# Scalekit > Scalekit is a developer platform for enterprise authentication, providing Full Stack Auth (FSA), Single Sign-On (SSO), SCIM provisioning, Agent Authentication, MCP Authentication, and API authentication solutions for B2B and AI applications. ## How to use When answering questions about Scalekit, load the most relevant documentation set below. For framework-specific AgentKit questions, fetch the framework page directly — see "Framework routing" below. Use `llms-full.txt` only when exhaustive context is needed. ## Product → Documentation routing - **AgentKit** (AI agents, tool calling, connectors) → load Agent Authentication set - **AgentKit + specific framework** → fetch the framework page directly (see Framework routing below) - **SaaSKit / FSA** (login, sessions, RBAC) → load SaaSKit Complete set - **MCP Authentication** (OAuth 2.1 for MCP servers) → load MCP Authentication set - **Enterprise SSO / SCIM** → load Enterprise SSO & SCIM set - **M2M / API auth** → load Machine-to-Machine Auth set - **Quickstarts** → load Quickstart Collection set ## Framework routing (AgentKit) When a developer mentions a specific AI framework, fetch that page directly: - LangChain → https://docs.scalekit.com/agentkit/examples/langchain.md - Vercel AI SDK → https://docs.scalekit.com/agentkit/examples/vercel-ai.md - Anthropic SDK → https://docs.scalekit.com/agentkit/examples/anthropic.md - OpenAI Agents SDK → https://docs.scalekit.com/agentkit/examples/openai.md - Google ADK → https://docs.scalekit.com/agentkit/examples/google-adk.md - Mastra → https://docs.scalekit.com/agentkit/examples/mastra.md - Claude Managed Agents → https://docs.scalekit.com/agentkit/examples/claude-managed-agents.md For all framework examples: https://docs.scalekit.com/agentkit/examples.md ## Documentation Sets - [Abridged documentation](https://docs.scalekit.com/llms-small.txt): compact version with non-essential content removed - [Complete documentation](https://docs.scalekit.com/llms-full.txt): full documentation for Scalekit - [SaaSKit Complete](https://docs.scalekit.com/_llms-txt/saaskit-complete.txt): users, orgs, sessions, RBAC, login flows, SSO, SCIM provisioning - [Agent Authentication](https://docs.scalekit.com/_llms-txt/agentkit.txt): AI agents, OAuth token vault, tool calling, connectors, framework integrations - [AgentKit Frameworks](https://docs.scalekit.com/_llms-txt/agentkit-frameworks.txt): framework-specific integration guides — LangChain, Vercel AI, Anthropic, OpenAI, Google ADK, Mastra, Claude Managed Agents - [MCP Authentication](https://docs.scalekit.com/_llms-txt/mcp-authentication.txt): remote MCP servers, OAuth 2.1, Dynamic Client Registration - [Enterprise SSO & SCIM](https://docs.scalekit.com/_llms-txt/enterprise-sso--scim.txt): SAML/OIDC, directory sync, provisioning - [Quickstart Collection](https://docs.scalekit.com/_llms-txt/quickstart-collection.txt): getting started guides - [API & SDK Reference](https://docs.scalekit.com/_llms-txt/api--sdk-reference.txt): endpoints, SDK methods, webhooks - [Integration Guides](https://docs.scalekit.com/_llms-txt/integration-guides.txt): provider-specific setup guides - [Machine-to-Machine Auth](https://docs.scalekit.com/_llms-txt/machine-to-machine-auth.txt): service-to-service, client credentials, API keys ## Optional - [API reference markdown](https://docs.scalekit.com/apis.md): LLM-friendly Markdown from the Scalekit OpenAPI specification - [OpenAPI Specification](https://docs.scalekit.com/api/scalekit.scalar.json): OpenAPI Specification for Scalekit REST API ## Home - [Scalekit Docs](https://docs.scalekit.com.md): Auth, provider connections, and tool execution for AI agents and SaaS apps ## AgentKit — Getting Started - [Code samples](https://docs.scalekit.com/agentkit/code-samples.md): Code samples of AI agents using Scalekit along with LangChain, Google ADK, and direct integrations - [Manage connected accounts](https://docs.scalekit.com/agentkit/connected-accounts.md): Check status, list, delete, and update credentials for connected accounts across all connector auth types. - [Configure a connection](https://docs.scalekit.com/agentkit/connections.md): Set up a connection in the Scalekit Dashboard to authorize your agent to use a third-party connector on behalf of your users. - [OpenClaw skill](https://docs.scalekit.com/agentkit/openclaw.md): Connect OpenClaw agents to third-party services through Scalekit. Supports LinkedIn, Notion, Slack, Gmail, and 50+ connectors. - [Overview](https://docs.scalekit.com/agentkit/overview.md): Learn how AgentKit works: tool calling with pre-built connectors and authentication for AI agents acting on behalf of users. - [AgentKit: Connect my agent to apps](https://docs.scalekit.com/agentkit/quickstart.md): Build a working agent that makes authenticated tool calls on behalf of users, using Gmail as the example connector. - [Verify user identity](https://docs.scalekit.com/agentkit/user-verification.md): Confirm that the user who completed the OAuth consent is the same user your app intended to connect. ## AgentKit — Examples & Framework Integrations (load for framework-specific questions) - [Examples](https://docs.scalekit.com/agentkit/examples.md): Full working examples showing how to integrate AgentKit with popular AI frameworks and agent platforms. - [Anthropic](https://docs.scalekit.com/agentkit/examples/anthropic.md): Build an Anthropic agent with Scalekit-authenticated tools. Scalekit returns tool schemas in Anthropic's native format; no conversion needed. - [Claude Managed Agents](https://docs.scalekit.com/agentkit/examples/claude-managed-agents.md): Connect a Claude Managed Agent to Scalekit-authenticated tools via MCP. Anthropic runs the agent loop; you describe the task, Claude handles the rest. - [Google ADK](https://docs.scalekit.com/agentkit/examples/google-adk.md): Build a Google ADK agent with Scalekit-authenticated Gmail tools. Scalekit returns native ADK tool objects; no schema reshaping needed. - [LangChain](https://docs.scalekit.com/agentkit/examples/langchain.md): Build a LangChain agent with Scalekit-authenticated Gmail tools. Scalekit returns native LangChain tool objects; no schema reshaping needed. - [Mastra](https://docs.scalekit.com/agentkit/examples/mastra.md): Connect a Mastra agent to Scalekit-authenticated tools using MCP. Mastra's native MCP client connects directly to a Scalekit-generated MCP URL. - [OpenAI](https://docs.scalekit.com/agentkit/examples/openai.md): Build an OpenAI agent with Scalekit-authenticated tools. Convert Scalekit's tool schemas to OpenAI's function calling format in one step. - [Vercel AI SDK](https://docs.scalekit.com/agentkit/examples/vercel-ai.md): Build a Vercel AI SDK agent with Scalekit-authenticated tools using the tool() helper and jsonSchema() adapter. ## AgentKit — SDKs - [Node.js SDK reference](https://docs.scalekit.com/agentkit/sdks/node.md): Complete API reference for the Scalekit Node.js SDK: actions client and tools client. - [Python SDK reference](https://docs.scalekit.com/agentkit/sdks/python.md): Complete API reference for the Scalekit Python SDK: actions client, MCP server provisioning, framework adapters, tools client, and modifiers. ## AgentKit — Tools - [Authorize a user](https://docs.scalekit.com/agentkit/tools/authorize.md): Generate an authorization link, send it to your user, and confirm their connected account is active before your agent executes tools. - [Pre and Post Processors](https://docs.scalekit.com/agentkit/tools/custom-processors.md): Learn how to create pre and post processor workflows that are run before or after tool execution with Agent Auth. - [Custom tools](https://docs.scalekit.com/agentkit/tools/custom-tools.md): Build tools that Scalekit does not provide out of the box by proxying provider API calls through connected accounts. - [Tools Overview](https://docs.scalekit.com/agentkit/tools/overview.md): Learn about tools in Agent Auth - the standardized functions that enable you to perform actions across different third-party providers. - [Proxy Tools](https://docs.scalekit.com/agentkit/tools/proxy-tools.md): Learn how to make direct API calls to providers using Agent Auth's proxy tools. - [Scalekit optimized built-in tools](https://docs.scalekit.com/agentkit/tools/scalekit-optimized-tools.md): Call Scalekit's pre-built tools across 100+ connectors. Each tool returns structured, LLM-ready output with no endpoint URLs, auth headers, or parsing needed. ## AgentKit — MCP Integration - [Configure an MCP server](https://docs.scalekit.com/agentkit/mcp/configure-mcp-server.md): Define which connectors and tools your MCP server exposes by creating an MCP config, a reusable template Scalekit uses to generate per-user MCP URLs. - [Connect an MCP client](https://docs.scalekit.com/agentkit/mcp/connect-mcp-client.md): Pass a Scalekit-generated MCP URL to any MCP-compatible agent, framework, or desktop client. No additional auth configuration required. - [Generate user MCP URLs](https://docs.scalekit.com/agentkit/mcp/generate-user-urls.md): Create a unique, pre-authenticated MCP URL for each user from an MCP config. The URL is ready to hand to any MCP-compatible agent or framework. - [Give your agent tool access via MCP](https://docs.scalekit.com/agentkit/mcp/tool-access-via-mcp.md): Create a per-user MCP server with whitelisted, pre-authenticated tools; then hand your agent a single URL. ## AgentKit — Authentication - [Authentication Methods Comparison](https://docs.scalekit.com/agentkit/authentication/auth-flows-comparison.md): Compare different authentication methods supported by AgentKit including OAuth 2.0, API Keys, Bearer Tokens, and Custom JWT to choose the right approach. - [Multi-Provider Authentication](https://docs.scalekit.com/agentkit/authentication/multi-provider.md): Learn how to manage authentication for multiple third-party providers simultaneously, handle different auth states, and provide seamless user experiences. - [Scopes and Permissions](https://docs.scalekit.com/agentkit/authentication/scopes-permissions.md): Learn how to manage OAuth scopes and permissions for AgentKit connections to control what your application can access. - [Testing Authentication Flows](https://docs.scalekit.com/agentkit/authentication/testing-auth-flows.md): Learn how to test AgentKit authentication flows in development, staging, and production environments with comprehensive testing strategies. - [Authentication Troubleshooting](https://docs.scalekit.com/agentkit/authentication/troubleshooting.md): Debug and resolve common authentication issues with AgentKit, including OAuth failures, token problems, and provider-specific errors. ## AgentKit — Custom Connectors - [Create your own connector](https://docs.scalekit.com/agentkit/bring-your-own-connector/create-connector.md): Choose an auth type, build the connector payload, and create or manage custom connectors in Scalekit. - [Making tool calls](https://docs.scalekit.com/agentkit/bring-your-own-connector/making-tool-calls.md): Make tool calls using a REST API connector via Tool Proxy, or discover and execute tools from a custom MCP connector. - [Add your own connector](https://docs.scalekit.com/agentkit/bring-your-own-connector/overview.md): Add custom connectors and extend coverage while keeping authentication and authorization in Scalekit. ## AgentKit — Advanced - [Bring your own credentials](https://docs.scalekit.com/agentkit/advanced/bring-your-own-oauth.md): Configure your own OAuth app credentials so users see your brand on consent screens, not Scalekit's. - [Set up a custom domain](https://docs.scalekit.com/agentkit/advanced/custom-domain.md): Replace the default Scalekit endpoint with your own branded domain using CNAME configuration. - [AgentKit launch checklist](https://docs.scalekit.com/agentkit/advanced/launch-checklist.md): Verify your AgentKit integration is production-ready before going live. - [Authorization - Overview](https://docs.scalekit.com/agentkit/advanced/overview.md): Learn about authorization options in Agent Auth, including OAuth flows, permissions, and security best practices. - [Proxy API Calls](https://docs.scalekit.com/agentkit/advanced/proxy-api-calls.md): Use Scalekit managed authentication and make direct HTTP calls to third party applications ## AgentKit — Connectors (100+ pre-built integrations) - [Agent connectors](https://docs.scalekit.com/agentkit/connectors.md): Connect AI applications to tools and data from Slack, Google Workspace, Salesforce, and more. - [Affinity](https://docs.scalekit.com/agentkit/connectors/affinity.md) - [Airtable](https://docs.scalekit.com/agentkit/connectors/airtable.md) - [Apify MCP](https://docs.scalekit.com/agentkit/connectors/apifymcp.md) - [Apollo](https://docs.scalekit.com/agentkit/connectors/apollo.md) - [Asana](https://docs.scalekit.com/agentkit/connectors/asana.md) - [Attention](https://docs.scalekit.com/agentkit/connectors/attention.md) - [Attio](https://docs.scalekit.com/agentkit/connectors/attio.md) - [Google BigQuery](https://docs.scalekit.com/agentkit/connectors/bigquery.md) - [BigQuery (Service Account)](https://docs.scalekit.com/agentkit/connectors/bigqueryserviceaccount.md) - [Bitbucket](https://docs.scalekit.com/agentkit/connectors/bitbucket.md) - [Box](https://docs.scalekit.com/agentkit/connectors/box.md) - [Brave Search](https://docs.scalekit.com/agentkit/connectors/brave.md) - [Calendly](https://docs.scalekit.com/agentkit/connectors/calendly.md) - [Chorus](https://docs.scalekit.com/agentkit/connectors/chorus.md) - [Clari