Log in Developer docs

Customer identity · OpenID Connect

Convert, protect, and personalize every login

Authicall is the authorization server for every product you ship. One Universal Login. Authorization Code + PKCE. Users stay the same person across every product in an application.

Read the documentation Open the dashboard
OAuth 2.1 OpenID Connect PKCE JWKS RP-Initiated Logout

Built for what you are building

Universal Login

Hosted sign-in and sign-up on Authicall. Products only redirect and handle the callback.

Applications & products

One application can own many products on a single login domain. Sibling products reuse the same SSO session after the first consent.

Existing users

Import accounts, then verify current passwords through each product’s legacy login. After first success, Authicall owns the hash.

Machine-readable identity

Standard OIDC endpoints: /authorize, /oauth/token, /userinfo, /v2/logout, and /api/v2/users.

Wire any product in minutes

Point your app at the Authicall issuer. Keep your local profile table. Link by email and store sub. Only verified HTTPS hosts are accepted.

Open developer documentation openapi.json

AUTHICALL_ISSUER=https://login.example.com
AUTHICALL_CLIENT_ID=your-application
AUTHICALL_CLIENT_SECRET=…
AUTHICALL_BASE_URL=https://app.example.com

Integrate auth into any stack in minutes

Use our quickstarts and OpenID Connect SDKs to integrate auth into any language or framework.

React Next.js Node Vue Python Go iOS Android

View quickstarts

$ claude
$ /plugin install authicall@claude-plugins-official ✓ detected

> Add Authicall login to this app

L installing @sso/product ✓
L wiring routes + login ✓

✓ Authicall is live ∙ ready in 4.2s
1 /plugin install authicall@claude-plugins-official
2 Add Authicall login to this app

The standard flow

  1. Product sends the browser to /authorize with PKCE.
  2. Universal Login identifies the user (email, then password).
  3. Consent once per application workspace.
  4. Product exchanges the code at /oauth/token and reads UserInfo.
  5. Logout is /v2/logout?returnTo=.

Full API reference →