← Back to all sparks
H

Hanko

INFRA · APIS
Velocity0.0

Open-source authentication platform providing passkeys, passwordless login, and MFA with full data ownership

Hanko maps SAML and OIDC attributes into custom claims, a step toward enterprise SSO.

authenticationpasskeysenterprise-ssoidentityopen-source
◆Current state
Hanko is a passkey-first authentication platform, open source or cloud-hosted. October's update lets teams bring attributes from SAML and custom OIDC connections into Hanko as custom claims, configured in the Cloud Console. Earlier 2026 releases added Firebase password hash import, inactivity logouts, session transparency and stronger passcode policies.
◆Where it's heading
Hanko is filling in what enterprise customers expect from an identity provider: SSO attribute mapping, session controls and migration paths from incumbents. Releases arrive monthly or less, each with a narrow feature.
◆Prediction
More enterprise SSO features, such as directory sync or role mapping from claims, are the likely next additions; the entries do not confirm a timeline.

◆Recent moves

  1. 1mo ago

    Hanko maps SAML and OIDC attributes to custom claims

    SAML and custom OIDC attributes can now flow into Hanko as configurable custom claims. It extends the enterprise SSO work behind the custom OAuth connections and Firebase migration support.

  2. 5mo ago

    June 2026 Updates

    Firebase Scrypt password hash import support is a targeted migration feature — teams on Firebase Auth can now bring existing user credentials into Hanko without forcing a password reset. It fits the pattern of Hanko actively lowering the switching cost from incumbent auth platforms.

  3. 7mo ago

    April 2026 Updates

    Inactivity logouts proactively terminate sessions without user action — a security control commonly required in regulated environments. This continues the session management hardening trend visible across several recent Hanko releases.

  4. 8mo ago

    March 2026 Updates

    Session token transparency improvements give users and developers clearer visibility into active sessions — a small but consistent step toward the kind of audit-friendly session layer that enterprise teams expect from an auth platform.

  5. 9mo ago

    January 2026 Updates

    January 2026 bundles several meaningful improvements across the auth stack: stronger passcode policies, better key management integration, more robust auth flows in Hanko Elements, and expanded localization. No single change is architectural, but the combined scope is a solid incremental release.

  6. 11mo ago

    December 2025 Updates

    OAuth and OIDC third-party integration updates broaden Hanko's compatibility with external identity providers — following the custom OAuth connections feature from September 2025, this keeps the integration surface current.