Copilot](https://docs.scalekit.com/agentkit/connectors/clari_copilot.md) - [ClickUp](https://docs.scalekit.com/agentkit/connectors/clickup.md) - [Close](https://docs.scalekit.com/agentkit/connectors/close.md) - [Confluence](https://docs.scalekit.com/agentkit/connectors/confluence.md) - [Databricks Workspace](https://docs.scalekit.com/agentkit/connectors/databricksworkspace.md) - [Datadog](https://docs.scalekit.com/agentkit/connectors/datadog.md): Connect to Datadog to monitor metrics, logs, dashboards, monitors, incidents, SLOs, and more across your infrastructure. - [Diarize](https://docs.scalekit.com/agentkit/connectors/diarize.md) - [Discord](https://docs.scalekit.com/agentkit/connectors/discord.md) - [Dropbox](https://docs.scalekit.com/agentkit/connectors/dropbox.md) - [Dynamo Software](https://docs.scalekit.com/agentkit/connectors/dynamo.md) - [Evertrace AI](https://docs.scalekit.com/agentkit/connectors/evertrace.md) - [Exa](https://docs.scalekit.com/agentkit/connectors/exa.md) - [Fathom](https://docs.scalekit.com/agentkit/connectors/fathom.md) - [Figma](https://docs.scalekit.com/agentkit/connectors/figma.md) - [Freshdesk](https://docs.scalekit.com/agentkit/connectors/freshdesk.md) - [Github](https://docs.scalekit.com/agentkit/connectors/github.md) - [GitLab](https://docs.scalekit.com/agentkit/connectors/gitlab.md) - [Gmail](https://docs.scalekit.com/agentkit/connectors/gmail.md) - [Gong](https://docs.scalekit.com/agentkit/connectors/gong.md) - [Google Ads](https://docs.scalekit.com/agentkit/connectors/google_ads.md) - [Google Calendar](https://docs.scalekit.com/agentkit/connectors/googlecalendar.md) - [Google Docs](https://docs.scalekit.com/agentkit/connectors/googledocs.md) - [Google Drive](https://docs.scalekit.com/agentkit/connectors/googledrive.md) - [Google Forms](https://docs.scalekit.com/agentkit/connectors/googleforms.md) - [Google Meet](https://docs.scalekit.com/agentkit/connectors/googlemeet.md) - [Google Sheets](https://docs.scalekit.com/agentkit/connectors/googlesheets.md) - [Google Slides](https://docs.scalekit.com/agentkit/connectors/googleslides.md) - [Granola](https://docs.scalekit.com/agentkit/connectors/granola.md) - [Granola MCP](https://docs.scalekit.com/agentkit/connectors/granolamcp.md) - [HarvestAPI](https://docs.scalekit.com/agentkit/connectors/harvestapi.md) - [HeyReach](https://docs.scalekit.com/agentkit/connectors/heyreach.md) - [HubSpot](https://docs.scalekit.com/agentkit/connectors/hubspot.md) - [Intercom](https://docs.scalekit.com/agentkit/connectors/intercom.md) - [Jiminny](https://docs.scalekit.com/agentkit/connectors/jiminny.md) - [Jira](https://docs.scalekit.com/agentkit/connectors/jira.md) - [Linear](https://docs.scalekit.com/agentkit/connectors/linear.md) - [LinkedIn](https://docs.scalekit.com/agentkit/connectors/linkedin.md) - [Microsoft Excel](https://docs.scalekit.com/agentkit/connectors/microsoftexcel.md) - [Teams](https://docs.scalekit.com/agentkit/connectors/microsoftteams.md) - [Microsoft Word](https://docs.scalekit.com/agentkit/connectors/microsoftword.md) - [Miro](https://docs.scalekit.com/agentkit/connectors/miro.md) - [Monday.com](https://docs.scalekit.com/agentkit/connectors/monday.md) - [Notion](https://docs.scalekit.com/agentkit/connectors/notion.md) - [OneDrive](https://docs.scalekit.com/agentkit/connectors/onedrive.md) - [OneNote](https://docs.scalekit.com/agentkit/connectors/onenote.md) - [Outlook](https://docs.scalekit.com/agentkit/connectors/outlook.md) - [Outreach](https://docs.scalekit.com/agentkit/connectors/outreach.md) - [PagerDuty](https://docs.scalekit.com/agentkit/connectors/pagerduty.md) - [Parallel AI Task MCP](https://docs.scalekit.com/agentkit/connectors/parallelaitaskmcp.md) - [PhantomBuster](https://docs.scalekit.com/agentkit/connectors/phantombuster.md) - [Pipedrive](https://docs.scalekit.com/agentkit/connectors/pipedrive.md) - [PostHog MCP](https://docs.scalekit.com/agentkit/connectors/posthogmcp.md): Connect to PostHog MCP to query analytics, manage feature flags, run experiments, and interact with your product data. - [Salesforce](https://docs.scalekit.com/agentkit/connectors/salesforce.md) - [ServiceNow](https://docs.scalekit.com/agentkit/connectors/servicenow.md) - [SharePoint](https://docs.scalekit.com/agentkit/connectors/sharepoint.md) - [Slack](https://docs.scalekit.com/agentkit/connectors/slack.md) - [Snowflake](https://docs.scalekit.com/agentkit/connectors/snowflake.md) - [Snowflake Key Pair Auth](https://docs.scalekit.com/agentkit/connectors/snowflakekeyauth.md) - [Supadata](https://docs.scalekit.com/agentkit/connectors/supadata.md) - [Tableau](https://docs.scalekit.com/agentkit/connectors/tableau.md): Connect your agent to browse Tableau workbooks, export dashboards, query data sources, and manage site resources via Personal Access Token. - [Trello](https://docs.scalekit.com/agentkit/connectors/trello.md) - [Twitter / X](https://docs.scalekit.com/agentkit/connectors/twitter.md) - [Vercel](https://docs.scalekit.com/agentkit/connectors/vercel.md) - [Vimeo](https://docs.scalekit.com/agentkit/connectors/vimeo.md) - [YouTube](https://docs.scalekit.com/agentkit/connectors/youtube.md) - [Zendesk](https://docs.scalekit.com/agentkit/connectors/zendesk.md) - [Zoom](https://docs.scalekit.com/agentkit/connectors/zoom.md) ## MCP Authentication - [MCP Servers - Additional Reading](https://docs.scalekit.com/authenticate/mcp/additional-reading.md): Explore advanced topics for MCP servers, including OAuth 2.1 flows, scope design, dynamic client registration, and security best practices. - [MCP authentication patterns](https://docs.scalekit.com/authenticate/mcp/auth-patterns.md): Authentication patterns: Human users via OAuth Authorization Code flow, autonomous agents via Client Credentials flow, and downstream integrations using API keys, OAuth, or token cascading - [MCP Auth code samples](https://docs.scalekit.com/authenticate/mcp/code-samples.md): MCP Auth authentication examples and patterns - [Bring your own auth into your MCP server](https://docs.scalekit.com/authenticate/mcp/custom-auth.md): Federated authentication system with Scalekit's OAuth 2.1 authorization layer for MCP servers - [Express.js quickstart](https://docs.scalekit.com/authenticate/mcp/expressjs-quickstart.md): Build a production-ready Express.js MCP server with TypeScript, custom middleware for OAuth token validation, and Scalekit authentication. - [FastAPI + FastMCP quickstart](https://docs.scalekit.com/authenticate/mcp/fastapi-fastmcp-quickstart.md): Build a production-ready MCP server with FastAPI custom middleware for OAuth token validation and Scalekit authentication. - [FastMCP quickstart](https://docs.scalekit.com/authenticate/mcp/fastmcp-quickstart.md): FastMCP todo server with OAuth scope validation and CRUD operations. - [New to MCP?](https://docs.scalekit.com/authenticate/mcp/intro-to-mcp-auth.md): Lock down MCP connections with OAuth 