Identity infrastructure built for
autonomous agents & teams
Stand up production-grade authentication, enterprise SSO, SCIM 2.0 directory sync, passkeys, and tamper-evident audit logs in a single tool call. Deterministic, scriptable, and completely headless.
Connect to https://dev.ulex.cntnus.app/mcp and set up Ulex CIAM for this web app. Give me the approval link to sign in and authorize you.
npx @ulex/mcp-server
// 2. Bootstrap app, organization, SSO connection & admin credentials in 1 tool call
{
"name": "ulex_bootstrap_app",
"arguments": {
"application_name": "Acme Cloud",
"organization_name": "Acme Corp",
"organization_domain": "acme.com",
"connection_strategy": "okta_sso",
"admin_email": "admin@acme.com"
}
}
npm install -g @ulex/cli
# Authenticate with your tenant API key
ulex auth login --api-key "ulk_live_..."
# Run 60-second quickstart wizard
ulex quickstart --name "Acme App" --domain "acme.com"
# Headless simulated login returning real JWT access tokens
ulex login simulate --email "admin@acme.com"
curl -sS https://dev.ulex.cntnus.app/status | jq
# Inspect OIDC discovery document
curl -sS https://dev.ulex.cntnus.app/.well-known/openid-configuration
# Query the live JWKS signing key set
curl -sS https://dev.ulex.cntnus.app/.well-known/jwks.json
Built for agents, robust enough for enterprise
Everything an autonomous coding agent needs to build, test, and ship complete B2B SaaS authentication without blockers.
Customer Identity (Auth0 & Cognito Replacement)
Drop-in modern authentication for web apps and SaaS. Passkeys, passwordless 6-digit email OTP, branded social logins (Google, GitHub, Microsoft, Apple), self-service user signup, and 100% active-active multi-region reliability.
Workforce Identity (Okta Replacement)
Enterprise identity control for internal teams and B2B customers. SAML 2.0 IdP & SP, SCIM 2.0 automated directory provisioning, verified corporate domains, fine-grained RBAC, and tamper-evident hash-chained audit logging.
Agent Control Plane (Zero-Touch Automation)
The first identity control plane built natively for AI coding agents. 90+ MCP tools, zero-touch RFC 8628 developer consent, deterministic simulation, and automated code generation for your frontend and backend.
Headless & Deterministic
No browser automation, no CAPTCHAs, and no phone SMS. Run real identity flows headlessly in end-to-end tests with real JWT tokens and deterministic identifiers.
Enterprise Federation
OIDC / OAuth 2.1 with PKCE S256 and SAML 2.0 Service Provider. Seamlessly federate with Google Workspace, Microsoft Entra ID, and Okta with Just-In-Time (JIT) provisioning.
SCIM 2.0 Directory Sync
Inbound and outbound SCIM 2.0 lifecycle management. Synchronize users, groups, and memberships in real time with enterprise corporate directories.
Passkeys & Strong Auth
Hardware-backed WebAuthn FIDO2 passkeys, TOTP authenticator factors, and rotating refresh token families with replay detection and automated family revocation.
Cryptographic Audit Chain
Immutable, append-only audit trail chained by SHA-256 hashes. Tamper detection built into the control plane with automatic pseudonymization for HIPAA and SOC 2 compliance.
Real-Time Webhook Engine
34 distinct security and lifecycle event types. Verified against raw payloads using HMAC-SHA256 signatures with 5-minute replay guard and automated SSRF egress blocking.
Active-Active multi-region resilience
Deployments operate active-active across AWS us-east-2 and us-west-2 with zero single point of failure.
Agents & Clients
MCP Agent Clients
Next.js Web Apps
CLI & Admin Users
ulex Control Plane
CloudFront Edge + DDoS Shield
Regional Lambda & DynamoDB
KMS Envelopes & Audit Sink
Enterprise IdPs
Okta · Microsoft Entra
Google Workspace
SCIM 2.0 Directories
Feature comparison
How Ulex compares to Auth0, AWS Cognito, Okta, and Microsoft Entra ID.
| Feature | ulex | Auth0 | AWS Cognito | Okta |
|---|---|---|---|---|
| Agent-Native MCP Tools | ✓ Native (90+ Tools) | None | None | None |
| Zero-Touch Agent Onboarding (RFC 8628) | ✓ Full Native (/activate) | Manual Setup | Manual Setup | Manual Setup |
| Active-Active Multi-Region | ✓ us-east-2 + us-west-2 | Enterprise Add-on | Manual DynamoDB Sync | Enterprise Add-on |
| Passwordless Email OTP & Passkeys | ✓ Native Out of the Box | ✓ Yes | Complex Custom Lambda | ✓ Yes |
| Enterprise SAML 2.0 & SCIM 2.0 | ✓ Included in Core | Enterprise Tier ($$$) | SAML Only (No SCIM) | ✓ Yes ($$$) |
| Automated Web Framework Recipes | ✓ ulex_get_integration_guide | Static Docs Only | Static Docs Only | Static Docs Only |
| Tamper-Evident Hash-Chained Audit Logs | ✓ Cryptographic Chain | Standard Log (Retention Limit) | CloudTrail Logs Only | Standard Log |
| Local Development Engine | ✓ Free (npx @ulex/mcp-server) | Cloud Only | Cloud Only | Cloud Only |
Inspect live services
Verified open standards and operational endpoints available directly on this deployment.