Skip to content
Identity.by Look&Try

YOUR IDENTITY. YOUR ECOSYSTEM.

Connect your users.Keep control.

From web to mobile, Identity brings your sign-in journeys together. Your applications keep their data and permissions.

Open protocols. Explicit trust.

Your application
Your API
Illustrative flow · no real sign-in

Standards your applications already understand

OpenID ConnectOAuth 2.0PKCEWeb & mobile

ONE SHARED FOUNDATION

Identity in the right place.

A consistent experience for your users. Clear boundaries for your applications.

01

Sign-in that feels like you

Make web and mobile sign-in your own, from screens to colors.

Identity

Welcome back.

Email address

alex@example.com
Continue

Password · Email code · MFA

02

Every tenant has its own space

Separate accounts, clients and domains for each tenant.

Illustration of three isolated tenants with their own accounts and clients

Dedicated issuers

03

Connections you choose

Connect tenants through explicit federation and account linking.

Illustration of two accounts linked through explicit trust

Explicit trust

04

Sessions under control

Manage sessions, MFA factors and access revocation.

Illustration of an active web session and an older mobile session

Lifecycle management

Identity verifies. Your application decides.

Business roles and permissions stay in your applications.

Who is signing inWhat they can do

FOR TEAMS THAT BUILD

Connect one building block.Keep your architecture.

Documented endpoints and a standard flow for web and native clients.

  1. 1Register your client and its callbacks.
  2. 2Connect with Authorization Code + PKCE.
  3. 3Verify the token for your API.
Open the quickstart
Authorization Code + PKCE
identity / integration
ISSUER="https://tenant.example.com"

curl --fail --silent --show-error \
  "$ISSUER/.well-known/openid-configuration"
Adapt the issuer, client, callback and PKCE values to your application.

THE ESSENTIALS

A few straightforward answers.

Is this only for Look&Try applications?

Identity is a standalone OpenID Connect provider. Integration uses explicitly registered clients and API resources.

Do I need to move my application data?

No. Identity handles accounts and sign-in. Your application keeps its data, business roles and permissions.

Can tenants share a sign-in?

Yes, with configured federation and explicitly linked accounts. Matching email addresses never link accounts automatically.

Where do I start?

The quickstart covers issuer discovery, client registration and your first sign-in flow with PKCE.

YOUR NEXT CONNECTION

Make room for your product.

Let Identity handle sign-in. Build what comes next.

Read the documentation