- Cubelet Ltd.
No-Store Single-Sign-On (SSO) Server
We don't keep your user and customer data
You may integrate SS fy into existing applications with to your existing code as an additional layer of security on top of your current authentication system. Practice the integration with SSOfy...
You won't ever code your own Login and Registration forms again
Extra Protection, Less Overhead
Protection against miscellaneous attacks on your authentication system, like DDOS, Brute Force, Hijacking, malformed data, etc. By requiring suspected users to complete challenges before requests are routed to your resource server for the authentication, SSfy detects malicious requests and prevents abuses.
The powerful built-in validators for, , , and , makes it possible to develop your strategy for key credentials while dropping unnecessary calls to your resource server API and reducing your server overhead.
2FA (two-factor) Authentication
Proven and most effective technique of safeguarding user accounts and authentications with OTP codes generated, maintained, rendered, and sent by your own backend server via the service provider of your choice for Email, SMS and Voice Calls. SSfy hands up and all authority to you!
Make it easier for users to register and login using their already existing accounts with popular social networks. Supporting over 30+ providers including, , , , , and many more...
Manage SSO for all applications from a single panel. Share your, , , and amongst all applications with ease.
SSfy functions flawlessly on your own domains or while being proxied through services like CloudFlare in addition to the Hosted Domain offered to you by SS fy .
SSL is essential for privacy and security. SSfy has enabled SSL on all URLs for free!
JWT/JWS (Signed Tokens) with the algorithm of your choice. Choose which claims (user information) you want to include in your JWT and SSfy generates access tokens with standard and globally recognized claims.
SLO (Single Log-out)
No matter what access tokens you generate—JWT or Short-Length-Token— our innovative hybrid approach enables users to log out of the current session and any and all previous logins made on any device. Admins have absolute ownership over login sessions and tokens as just.
Thanks to the Sandbox machine, clients and visual components are supplied with sample data and remain isolated from the rest of the development process, enabling the Frontend team focus on their design and debugging without having to wait for real data.
Theme and Personalization
Creating and customizing themes with the familiar Handlebars syntax, making it a breeze to layout and personalise your login page experience. With SSfy , you can choose a theme in dark or light scheme that best suits your preferences and matches your organization's brand.
SSfy 's flexible translation system, with over 10+ languages supported, makes it more accessible to users with diverse language preferences.
Performance and Stability
SSfy servers are highly scalable and can work side-by-side with your own backend servers to serve millions of concurrent users. In case of any failures at your backend server, you will be alerted instantly with the error code to assist you in troubleshooting.
More than just a login
SSfy is not just about the login
Password Recovery is a sensitive and complicated process which is made easy by utilizing the same two-factor (2FA) process to allow users to reset their password using available methods (Email, SMS, Voice Call).
User Registration with option to choose which of the claims (user information) you want users to fill out throughout the registration process. Mixed with optional Captcha to help protect against bots and spammers and gain quality users.
The User Profile page offers extensive customization with option to select the level of data visibility on the page, providing users with a chance to update information, reset password, view active sessions and devices on map, and terminate suspicious activities.
Made by developers for developers
Software Development Kits for building Resource Servers and OAuth2 Client for obtaining access tokens
is available for various programming languages and frameworks.
Frequently Asked Questions (FAQs)
Startups and enterprises looking for a secure and standard web authentication system can switch to SSOfy with minimal effort on the part of their engineering team.
Additionally, SSOfy can be used as a central service for querying user data.
Yes and No.
OAuth2 is a world-class standard for single-sign-on (SSO) implementation. We assume that developers have gone through their own research and evaluated that OAuth2 is the perfect fit for their needs.
OAuth2 is made up of a server application and a client library which redirects users to the server for authorization. Since OAuth2 is a standard, there are a plethora of OAuth2 client libraries for all programming languages available on the internet.
SSOfy as well, offers SDK for various programming languages and frameworks. SDKs are divided into server and client libraries. Server libraries serves data to SSOfy while Client libraries used to access SSOfied login page from client applications.
Not at all.
We knew that companies have strict policies in place when it comes to sharing user information with third-party providers. With SSOfy, all data lives in your own database. Authentications will also be handled by your own backend servers.
SSOfy adds another authentication layer powered by OAuth2 and forwards the credentials to your own backend for the rest of the process.
SSOfy requests information from your server in order to display the user's name, and it anticipates the bare minimum of data to be shown to the user or to you in the dashboard. It is entirely up to you whether to utilize all or some features provided by SSOfy. SSOfy is a highly secure automated proxy software which doesn't monitor or store the data.
This is SSOfy’s part to generate, keep, refresh, invalidate, expire, and link tokens with user sessions. Our mission is to get the burden off the shoulders of developers and companies with the complexities of the development and maintenance of an OAuth2 server.
For user registrations you may choose to use SSOfy's built-in registration page or just set a link to your own registration page or modify the login page's HTML (handlebar) codes to embed your own registration.
SSOfy also offers a convenient "Forgot Password" feature for users who may have forgotten their account credentials. This feature allows users to easily reset their password using their username, registered email, or phone number(via SMS) and also support OTP verification for added security.
Since some websites have no registration pages, SSOfy offers 100% flexibility with your design decisions.
SSOfy can generate JWT/JWS token with the algorithm of your choice.
Additionally, SSOfy's hybrid model has built with verify->cache->invalidate idea in mind, allowing you to take advantage of our unique single-sign-out (SLO) feature.
Yes, you can configure SSO on your own domain. You may also configure as many alternative domains as you want.
You can see a list of active sessions and users, together with useful information about them, and you can log them out at any time.
Upgraded plans include full theme personalisation. Within the editor page, you can modify "handlebar" files and see a live change preview.
With the free plan, you can still customize the color scheme, edit links, and choose the visibility of items on the page.
Yes, you can customize texts for a variety of languages supported by SSOfy.