01
Sign-in
The application sends the user to Vorlaxen. After consent, the session opens with an authorization code.
One sign-in. Every application uses the same door.
Sign-in is ready. The user enters with a Vorlaxen account, and the application sees only what it needs.

Identity layer
What it does
01
The application sends the user to Vorlaxen. After consent, the session opens with an authorization code.
02
Profile, email, avatar, phone, and roles are requested separately. The application does not receive what it did not ask for.
03
Public and confidential clients stay distinct. Public clients must use PKCE.
04
Identity stays safe. From sign-in to sign-out, everything lives in one place.
Flow
01
The client is defined with its allowed scopes and redirect addresses.
02
Sign-in happens at Vorlaxen. The user sees what the application is asking for.
03
The application receives only the information it requested. The rest stays private.
Early access
It is not open to everyone yet. Get in touch for access and integration.