AIAM
How Ulexid compares to Auth0, Clerk, Microsoft Entra ID, and AWS Cognito.
| Feature | Ulexid | Auth0 / Okta | Clerk | Microsoft Entra ID | AWS Cognito |
|---|---|---|---|---|---|
| Agent-Native MCP Tools | ✓ Native (90+ Tools) | None | None | None | None |
| Zero-Touch Agent Onboarding (RFC 8628) | ✓ Full Native (/activate) | Manual Setup | Manual Setup | Manual Setup | Manual Setup |
| Customer IAM (Passkeys, 6-Digit OTP, Social) | ✓ Complete CIAM | ✓ Yes | ✓ Yes | Complex B2C | Custom Lambdas |
| User & Agent Scoped Token Management | ✓ Granular Scopes + TTLs | Basic Tokens | Session JWTs Only | ✓ Yes | Fixed 1h TTLs |
| Workforce SAML 2.0 IdP & SP | ✓ Both IdP & SP Included | SP only ($$$ for IdP) | SP only ($$$) | ✓ Yes | SP only (No IdP) |
| SCIM 2.0 Inbound & Outbound Sync | ✓ Inbound + Outbound | Enterprise Tier ($$$) | None | ✓ Yes | None |
| RFC 8693 Token Exchange for AI Delegation | ✓ Native OAuth Grant | Custom Microservices | None | Custom API | None |
| Active-Active Dual-Region Resilience | ✓ us-east-2 + us-west-2 | Enterprise Add-on | Single Region | Multi-Geo Add-on | Single Region |
| Tamper-Evident Hash-Chained Audit Logs | ✓ SHA-256 Hash Chain | Standard Log (Limit) | Audit Logs (Basic) | Log Analytics | CloudTrail Only |
| Enterprise SSO Tax | $0 (Included for all) | $150–$1,000+/mo | Custom Enterprise Plan | P1 / P2 License | Custom IAM SAML |
| Per-Seat License Fees | $0 (Pure Usage-Based) | $2 to $15 / seat | Per-user tiers | $6 to $15 / user / mo | $0 (MAU based) |