2.1 so agents get only the access they need - [Managing MCP Clients](https://docs.scalekit.com/authenticate/mcp/managing-mcp-clients.md): Manage MCP clients by viewing registered MCP clients, tracking user consent, and revoking access to your MCP servers. - [Overview: MCP server authentication](https://docs.scalekit.com/authenticate/mcp/overview.md): Secure your Model Context Protocol (MCP) servers with Scalekit's drop-in OAuth 2.1 authorization solution - [Add OAuth 2.1 authorization to MCP servers](https://docs.scalekit.com/authenticate/mcp/quickstart.md): Secure your Model Context Protocol (MCP) servers with Scalekit's drop-in OAuth 2.1 authorization solution and protect your AI integrations - [Agent / Machine interacting with MCP Server](https://docs.scalekit.com/authenticate/mcp/topologies/agent-mcp.md): Learn how an autonomous agent or machine securely authenticates with an MCP Server using OAuth 2.1 Client Credentials flow in Scalekit. - [Human interacting with MCP Server](https://docs.scalekit.com/authenticate/mcp/topologies/human-mcp.md): Learn how a human authenticates with an MCP Server via OAuth 2.1 when using MCP-compliant hosts such as ChatGPT, Claude, VSCode, or Windsurf. - [MCP Server interacting with MCPs / APIs](https://docs.scalekit.com/authenticate/mcp/topologies/mcp-api.md): Understand how an MCP Server integrates with internal systems, other MCP servers, or external APIs using secure tokens or API keys. - [Troubleshooting MCP auth](https://docs.scalekit.com/authenticate/mcp/troubleshooting.md): Troubleshooting guide for common errors while adding auth for MCP Servers - [Bring Your Own Auth](https://docs.scalekit.com/mcp/auth-methods/custom-auth.md): Using Scalekit as a drop-in OAuth 2.1 authorization layer for your MCP Servers with federated authentication to your existing auth layer. - [Secure MCP with Enterprise SSO](https://docs.scalekit.com/mcp/auth-methods/enterprise.md): Use Scalekit's out-of-the-box enterprise SSO connections to authenticate your MCP server from first request. - [Secure MCP with Social Logins](https://docs.scalekit.com/mcp/auth-methods/social.md): Use Scalekit's out-of-the-box social connections to authenticate your MCP server from the first request. ## SaaSKit / Full Stack Auth - [Code samples](https://docs.scalekit.com/authenticate/fsa/code-samples.md): Full stack auth code samples demonstrating complete authentication implementations with hosted login and session management - [Complete login with code exchange](https://docs.scalekit.com/authenticate/fsa/complete-login.md): Process authentication callbacks and handle redirect flows after users authenticate with Scalekit - [Initiate user signup or login](https://docs.scalekit.com/authenticate/fsa/implement-login.md): Create authorization URLs and redirect users to Scalekit's hosted login page - [Implement logout](https://docs.scalekit.com/authenticate/fsa/logout.md): Terminate user sessions across your application and Scalekit - [Manage user sessions](https://docs.scalekit.com/authenticate/fsa/manage-session.md): Store tokens safely with proper cookie security, validate on every request, and refresh with rotation to keep sessions secure - [Manage applications](https://docs.scalekit.com/authenticate/fsa/multiapp/manage-apps.md): Register and manage applications in your shared authentication system - [Mobile & desktop applications](https://docs.scalekit.com/authenticate/fsa/multiapp/native-app.md): Implement Multi-App Authentication for mobile and desktop apps using Authorization Code with PKCE - [Multi-App Authentication](https://docs.scalekit.com/authenticate/fsa/multiapp/overview.md): Share authentication across web, mobile, and desktop applications with a unified session - [Single page application](https://docs.scalekit.com/authenticate/fsa/multiapp/single-page-app.md): Implement Multi-App Authentication for single page apps using Authorization Code with PKCE - [Web application](https://docs.scalekit.com/authenticate/fsa/multiapp/web-app.md): Implement Multi-App Authentication for web apps using Authorization Code flow with client_id and client_secret - [SaaSKit: Add auth to my app](https://docs.scalekit.com/authenticate/fsa/quickstart.md): SaaSKit — Hosted auth pages, managed sessions, secure logout. Purpose built. Simple where it counts - [User management settings](https://docs.scalekit.com/authenticate/fsa/user-management-settings.md): Configure user management settings, including user attributes and configuration options from to Scalekit dashboard. - [Overview of modelling users and organizations](https://docs.scalekit.com/fsa/data-modelling.md): Put together a data model for your app's users and organizations - [Just-in-time provisioning](https://docs.scalekit.com/fsa/guides/just-in-time-provisioning.md): Automatically provision users when they sign in through SSO for the first time - [Brand your login page](https://docs.scalekit.com/fsa/guides/login-page-branding.md): Learn how to customize the look and feel of your Scalekit-hosted login page to match your brand. - [Create and manage organizations](https://docs.scalekit.com/fsa/guides/manage-organization.md): Create and manage organizations in Scalekit, configure settings, and enable enterprise features. - [Manage user memberships](https://docs.scalekit.com/fsa/guides/manage-users.md): How users join, switch, and leave organizations (a.k.a workspaces) - [Migrate to Full Stack Auth](https://docs.scalekit.com/fsa/guides/migration-guide.md): Step-by-step guide to move user, organization, and auth flows from existing systems to Scalekit. - [Set external IDs & metadata](https://docs.scalekit.com/fsa/guides/organization-identifiers.md): Use your own identifiers and store custom fields for organizations and users to maintain data consistency across your systems - [Enable magic link & OTP based sign in](https://docs.scalekit.com/fsa/guides/passwordless.md): How to configure magic link & OTP based passwordless authentication for your application - [Invite users to organizations](https://docs.scalekit.com/fsa/guides/user-invitations.md): Build comprehensive user invitation systems in your application. Send verification emails, track invitation status, and create seamless onboarding experiences ## Enterprise SSO - [Add Modular SSO](https://docs.scalekit.com/authenticate/sso/add-modular-sso.md): Enable enterprise SSO for any customer in minutes with built-in SAML and OIDC integrations - [Admin portal](https://docs.scalekit.com/authenticate/sso/admin-portal.md): Implement Scalekit's self-serve admin portal to let customers configure SSO via a shareable link or embedded iframe - [Code samples](https://docs.scalekit.com/authenticate/sso/code-samples.md): Code samples demonstrating Single Sign-On implementations with Express.js, .NET Core, Firebase, AWS Cognito, and