
Logto
Modern open-source auth with multi-tenancy, SSO, and RBAC
Logto Auth
svhd/logto:latest
Just deployed
Logto Admin Console
svhd/logto:latest
Just deployed
Postgres
postgres:17-alpine
Just deployed
/var/lib/postgresql/data
Redis
bitnami/redis:7.2.5
Just deployed
/bitnami
Deploy and Host Logto on Railway
Logto is the modern, open-source auth infrastructure for SaaS and AI apps. It takes the pain out of OIDC and OAuth 2.1 and makes it easy to build secure, production-ready auth with multi-tenancy, enterprise SSO, and RBAC.
About Hosting Logto
Deployment Steps
Logto Auth
- Click on the Logto Auth deployment, then click on the pre-generated URL. If it takes you to a “404 Not Found” page at
/unknown-session
- You’re all set here!
If you see a Railway error page instead, it’s likely Railway hasn’t automatically added the port to your domain. Go to Settings → Networking, click the Edit button next to the domain and click “edit port”, then select or enter port 3001
.
If you wish to use a custom domain, you simply need to click on the deployment, go to Settings → Networking and click on the + Custom Domain button. Enter your domain and select or enter port 3001
.
Logto Admin Console
- Click on the Logto Admin Console deployment, then click on the pre-generated URL. You should see a page titled “Welcome to Admin Console”.
- Click on Create account and complete the form to create your account.
- You’re all set!
If you see a Railway error page instead, it’s likely Railway hasn’t automatically added the port to your domain. Go to Settings → Networking, click the Edit button next to the domain and click “edit port”, then select or enter port 3002
.
If you wish to use a custom domain, you simply need to click on the deployment, go to Settings → Networking and click on the + Custom Domain button. Enter your domain and select or enter port 3002
.
Disable Redis (Optional)
This deployment comes with Redis included, but it’s entirely optional. If you don’t want Redis, simply:
- Right-click → Delete the Redis service
- Right-click → Delete the detached volume (it’ll be floating somewhere by itself)
- Click on the Logto Auth deployment → Variables
- Find and delete the
REDIS_URL
variable - Click on the Logto Admin Console deployment → Variables
- Find and delete the
REDIS_URL
variable - Deploy your changes
Dependencies for Logto Hosting
Deployment Dependencies
Service | Version | Purpose | Source Image |
---|---|---|---|
Logto Core | latest | Main authentication service | svhd/logto |
Postgres | 17-alpine | Database for user data and configuration | postgres |
Redis (optional) | 7.2.5 | Cache for well-known data | bitnami/redis |
Resource Requirements
- Memory: 1GB+
- CPU: 1+
- Storage: Database grows with usage
Troubleshooting
For common issues and community support, visit the Railway Community Forum.
Template Changelog
16 July, 2025
- Initial template release
Common Use Cases
- SaaS Authentication: Secure user authentication for multi-tenant SaaS applications with organization management
- AI Agent Authentication: Auth infrastructure for Model Context Protocol and agent-based AI architectures
- Enterprise SSO: Single sign-on integration with existing enterprise identity providers
- Mobile App Auth: Secure authentication flows for mobile applications with social login support
- API Authentication: Machine-to-machine authentication for APIs and microservices
Why Deploy Logto on Railway?
Railway is a singular platform to deploy your infrastructure stack. Railway will host your infrastructure so you don't have to deal with configuration, while allowing you to vertically and horizontally scale it.
By deploying Logto on Railway, you are one step closer to supporting a complete full-stack application with minimal burden. Host your servers, databases, AI agents, and more on Railway.
Template Content
Logto Auth
svhd/logto:latestLogto Admin Console
svhd/logto:latestPostgres
postgres:17-alpineRedis
bitnami/redis:7.2.5