Identity for every LookAndTry application
LookAndTry Identity is a multi-tenant OpenID Provider and OAuth 2.0 authorization server. Each tenant is an isolated security namespace with its own issuer, users, clients, resources, grants and signing keys.
An issuer and subject pair identifies an account. Never attach product data by email alone, and never accept a token issued for another tenant or resource.
Choose a starting point
Build a working login, native registration, protected API, SaaS tenant, team authorization model or user migration.
Redirect users through the issuer, validate the callback and keep tokens in a server-side BFF session.
Use the public native client flow with PKCE and the cookie-free first-party authentication adapter.
Validate the exact issuer, audience, signature and token state before creating a product identity context.
Read the executable contracts and switch every request example between cURL, OkHttp, Retrofit, Axios and Fetch.
System boundaries
Identity owns authentication, sessions, OAuth grants and tenant directories. Product backends continue to own organizations, memberships, roles, business permissions and product data.
Continue with Identity concepts, the integration quickstart or a complete tutorial.