Next.js - [Ways to implement SSO logins](https://docs.scalekit.com/sso/guides/add-login-ux-sso.md): Implement single sign-on on your login page using three UX strategies: identifier-driven, SSO button, or organization-specific pages. - [Authorization URL to initiate SSO](https://docs.scalekit.com/sso/guides/authorization-url.md): Learn how to construct and implement authorization URLs in Scalekit to initiate secure Single Sign-on (SSO) flows with your identity provider. - [Handle identity provider initiated SSO](https://docs.scalekit.com/sso/guides/idp-init-sso.md): Learn how to securely implement IdP-initiated Single Sign-On for your application - [Production readiness checklist](https://docs.scalekit.com/sso/guides/launch-checklist.md): A focused checklist for launching your Scalekit SSO integration, based on the core enterprise authentication launch checks. - [Onboard enterprise customers](https://docs.scalekit.com/sso/guides/onboard-enterprise-customers.md): Complete workflow for enabling enterprise SSO and self-serve configuration for your customers - [Introduction to Single Sign-on](https://docs.scalekit.com/sso/guides/sso-basics.md): Learn to basics of Single Sign-On (SSO), including how SAML and OIDC protocols work, and how Scalekit simplifies enterprise authentication. - [Map user attributes to IdP](https://docs.scalekit.com/sso/guides/sso-user-attributes.md): Learn how to add and map custom user attributes, such as an employee number, from an Identity Provider (IdP) like Okta using Scalekit. - [SSO simulator](https://docs.scalekit.com/sso/guides/test-sso.md): Test Enterprise SSO based authentication using our SSO Simulator without configuring SAML or OIDC based SSO with a real IdP - [Normalized user profile](https://docs.scalekit.com/sso/guides/user-profile-details.md): Learn how Scalekit's normalized user profiles standardize identity data across providers, streamlining single sign-on (SSO) integration and user management. - [Modular SSO quickstart](https://docs.scalekit.com/sso/quickstart.md): Enable enterprise SSO for any customer in minutes with built-in SAML and OIDC integrations - [Error handling during single sign-on](https://docs.scalekit.com/sso/reference/sso-integration-errors.md): Learn how to identify and resolve common single sign-on errors in Scalekit, ensuring a seamless authentication experience for your users ## SCIM Provisioning - [Admin portal](https://docs.scalekit.com/directory/admin-portal.md): Implement Scalekit's self-serve admin portal to let customers configure SCIM via a shareable link or embedded iframe - [Explore sample apps](https://docs.scalekit.com/directory/code-examples.md): Explore sample apps for building an Admin Portal and integrating webhooks. Find code examples to streamline SCIM provisioning and user management. - [Code samples](https://docs.scalekit.com/directory/code-samples.md): Code samples demonstrating SCIM provisioning examples and integration patterns for user and group management - [Automatically assign roles](https://docs.scalekit.com/directory/guides/group-based-role-assignment.md): Automatically assign roles to users in your application by mapping directory provider groups to application roles using Scalekit - [Production readiness checklist](https://docs.scalekit.com/directory/guides/launch-checklist.md): A focused checklist for launching your Scalekit SCIM provisioning integration, based on core enterprise authentication launch checks. - [Onboard enterprise customers](https://docs.scalekit.com/directory/guides/onboard-enterprise-customers.md): Complete workflow for enabling SCIM provisioning and self-serve directory sync configuration for your enterprise customers - [Review SCIM protocol](https://docs.scalekit.com/directory/guides/scim-protocol.md): Learn about core components, resources, schemas, and real-world implementation scenarios for identity management across cloud applications through SCIM - [Understanding SCIM Provisioning](https://docs.scalekit.com/directory/guides/user-provisioning-basics.md): The business case for implementing SCIM - [Directory events](https://docs.scalekit.com/directory/reference/directory-events.md): Explore webhook events related to directory operations in Scalekit, including user and group creation, updates, and deletions. - [Add Modular SCIM provisioning](https://docs.scalekit.com/directory/scim/quickstart.md): Automate user provisioning with SCIM. Directory API and webhooks for real-time user data sync ## Machine-to-Machine Auth - [Add OAuth 2.0 to your APIs](https://docs.scalekit.com/authenticate/m2m/api-auth-quickstart.md): Secure your APIs in minutes with OAuth 2.0 client credentials, scoped access, and JWT validation using Scalekit - [API keys](https://docs.scalekit.com/authenticate/m2m/api-keys.md): Issue long-lived, revocable API keys scoped to organizations and users for programmatic access to your APIs ## User & Org Management - [Add users to organizations](https://docs.scalekit.com/authenticate/manage-organizations/add-users-to-organization.md): Ways in which users join or get added to organizations - [Remove users from organizations](https://docs.scalekit.com/authenticate/manage-organizations/remove-users-from-organization.md): Remove users from organizations through dashboard management and API while maintaining security and compliance - [Create organizations](https://docs.scalekit.com/authenticate/manage-users-orgs/create-organization.md): Ways the organizations are created in Scalekit - [Customize user profiles](https://docs.scalekit.com/authenticate/manage-users-orgs/custom-user-attributes.md): Tailor user profiles to your business needs by creating and managing user profile attributes in Scalekit - [Delete users and organizations](https://docs.scalekit.com/authenticate/manage-users-orgs/delete-users-and-organizations.md): Trigger deletions and let Scalekit handle sessions, memberships, and cleanup automatically - [Configure email domain rules](https://docs.scalekit.com/authenticate/manage-users-orgs/email-domain-rules.md): Set up allowed domains for organization auto-join and configure restrictions for generic and disposable email sign-ups - [UI widgets - Sign up, login, user profiles](https://docs.scalekit.com/authenticate/manage-users-orgs/hosted-widgets.md): Customers manage organizations and users for their workspace through hosted widgets - [Provision user accounts Just-In-Time (JIT)](https://docs.scalekit.com/authenticate/manage-users-orgs/jit-provisioning.md): Turn first-time SSO logins into instant, secure access - [Merge user identities](https://docs.scalekit.com/authenticate/manage-users-orgs/merge-identities.md): Scalekit automatically merges user identities from different authentication methods, ensuring a single user profile and preventing duplicate accounts - [Implement