Skip to content
Sign up freeSign in

Secure sign-in for every platform.

SingleSign is a free identity provider with OAuth 2.0 and OpenID Connect for developers and user-controlled privacy for consumers.

  • Build sign‑in with OAuth 2.0 / OpenID Connect and modern security practices.
  • Ask only for the data you need with scopes, and make consent clear.
  • Give users real control: revoke access, manage devices, and enable MFA.
Sign up freeView developer docs
PKCE Authorization
javascript
// 1. Generate PKCE challenge
const verifier = generateCodeVerifier();
const challenge = await sha256(verifier);

// 2. Redirect to SingleSign
window.location.href = 
  `https://api.singlesign.com/oauth/authorize?` +
  `response_type=code&` +
  `client_id=YOUR_CLIENT_ID&` +
  `redirect_uri=${redirectUri}&` +
  `scope=openid profile email&` +
  `code_challenge=${challenge}&` +
  `code_challenge_method=S256`;
PKCE supported
Redirect URI allow‑list
Consent + scopes
MFA + recovery
Rate limits + auditing

Integrate sign‑in without surprises.

Create an app, configure redirect URIs, and use Authorization Code with PKCE to protect the code exchange. SingleSign gives you predictable endpoints, clean errors, and practical docs.

Read the developer docs →

Create an app

Register your application to receive a client ID and configure your integration settings.

Set redirect URIs

Define allowed callback URLs so authorization codes are only sent to destinations you control.

Ship sign‑in

Use Authorization Code with PKCE to exchange codes for tokens and authenticate users securely.

You stay in control.

SingleSign helps you understand what an app is requesting, approve only what you want to share, and remove access instantly.

Connected apps

See every app that can access your account in one place, with details about what data is shared.

Revoke access

Remove any app's access instantly. Tokens are invalidated and the app can no longer act on your behalf.

Account security

Enable multi‑factor authentication, review active sessions, and manage trusted devices.

Security is a product feature.

SingleSign is designed around modern sign‑in patterns like PKCE and redirect URI validation, with user consent and account security controls built in.

Frequently asked questions

Create your free account in minutes.

Start using SingleSign today, whether you're integrating sign‑in or securing your account across apps.

Sign up free

Start here