← All components
Security & identity
Identity & auth
Sign-up, login, tokens (OAuth/OIDC, JWT) and user directories.
When to use
- Every user-facing system
Pitfalls
- Don't roll your own crypto or password storage
Options by provider
The first option is what diagrams show for that provider.
Amazon Web Services
- Amazon CognitoManaged
Google Cloud
- Identity PlatformManaged
Microsoft Azure
- Microsoft Entra External IDManaged
Open source / self-hosted
- KeycloakSelf-hosted
- OrySelf-hosted
Third-party (works with any cloud)
- Auth0Managed
- ClerkManaged
Related concepts
Used in
- Netflix
- Auth service — Sign-in, sessions and device tokens
- WebSockets at scale
- Token validation — Issues and verifies JWTs
- Video calling (WebRTC)
- Auth — Room tokens
- Practo / teleconsultation
- Identity — Patient and verified-doctor accounts
- Buy now, pay later
- KYC & identity — Onboarding, OTP login, document checks