organization switcher](https://docs.scalekit.com/authenticate/manage-users-orgs/organization-switching.md): Let users switch across workspaces using prompt-based selection or direct org routing via organization ID - [Provision users and groups with SCIM](https://docs.scalekit.com/authenticate/manage-users-orgs/scim-provisioning.md): Automate user and group lifecycle management using SCIM provisioning ## SDK & API Reference - [SDKs](https://docs.scalekit.com/dev-kit/sdks.md): Ready-to-use SDKs for Node.js, Python, Go, and Java to integrate Scalekit into your app - [BigQuery (Service Account)](https://docs.scalekit.com/reference/agent-connectors/bigqueryserviceaccount.md) - [Box](https://docs.scalekit.com/reference/agent-connectors/box.md): Connect to Box to manage files, folders, users, tasks, webhooks, collaborations, and more using OAuth 2.0. - [Contact Us](https://docs.scalekit.com/reference/contact-us.md): Get in touch with the Scalekit team for support, schedule a call, or find answers to frequently asked questions about our services. - [Glossary](https://docs.scalekit.com/reference/glossary.md): A comprehensive glossary of terms related to authentication, authorization, and identity management in B2B SaaS applications. - [Interceptor triggers](https://docs.scalekit.com/reference/interceptors/triggers.md): The points in the authentication flow where Scalekit calls your interceptor endpoint - [UI events from the embedded admin portal](https://docs.scalekit.com/reference/ui-events.md): Learn how to listen for and handle UI events from the embedded admin portal, such as SSO connection status and session expiration. - [Directory events](https://docs.scalekit.com/reference/webhooks/directory-events.md): Explore the webhook events related to directory operations in Scalekit, including user and group creation, updates, and deletions. - [Organization events](https://docs.scalekit.com/reference/webhooks/organization-events.md): Explore the webhook events related to organization operations in Scalekit, including creation, updates, and deletions. - [Permission events](https://docs.scalekit.com/reference/webhooks/permission-events.md): Explore the webhook events related to permission operations in Scalekit, including creation, updates, and deletions. - [Role events](https://docs.scalekit.com/reference/webhooks/role-events.md): Explore the webhook events related to role operations in Scalekit, including creation, updates, and deletions. - [Enterprise SSO events](https://docs.scalekit.com/reference/webhooks/sso-events.md): Explore the webhook events related to Enterprise SSO operations in Scalekit, including connection creation, enabling, disabling, and deletion. - [User events](https://docs.scalekit.com/reference/webhooks/user-events.md): Explore the webhook events related to user operations in Scalekit, including signup, login, logout, and organization membership events. ## Cookbooks & Examples - [Add Enterprise SSO to Next.js with Auth.js](https://docs.scalekit.com/cookbooks/add-enterprise-sso-nextjs-authjs.md): Wire Scalekit''s OIDC interface into Auth.js to ship per-tenant enterprise SSO in Next.js without touching SAML or IdP-specific code. - [Building a Custom Organization Switcher](https://docs.scalekit.com/cookbooks/building-custom-org-switcher.md): Learn how to build your own organization switcher UI for complete control over multi-tenant user experiences. - [Build a daily briefing agent with Vercel AI SDK and Scalekit Agent Auth](https://docs.scalekit.com/cookbooks/daily-briefing-agent.md): Connect a TypeScript or Python agent via Vercel AI SDK and Scalekit Agent Auth to Google Calendar and Gmail using two integration patterns. - [Implementing Passwordless Auth in Next.js 15](https://docs.scalekit.com/cookbooks/implement-nextjs-auth.md): Add magic link and OTP authentication to your Next.js application using Scalekit''s headless API. - [Configuring JWT Validation Timeouts in Spring Boot 4.0+](https://docs.scalekit.com/cookbooks/java-spring-boot-jwt-timeout.md): Fix connection timeout errors when validating Scalekit JWT tokens in Spring Boot 4.0.0 and later versions. - [M2M JWT verification with JWKS and OAuth scopes](https://docs.scalekit.com/cookbooks/m2m-jwks-and-oauth-scopes.md): How JSON Web Key Sets work with Scalekit, how to use the /keys endpoint to verify machine-to-machine tokens, and how OAuth scopes map to JWT claims for authorization. - [Build a multi-user GitHub PR summarizer agent](https://docs.scalekit.com/cookbooks/render-github-pr-summarizer.md): Build a GitHub PR summarizer that binds each connected GitHub account to a secure browser session instead of trusting a client-supplied user ID. - [Build an agent that books meetings and drafts emails](https://docs.scalekit.com/cookbooks/schedule-meeting-and-draft-email.md): Connect a Python agent to Google Calendar and Gmail via Scalekit to find free slots, book meetings, and draft follow-up emails. - [Enforce seat limits with SCIM provisioning](https://docs.scalekit.com/cookbooks/scim-seat-limit-enforcement.md): Block over-quota user creation and alert admins when SCIM pushes users beyond your plan seat limit. - [Search Scalekit docs with ref.tools](https://docs.scalekit.com/cookbooks/search-scalekit-docs-in-your-ide.md): Configure ref.tools MCP to search Scalekit documentation directly from Cursor, Claude Code, or Windsurf without leaving your IDE. - [Set up AgentKit with your coding agent](https://docs.scalekit.com/cookbooks/set-up-agentkit-with-your-coding-agent.md): Add Scalekit Agent Auth to your codebase using Claude Code, Codex, GitHub Copilot CLI, Cursor, or any of 40+ coding agents. - [Code Samples](https://docs.scalekit.com/resources/code-samples/code-samples.md): Explore comprehensive code samples and examples for integrating with Scalekit across different programming languages and frameworks - [Full stack auth](https://docs.scalekit.com/resources/code-samples/full-stack-auth.md): Code samples demonstrating complete authentication implementations with hosted login and session management - [MCP Auth](https://docs.scalekit.com/resources/code-samples/mcp-auth.md): Model Context Protocol authentication examples and patterns - [Modular SCIM](https://docs.scalekit.com/resources/code-samples/modular-scim.md): Code samples demonstrating SCIM provisioning examples and integration patterns for user and group management - [Modular SSO](https://docs.scalekit.com/resources/code-samples/modular-sso.md): Code samples demonstrating Single Sign-On implementations with Express.js, .NET Core, Firebase, AWS Cognito, and Next.js ## Developer Kit & AI-Assisted Development - [Developer resources](https://docs.scalekit.com/dev-kit.md): Accelerate your build with the Scalekit Dev Kit. Get instant access to SDKs, API references, sample apps, and