Payload Market

Authentication plugins for Payload CMS 27

Authentication plugins for Payload CMS: OAuth, SSO, MFA, RBAC, passkeys and better-auth integrations. Compare and install community solutions.

Auth0 integration

Integrates Auth0 authentication with Payload CMS.

62 100/wk v2 Auth

Magic Login

A Magic Login plugin for Payload CMS that simplifies user authentication.

3 4/wk v2 Auth

Warding

RBAC plugin that generates user and role collections and injects fine-grained access control across Payload collections, globals, fields, and endpoints.

17 12/wk v2 Auth

RBAC

Adds role-based access control to your Payload CMS.

142 18/wk v1 Auth

Simple RBAC

Enables role-based access control in Payload CMS.

41 1/wk v1 Auth

Default Roles

Applies default role-based access control to every Payload collection, granting CRUD access to specified roles such as admin and executive.

9 2/wk v1 Auth

Google One Tap

Adds Google One Tap sign-in to the Payload admin login page using OAuth credentials.

13 7/wk v1 Auth

Authentication plugins add user identity to Payload CMS — from OAuth and SSO sign-in to multi-factor auth, passkeys and fine-grained RBAC/ABAC access control. They extend Payload's built-in auth rather than replacing it, so you keep the admin login while adding providers and policies.

What these plugins cover

  • OAuth / SSO providers and social login
  • MFA, TOTP and passkeys (WebAuthn)
  • Passwordless and magic-link sign-in
  • Role- and attribute-based access (RBAC/ABAC)
  • Session, JWT and API-key management
  • better-auth and Auth.js integrations

Choosing an auth approach

For a public app, start with social OAuth plus optional MFA; for internal tools, layer RBAC/ABAC on top of SSO. Pair access rules with admin tooling for audit logs.

See also admin tooling, custom fields and third-party integrations.

Frequently asked questions

Which auth methods do Payload plugins support?

Community plugins cover OAuth and SSO providers, multi-factor auth (TOTP, passkeys) and role- or attribute-based access control, plus better-auth and Auth.js adapters.

How do these integrate with Payload's built-in auth?

Most plugins extend the existing auth collection and access-control hooks — you keep Payload's admin login and add providers, strategies or policies on top, rather than replacing the auth system.

Are these authentication plugins free?

Every plugin listed on Payload Market is open-source and free to install; pricing only applies to optional hosted services some authors offer.