SSO / OIDC
Sign in with your identity provider.
Authorization Code flow
Configure any standards-compliant OIDC provider (Okta, Auth0, Entra ID, …). The platform performs discovery, the authorize redirect, the code exchange, and verifies the id_token (JWKS signature + issuer + audience + nonce).
Provisioning
Restrict which email domains may sign in with SSO via an allowlist. Configure it with the OIDC_* environment variables.
Try it yourself
Open the console and put this into practice.