All specs
ProductivityOfficial

SaaS Starter

The baseline stack for any B2B SaaS product — auth, subscriptions, team management, and billing. The foundation you build every SaaS on top of.

Features(10)

Key Decisions

User System & Auth

Will this product be sold to businesses (B2B)?

If yes

Add SAML/SSO and RBAC. Enterprise procurement often requires both.

If no

Email + password plus one OAuth option covers 95% of consumer use cases.

User System & Auth

Is this a security-sensitive application?

If yes

Enable TOTP MFA. Consider making it mandatory for privileged users.

If no

MFA is optional — offer it but do not require it to reduce friction.

User System & Auth

Email+password, passwordless, or SSO-only?

If yes

Passwordless (magic links or passkeys) eliminates password reset tickets and credential stuffing risk.

If no

Keep email+password as a universal fallback — OAuth outages should not lock users out.

User System & Auth

Do you need social providers (Google, GitHub, Apple)?

If yes

Add Google for B2C breadth; add GitHub for developer tools; add Apple only if you ship iOS (App Store requires it when you offer other social login).

If no

Skip social OAuth and avoid the app registration / key rotation overhead.

User System & Auth

Do you need SCIM provisioning?

If yes

Add SCIM alongside SAML — enterprise IT uses it to auto-provision/deprovision employees and map group membership to roles.

If no

Manual invite flows are fine until your first enterprise customer asks for SCIM in a security review.

User System & Auth

Should MFA be required, optional, or risk-based?

If yes

Risk-based (step up MFA on new device, new IP, or sensitive actions) gives security without friction on every login.

If no

Offer MFA as optional first; require it only for admins or on privileged actions.