Identity provider features, in full
These are the identity provider features SingleSign ships today — every one of them available at no cost.
Built for people who use apps.
Security and privacy features that give consumers visibility and control over their accounts.
Connected apps + consent
See every app connected to your account, what data it can access, and revoke access at any time.
Multi‑factor authentication
Add a second factor to your account with TOTP authenticator apps for an extra layer of protection.
Backup codes
Generate one‑time recovery codes so you're never locked out, even if you lose your authenticator device.
Devices and sessions
View active sessions and trusted devices. End sessions remotely if something looks wrong.
Built for developers who ship apps.
A standards‑based OAuth 2.0 and OpenID Connect platform with predictable APIs and practical documentation.
Read the developer docs →OAuth 2.0 / OpenID Connect
Standards‑based authorization and identity. Issue access tokens and ID tokens using well‑documented flows.
PKCE support
Authorization Code with PKCE protects the code exchange for mobile, SPA, and server‑side applications.
Redirect URI allow‑list
Define exactly which callback URLs your app can use. Requests to unregistered URIs are rejected.
Scopes + consent preview
Request only the data you need. Users see a clear consent screen before any information is shared.
Branding + policy links
Customize your app's display name, logo, and link to your own privacy policy and terms of service.
Organization governance.
Manage users, roles, and permissions at the organization level.
Organizations
Group users and apps under a shared organization for centralized management and oversight.
Roles
Assign roles within organizations to control who can manage apps, invite members, and configure settings.
Invites
Invite people to your organization by email. Pending invitations can be managed and revoked.
More on the way.
SingleSign is actively developed. Have a feature request or integration need? Let us know.
Related
- SSO for SaaS applicationsSSO for SaaS applications using OAuth 2.0 and OpenID Connect: the flow to pick, the scopes to request, and a working integration path with SingleSign.
- Secure sign-in for every platform.SingleSign is a free identity provider with OAuth 2.0 and OpenID Connect for developers, and per-app consent and instant revocation for everyone signing in.
- Identity provider security, by designIdentity provider security at SingleSign: PKCE-protected code exchange, redirect URI allow-lists, MFA, session and device control, and rate limiting.
- OAuth 2.0 & OpenID ConnectUnderstand the foundational protocols behind SingleSign: OAuth 2.0 for authorization and OpenID Connect for identity.
- Firebase Auth comparisonSingleSign vs Firebase Authentication on lock-in, portability and consent, plus the cases where staying on Firebase is right.
- Google Sign-In alternativeSingleSign vs Google Sign-In: the same one-tap convenience, without an advertising business behind the identity.
- SingleSign vs Auth0SingleSign vs Auth0 compared on the difference that matters: who owns the account. A side-by-side table, then the three cases where each one is the right call.
- React authentication with PKCEReact authentication done the recommended way: Authorization Code with PKCE, and no client secret in your JavaScript bundle.