Public PKCE login
Start with Authorization Code Flow with PKCE, exact redirect URI registration, and hosted login, verification, and consent screens.
Read quickstart
Scope-filtered APIs
Use OIDC access tokens against stable external APIs and return only the profile, email, and permission fields granted to the application.
Production operations
Review security posture, operational readiness, change management, and troubleshooting guidance before launching integrations.