Migrations · free guides

Move off Auth0 or Cognito on your own terms.

The migration guides are free and written for you to run yourself, onto a Seamless Auth instance you host. Your old provider stays live alongside the new one during cutover, so nothing switches until you are ready.

Read the migration guide

Pick your guide

How a migration runs

01
Export and import

Export your users to CSV and import them with seamless migrate. A dry run shows exactly what will be created before anything is written.

02
Run both

Add your old provider as an OpenID Connect sign-in. People keep signing in the way they do today and land on a full Seamless Auth session.

03
Move to passkeys

Prompt for a passkey at sign-in, track who has enrolled, and invite the rest. Nobody is forced through a password reset.

04
Switch the old one off

Retire the old provider when enrollment is where you want it. Retiring is recorded in the audit log and can be reversed.

Plan for what changes

Seamless Auth has no password sign-in, so passwords, hashes, MFA secrets, and sessions are never imported. People prove their email once, or sign in through the old provider during cutover, and then enroll a passkey. Each guide ends with a list of what you give up or must plan for, so read it before you commit to a date.

After cutover, it is yours

The instance you migrated onto is the one you run. Self-hosted is the default and costs nothing. If you would rather not operate it, a managed tier runs the same open source auth server for you, as an option rather than the destination.

Managed tiers →

Want help with it?

If you would rather not run the migration alone, the team that maintains the auth server can run it with you as a paid service, quoted after a scoping call. Tell us where you are today and what the deadline is.