All work

live, 41 ms Security and auth

Gatehouse

Gatehouse is a working sample of the sign-in system behind a business software product. It supports passkeys, authenticator codes, SAML single sign-on with a built-in test identity provider, and SCIM, which creates and removes users automatically from a company directory. It also has access rules, a flow inspector that opens every signed message in a login, and a security report card for any website.

  • Next.js 16
  • Neon Postgres
  • Better Auth
  • samlify
  • SCIM 2.0
  • OpenAPI 3.1

Measured numbers

Tests
756
Browser tests
87
Lighthouse performance
98
Accessibility
100
Best practices
100
SEO
100

Home page, mobile. Copied from the showcase's own README on 24 October 2026.

On a phone

The Gatehouse home page on a phone

At desktop width

The Gatehouse home page at desktop width
Home page at 1440 px wide, captured 24 Oct 2026.

What it proves

  • SAML single sign-on tested end to end, with a built-in identity provider anyone can try.
  • SCIM 2.0 provisioning, so a customer's directory creates and removes accounts automatically.
  • Passkeys and authenticator codes alongside passwords.
  • Access rules decide who can do what, shown with three demo roles.
  • A flow inspector that makes the sign-in handshake visible.

How this adapts to your project

Connect it to your customers' identity providers, such as Okta, Microsoft Entra or Google Workspace, and map their groups to your roles. The same building blocks can sit in front of an existing product that has so far only offered email and password.