5 Authentication Features You Should Know

Mike's Notes

In last week's issue of Level-up Coding engineering newsletter, there was this article by Nikki Siapno, Engineering Manager at Canva and Co-Founder of Level Up Coding.

"Level up your engineering and system design skills. Join the growing community of engineers who prefer our visual approach to software engineering." - Level Up Coding

Resources

• https://blog.levelupcoding.com/
• https://www.linkedin.com/posts/nikkisiapno_5-authentication-features-you-should-know-activity-7297149511234199553-pF6v/
• https://www.linkedin.com/in/nikkisiapno/

5 Authentication Features You Should Know

By: Nickki Siapno
LinkedIn: 20/02/2025

Authentication isn’t just about logging in.

It involves multiple layers of security, user experience, and compliance. 

Here are five auth features you should consider adding to your applications to enhance security and provide a seamless user experience:

𝟭) 𝗟𝗼𝗴𝗶𝗻 & 𝗥𝗲𝗴𝗶𝘀𝘁𝗿𝗮𝘁𝗶𝗼𝗻

Includes secure credential storage, password hashing, and customizable user flows for seamless onboarding.

𝟮) 𝗦𝗶𝗻𝗴𝗹𝗲 𝗦𝗶𝗴𝗻-𝗢𝗻 (𝗦𝗦𝗢)

Lets users log in once and access multiple apps via OAuth 2.0, OIDC, or SAML.

𝟯) 𝗠𝘂𝗹𝘁𝗶-𝗙𝗮𝗰𝘁𝗼𝗿 𝗔𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗶𝗼𝗻 (𝗠𝗙𝗔)

Adds a second layer of security with TOTP codes, biometrics, or push notifications.

𝟰) 𝗣𝗮𝘀𝘀𝗸𝗲𝘆𝘀 (𝗪𝗲𝗯𝗔𝘂𝘁𝗵𝗻)

Passwordless authentication using biometrics and device-native security for a seamless login experience.

𝟱) 𝗠𝗮𝗴𝗶𝗰 𝗟𝗶𝗻𝗸𝘀

One-time login links sent via email, eliminating the need for passwords while enhancing UX.

𝗛𝗼𝘄 𝗱𝗼 𝘄𝗲 𝗶𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁 𝘁𝗵𝗲𝘀𝗲 𝗳𝗲𝗮𝘁𝘂𝗿𝗲𝘀?

• Building from scratch is time-intensive, requires expertise in security, UI/UX, email systems, and compliance.
• That's why 𝗮𝘂𝘁𝗵 𝗽𝗿𝗼𝘃𝗶𝗱𝗲𝗿𝘀 (CIAM solutions) like FusionAuth are so popular.
• They 𝗮𝗯𝘀𝘁𝗿𝗮𝗰𝘁 𝗮𝘄𝗮𝘆 𝘁𝗵𝗲 𝘄𝗼𝗿𝗸 𝘄𝗵𝗶𝗹𝗲 𝗽𝗿𝗼𝘃𝗶𝗱𝗶𝗻𝗴 𝘂𝘀 𝗳𝘂𝗹𝗹 𝗰𝗼𝗻𝘁𝗿𝗼𝗹.
• FusionAuth is an auth provider that I've been very impressed with. They provide:
• 𝗖𝗼𝗺𝗽𝗿𝗲𝗵𝗲𝗻𝘀𝗶𝘃𝗲 𝗮𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗶𝗼𝗻 & 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 → Covers authentication, authorization, user and org management, and threat detection.
• 𝗦𝗲𝗹𝗳-𝗵𝗼𝘀𝘁 𝗼𝗿 𝘂𝘀𝗲 𝘁𝗵𝗲𝗶𝗿 𝗰𝗹𝗼𝘂𝗱 → Unlike many providers, FusionAuth lets you develop, test, and deploy locally or in the cloud.
• 𝗙𝗲𝗮𝘁𝘂𝗿𝗲-𝗿𝗶𝗰𝗵 𝗳𝗿𝗲𝗲 𝘁𝗶𝗲𝗿 → Generous free plan to get started without commitment.