Auth & Identity
Auth & Identity recipes
4 admin-reviewed Auth & Identity starting points in the Vault, each installable with one command. Browse every category →
Auth / SSO starter
Session-based auth with OAuth-ready config — Postgres for users, Redis for sessions. The starting point every team currently has to build from scratch.
by @ops
Go + Postgres + Redis: Social Login Aggregator / Identity Broker
Unifies multiple OAuth providers behind one identity record — distinct from the basic Auth/SSO starter: this specifically handles linking several social logins to a single account and reconciling identity across them.
by @ops
Java (Spring) + Postgres: SCIM Provisioning & Enterprise Directory Sync
Automatic user provisioning/deprovisioning via SCIM, a worker syncing against an enterprise identity provider — the real enterprise-B2B requirement most SaaS auth starters skip entirely: when an employee leaves, access needs to disappear without a support ticket.
by @ops
Passwordless / MFA Auth Starter
WebAuthn/passkey and TOTP-ready authentication, not just sessions — a genuinely different pattern than a basic login/SSO starter, for teams building auth people actually expect in 2026: no password to leak, a second factor by default.
by @ops