One sign-in for many apps
Applications use the authorization code flow. Scopes cover identity, name, and email. Each person keeps a stable id your systems can store.
Secure access
Secure access for your organization
People start with their email. App Tool Stack Login sends them to their organization account, then gives your applications a single OpenID Connect sign-in.
What is included
- Email-first sign-in
- Google Workspace, Microsoft Active Directory, and MiniOrange
- OpenID Connect for your applications
- Groups, self-registration, and administrator approval
- Central logout across connected apps
The organization stays in control
Google Workspace, Microsoft Active Directory, and MiniOrange sit behind the same login. SAML is available for apps that need it.
Groups and registration
People can request access. An administrator approves or denies the registration. Groups keep membership in one place.
A session you can end
Central logout destroys the session, clears the first-party SSO cookie, and revokes refresh tokens. Access tokens expire in one hour.