Add SSO, SCIM and KYC to your product with a few lines of code. No US jurisdiction risk. NIS2 and DORA-ready out of the box.
Features
The complete IAM stack your enterprise customers require — built natively on EU infrastructure, outside CLOUD Act reach.
SAML 2.0 and OIDC support for any identity provider — Okta, Entra ID, Google Workspace and more. One integration, all IdPs.
Automatic user and group sync from corporate directories. Users are provisioned and deprovisioned in real time.
EU-native identity verification with GDPR-compliant data handling. No data leaves European jurisdiction.
Immutable, tamper-proof event trail. Query, export and forward logs to your SIEM. Required for NIS2 and DORA.
Bridge legacy LDAP and Active Directory into modern SAML/OIDC flows. Sell into enterprise without rearchitecting.
Self-serve setup for your customers' IT admins. Send a link — they configure their IdP themselves. No back-and-forth.
Node.js, Python, Go and REST APIs. Normalised objects, webhook events and multiple environments out of the box.
Architected for EU Digital Identity from the ground up. EUDIW compatible by design — when the wallet rolls out, your customers won't need to re-integrate.
Built to meet NIS2 Article 21 and DORA ICT risk requirements by default. Compliance documentation included.
Developer-first
A clean REST API with normalised responses. Add enterprise SSO to your product with under 10 lines of code.
One package covers SSO, SCIM, KYC and audit logs. Works with your existing auth stack.
Send your user to the thoryn-hosted auth flow. We handle the IdP negotiation, SAML assertion validation and token exchange.
A consistent user object regardless of which IdP your customer uses. Ship once, works everywhere.
Standard patterns throughout. Real-time webhook events for directory sync, user provisioning and audit log forwarding.
// Get profile + token from an IdP after SSO import Thoryn from '@thoryn/node'; const thoryn = new Thoryn('sk_eu_live_...'); const profile = await thoryn.sso.getProfileAndToken({ code: req.query.code, clientId: 'client_eu_...', }); // Normalised profile — works for any IdP // { // id: 'prof_01EU...', // email: '[email protected]', // connection_type: 'okta', // jurisdiction: 'EU', // nis2_ready: true // }
How thoryn compares
Most identity platforms give you the features. Only thoryn gives you the features without the US jurisdiction risk.
| Feature | WorkOS / Auth0 | thoryn |
|---|---|---|
| SSO — SAML & OIDC | ✓ | ✓ |
| SCIM provisioning | ✓ | ✓ |
| Audit logs | ✓ | ✓ |
| Admin portal | ✓ | ✓ |
| KYC & identity verification | — | ✓ |
| Legacy protocol gateway | — | ✓ |
| EU-only infrastructure NIS2 · DORA | — | ✓ |
| Outside US CLOUD Act jurisdiction | — | ✓ |
| eIDAS 2.0 / EUDIW compatible by design eIDAS 2.0 | — | ✓ |
| NL-incorporated legal entity | — | ✓ |
* Jurisdiction rows reflect corporate structure and data residency of US-headquartered providers, regardless of EU data center availability. A US CLOUD Act subpoena applies regardless of where servers are located.
Products
Ship the features your biggest prospects demand — without building them yourself.
SAML 2.0 and OIDC. Connects to Okta, Entra ID, Google Workspace, OneLogin, ADFS and any custom IdP. Your customer's IT admin self-configures via the hosted portal.
SCIM 2.0 provisioning from Okta, Entra ID, Google Workspace, BambooHR and more. Users and groups stay in sync automatically — deprovision in seconds.
EU-native identity verification for fintech, banking and crypto. GDPR-compliant by design, with no data leaving European jurisdiction. eIDAS-ready.
Time to value
A straightforward integration with a self-serve setup flow for your customers — ship once and move on.
Install the SDK, add a few lines of code, configure redirect URIs. Works alongside your existing auth stack.
Create your customer's org in the dashboard. Send them a self-serve link — they configure their IdP, no back-and-forth.
Test end-to-end with a real or sandbox IdP. Your first enterprise customer is live — on EU-only infrastructure, fully NIS2/DORA-ready.
COMPLIANCE STATUS
Why thoryn
US-incorporated IAM vendors — even those with EU data centers — remain subject to CLOUD Act jurisdiction. That's a compliance gap your enterprise customers are closing.
NL-incorporated, EU-infrastructure, no US parent. Your identity data is completely outside American legal reach.
Audit logs, incident reporting and ICT risk controls are built in — not bolted on. Pass your next compliance audit faster.
Send your prospect's CISO to thoryn's trust page. The compliance questions answer themselves.
Enterprise SSO included in all plans. We believe security features shouldn't be a pricing penalty.
eIDAS 2.0 · EUDIW
The EU Digital Identity Wallet (EUDIW) rolls out across all 27 member states by 2026. Regulated sectors — banks, telecoms, energy, public services — must accept wallet-based authentication. Thoryn's EUDIW connector handles the full ARF-aligned protocol stack so your team doesn't have to.
Our working proof-of-concept accepts PID (Person Identification Data) from EUDIW-compliant wallets via OpenID for Verifiable Presentations (OpenID4VP). Credentials are verified against the EU trust framework and returned as a normalised identity object — the same API your SSO integration already uses.
Pricing
Tailored to your scale. We price per conversation — no tiers, no surprise overages, no SSO tax. Contact us to discuss the right plan for your organisation.
[email protected]Tell us about your product and we'll show you how thoryn fits. No sales deck, no runaround.
EU-only infrastructure • NIS2 & DORA-ready • We'll respond within one business day