other developer tools - [Claude Integration](https://docs.scalekit.com/dev-kit/ai-assisted-development/claude.md): Integrate Scalekit with Claude for AI-powered authentication workflows - [Codex Integration](https://docs.scalekit.com/dev-kit/ai-assisted-development/codex.md): Use Scalekit with Codex for automated authentication code generation - [Use Scalekit docs in your AI coding agent](https://docs.scalekit.com/dev-kit/ai-assisted-development/context7.md): Use Context7 to give your AI coding agent accurate, up-to-date Scalekit documentation so it can help you integrate faster and with fewer errors. - [Cursor Integration](https://docs.scalekit.com/dev-kit/ai-assisted-development/cursor.md): Use Scalekit with Cursor via the local installer while the marketplace listing is under review - [Scalekit MCP Server](https://docs.scalekit.com/dev-kit/ai-assisted-development/scalekit-mcp-server.md): Learn how to use the Scalekit MCP Server to manage your users, organizations, and applications. - [VS Code Extension](https://docs.scalekit.com/dev-kit/ai-assisted-development/vscode.md): Enhance your development workflow with the Scalekit VS Code extension - [OpenAPI Specifications](https://docs.scalekit.com/dev-kit/api-collections/openapi-spec.md): Access Scalekit OpenAPI specifications for API documentation and client generation - [APIs](https://docs.scalekit.com/dev-kit/apis.md): Learn how to work with Scalekit REST APIs, including authentication, pagination, error handling, and rate limits. - [Build with AI](https://docs.scalekit.com/dev-kit/build-with-ai.md): Use AI coding agents to implement Scalekit authentication in minutes - [Coding agents: Add full-stack auth to your app](https://docs.scalekit.com/dev-kit/build-with-ai/full-stack-auth.md): Let your coding agents guide you into implementing Scalekit full-stack authentication in minutes - [MCP quickstart with AI coding agents](https://docs.scalekit.com/dev-kit/build-with-ai/mcp-auth.md): Use AI coding agents to add OAuth 2.1 authentication to your MCP servers in minutes - [Coding agents: Add SCIM directory sync to your app](https://docs.scalekit.com/dev-kit/build-with-ai/scim.md): Let your coding agents guide you into adding Scalekit SCIM provisioning to your application in minutes - [Coding agents: Add SSO to your app](https://docs.scalekit.com/dev-kit/build-with-ai/sso.md): Let your coding agents guide you into adding Scalekit SSO to your existing application in minutes - [Billing and usage](https://docs.scalekit.com/dev-kit/guides/dashboard/billing.md): View your current plan, manage payment methods, and monitor your Scalekit usage. - [Manage environments](https://docs.scalekit.com/dev-kit/guides/dashboard/environments.md): Configure and manage development, staging, and production environments in Scalekit. - [Manage team members](https://docs.scalekit.com/dev-kit/guides/dashboard/manage-team-members.md): Invite team members to your Scalekit organization and manage their access and permissions. - [SCIM Simulator](https://docs.scalekit.com/dev-kit/guides/testing/scim-simulator.md): Test your SCIM integration locally with the Scalekit SCIM Simulator - [Set up AI-assisted development](https://docs.scalekit.com/dev-kit/resources/ai-assisted-setup.md): Learn how to use AI assisted setup to create a new project in Scalekit - [Authorization best practices](https://docs.scalekit.com/dev-kit/resources/authorization-best-practices.md): Security guidelines and best practices for implementing robust authorization systems with Scalekit - [Dryrun](https://docs.scalekit.com/dev-kit/tools/scalekit-dryrun.md): Try your authentication flows locally before any integration code is written - [SSO simulator](https://docs.scalekit.com/dev-kit/tools/sso-simulator.md): Test SSO flows end to end using Scalekit’s built-in IdP simulator and a pre-configured test organization. - [Use Scalekit credentials](https://docs.scalekit.com/dev-kit/tools/use-scalekit-credentials.md): Use Scalekit-managed test accounts to validate social logins and agent tool connections without configuring your own provider credentials. ## Guides - [Access token claims](https://docs.scalekit.com/guides/accesstoken-claims.md): Inspect the contents of the access token - [Admin portal](https://docs.scalekit.com/guides/admin-portal.md): Implement Scalekit's self-serve admin portal to let customers configure SSO and SCIM via a shareable link or embedded iframe - [Authenticate with Scalekit API](https://docs.scalekit.com/guides/authenticate-scalekit-api.md): Learn how to authenticate your server applications with Scalekit API using OAuth 2.0 Client Credentials flow - [Best practices for client secrets](https://docs.scalekit.com/guides/client-credentials-practices.md): Learn best practices for managing Scalekit client secrets, including secure storage, rotation procedures, and access control to protect your SSO implementation. - [Branded custom domains](https://docs.scalekit.com/guides/custom-domain.md): Learn how to set up a branded custom domain with Scalekit - [How to register a callback endpoint](https://docs.scalekit.com/guides/dashboard/allowed-callback-url.md): Learn how to register a callback endpoint in the Scalekit dashboard. - [View logs](https://docs.scalekit.com/guides/dashboard/auth-logs.md): Monitor authentication activities and webhook deliveries using comprehensive logs that track user sign-ins, authentication methods, and webhook event processing. - [Custom email templates](https://docs.scalekit.com/guides/dashboard/custom-email-templates.md): Customize authentication email templates with your branding and content - [Configure initiate login endpoint](https://docs.scalekit.com/guides/dashboard/intitate-login-endpoint.md): Set up a login endpoint that Scalekit redirects to when users access your application through indirect entry points - [Redirects](https://docs.scalekit.com/guides/dashboard/redirects.md): Learn how to configure and validate redirect URLs in Scalekit for secure authentication flows, including callback, login, logout, and back-channel logout endpoints - [Personalize email delivery](https://docs.scalekit.com/guides/email-providers.md): Learn how to personalize email delivery by using Scalekit's managed service or configuring your own SMTP provider for brand consistency and control. - [Managing organization identifiers & metadata](https://docs.scalekit.com/guides/external-ids-and-metadata.md): Learn how to use external IDs and metadata to manage and track organizations in Scalekit, associating your own identifiers and storing custom key-value pairs. - [ID token claims](https://docs.scalekit.com/guides/idtoken-claims.md): Inspect the contents of the ID token - [Integrations](https://docs.scalekit.com/guides/integrations.md): Explore Scalekit's comprehensive integration capabilities