SaaStart

SaaStart is a full-stack B2B SaaS starter kit from Auth0 that combines Next.js and Radix UI with prebuilt Auth0 identity workflows for multi-tenant applications. It ships as a GitHub template that bootstraps an Auth0 tenant with organizations, roles, SSO connections, MFA policies, and email templates, so you can focus on product code instead of auth plumbing.

What is SaaStart?

SaaStart is a reference application and starter template maintained by Auth0 for building business-to-business software-as-a-service products. It takes a Next.js application shell, wires it to an Auth0 tenant through an automated CLI script, and produces a working multi-tenant app with sign-up, user management, SSO, and security policies. The template runs on Node.js v20 or later, uses npm for dependency management, and offers one-click deployment to Vercel.

Key Features

• Multi-tenancy with Auth0 Organizations — Uses a single pool of users across multiple organizations, with organization creation embedded into the sign-up flow.
• User management with RBAC — Admins can invite users, change roles, and delete users; these operations directly modify the Auth0 tenant's user database and organization memberships.
• Self-service Enterprise SSO — End users configure SAML or OIDC connections to identity providers like Okta, Google Workforce, or Azure AD from inside the app, with optional SCIM provisioning.
• Configurable security policies — Enforce MFA per organization, choose which MFA factors (OTP, security keys) are allowed, and exempt specific email domains from MFA when SSO already covers it.
• Organization switching — Users can belong to multiple organizations (e.g., employer plus personal hobby org) and switch contexts easily through the UI.
• Profile and security self-service — Users edit their own profile, reset passwords, manage MFA enrollments, and delete their own account data.
• Auth0 CLI bootstrapping — The npm run auth0:bootstrap script creates the required Auth0 applications, roles, actions, email templates, and MFA factors, then writes a .env.local file automatically.
• One-click Vercel deployment — A Deploy with Vercel button clones the repo and sets up the external Auth0 integration.

Who is it for?

• SaaS founders and developers who want a production-ready authentication foundation instead of building identity infrastructure from scratch.
• B2B product teams that need multi-tenant onboarding, SSO, and MFA for enterprise customers and want those features implemented correctly from day one.
• Auth0 users who want a reference implementation showing how to use Auth0 Organizations, Actions, and Universal Login in a real Next.js application.

What can you do with SaaStart?

• B2B product teams: Bootstrap a multi-tenant SaaS app with sign-up flows that require an organization name, then invite members and manage roles through the built-in admin UI.
• Enterprise-focused startups: Offer your customers self-service SAML or OIDC SSO, optional SCIM provisioning, and organization-level MFA policy controls without building those UIs yourself.
• Developers learning Auth0: Study how the bootstrap script configures Auth0 clients, roles, actions, and connections, then modify the Next.js code to see hot-reload updates in the browser.

How does SaaStart work?

After cloning the repo, you install dependencies, install the Auth0 CLI, and log in with auth0 login --scopes "update:tenant_settings,create:connections,create:client_grants,create:email_templates,update:guardian_factors". Running npm run auth0:bootstrap provisions the Auth0 resources and writes .env.local. Finally, npm run dev starts the Next.js dev server at http://localhost:3000.

FAQ

Is SaaStart free?

The template itself is open source and free to use. You do need an Auth0 tenant, which offers a free tier, and the bootstrap script will configure that tenant automatically.

What Node version is required?

Node.js v20 or later is required. The README recommends using nvm to manage Node versions and verifies the version with node -v before installing dependencies.

Can SaaStart be deployed to production?

Yes, a one-click Vercel deployment button is included, and the README-ADVANCED.md file covers enabling HTTPS and production-like URLs for local iteration.

What tech stack does SaaStart use?

It uses Next.js with the App Router (the main entry point is app/page.tsx), Radix UI for accessible components, npm as the package manager, and Auth0 for authentication and authorization.