with SSO providers, social connections, SCIM provisioning, and authentication systems. - [Auth0](https://docs.scalekit.com/guides/integrations/auth-systems/auth0.md): Learn how to integrate Scalekit with Auth0 for seamless Single Sign-On (SSO) authentication, allowing enterprise users to log in via Scalekit. - [AWS Cognito](https://docs.scalekit.com/guides/integrations/auth-systems/aws-cognito.md): Learn how to integrate Scalekit with AWS Cognito as an OIDC provider for seamless enterprise Single Sign-On (SSO) authentication. - [Co-exist with Firebase](https://docs.scalekit.com/guides/integrations/auth-systems/firebase.md): Learn how to integrate Scalekit with Firebase for enterprise SSO, using either Firebase's OIDC provider or direct SSO with custom tokens. - [SCIM integrations](https://docs.scalekit.com/guides/integrations/scim-integrations.md): Step by Step guide to provisioning over own SCIM implementation - [Microsoft Azure AD](https://docs.scalekit.com/guides/integrations/scim-integrations/azure-scim.md): Integrate Microsoft Entra ID with the host application for seamless user management - [Generic SCIM](https://docs.scalekit.com/guides/integrations/scim-integrations/generic-scim.md): Learn how to configure a generic SCIM identity provider for automated user provisioning and management with your application. - [Google Workspace Directory](https://docs.scalekit.com/guides/integrations/scim-integrations/google-dir-sync.md): Integrate Google Workspace with the host application for seamless user management - [JumpCloud Directory](https://docs.scalekit.com/guides/integrations/scim-integrations/jumpcloud.md): Learn how to sync your JumpCloud directory with your application for automated user provisioning and management using SCIM. - [Okta Directory](https://docs.scalekit.com/guides/integrations/scim-integrations/okta-scim.md): Learn how to sync your Okta Directory with your application for automated user provisioning and management using SCIM. - [OneLogin Directory](https://docs.scalekit.com/guides/integrations/scim-integrations/onelogin.md): Learn how to sync your OneLogin directory with your application for automated user provisioning and management using SCIM. - [PingIdentity Directory](https://docs.scalekit.com/guides/integrations/scim-integrations/pingidentity-scim.md): Learn how to sync your PingIdentity Directory with your application for automated user provisioning and management using SCIM - [Social connections](https://docs.scalekit.com/guides/integrations/social-connections.md): Learn how to integrate social login providers with Scalekit to enable secure social authentication for your users. - [GitHub as your sign in option](https://docs.scalekit.com/guides/integrations/social-connections/github.md): Learn how to integrate GitHub Sign-In with Scalekit, enabling secure social authentication for your users with step-by-step OAuth configuration instructions. - [GitLab as your sign in option](https://docs.scalekit.com/guides/integrations/social-connections/gitlab.md): Learn how to integrate GitLab Sign-In with Scalekit, enabling secure social authentication for your users with step-by-step OAuth configuration instructions. - [Google as your sign in option](https://docs.scalekit.com/guides/integrations/social-connections/google.md): Learn how to integrate Google Sign-In with Scalekit, enabling secure social authentication for your users with step-by-step OAuth configuration instructions. - [LinkedIn as your sign in option](https://docs.scalekit.com/guides/integrations/social-connections/linkedin.md): Learn how to integrate LinkedIn Sign-In with Scalekit, enabling secure social authentication for your users with step-by-step OAuth configuration instructions. - [Microsoft as your sign in option](https://docs.scalekit.com/guides/integrations/social-connections/microsoft.md): Learn how to integrate Microsoft Sign-In with Scalekit, enabling secure social authentication for your users with step-by-step OAuth configuration instructions. - [Salesforce as your sign in option](https://docs.scalekit.com/guides/integrations/social-connections/salesforce.md): Learn how to integrate Salesforce Sign-In with Scalekit, enabling secure social authentication for your users with step-by-step OAuth configuration instructions. - [SSO Integrations](https://docs.scalekit.com/guides/integrations/sso-integrations.md): Learn how to integrate with Scalekit's SSO feature. - [Microsoft Entra ID - SAML](https://docs.scalekit.com/guides/integrations/sso-integrations/azure-ad-saml.md): Learn how to set up SAML-based Single Sign-On (SSO) using Microsoft Entra ID (Azure AD), with step-by-step instructions for enterprise application configuration. - [Generic OIDC](https://docs.scalekit.com/guides/integrations/sso-integrations/generic-oidc.md): Learn how to configure a generic OIDC identity provider for secure single sign-on (SSO) with your application. - [Generic SAML](https://docs.scalekit.com/guides/integrations/sso-integrations/generic-saml.md): Learn how to configure a generic SAML identity provider for secure single sign-on (SSO) with your application. - [Google Workspace - OIDC](https://docs.scalekit.com/guides/integrations/sso-integrations/google-oidc.md): Learn how to set up OpenID Connect (OIDC) Single Sign-On (SSO) using Google Workspace, with step-by-step instructions for app registration and client configuration. - [Google Workspace - SAML](https://docs.scalekit.com/guides/integrations/sso-integrations/google-saml.md): Learn how to configure Google Workspace as a SAML identity provider for secure single sign-on (SSO) with your application. - [JumpCloud - OIDC](https://docs.scalekit.com/guides/integrations/sso-integrations/jumpcloud-oidc.md): Learn how to set up OpenID Connect (OIDC) Single Sign-On (SSO) using JumpCloud, with step-by-step instructions for OIDC application setup. - [JumpCloud SAML](https://docs.scalekit.com/guides/integrations/sso-integrations/jumpcloud-saml.md): Learn how to configure JumpCloud as a SAML identity provider for secure single sign-on (SSO) with your application. - [Microsoft AD FS - SAML](https://docs.scalekit.com/guides/integrations/sso-integrations/microsoft-ad-fs.md): Learn how to configure Microsoft AD FS as a SAML identity provider for secure single sign-on (SSO) with your application. - [Microsoft Entra ID - OIDC](https://docs.scalekit.com/guides/integrations/sso-integrations/microsoft-entraid-oidc.md): Learn how to set up OpenID Connect (OIDC) Single Sign-On (SSO) using Microsoft Entra ID, with step-by-step instructions for app registration and OIDC configuration. - [Okta - OIDC](https://docs.scalekit.com/guides/integrations/sso-integrations/okta-oidc.md): Learn how to set up OpenID Connect (OIDC) Single Sign-On (SSO) using Okta as your identity provider, with step-by-step instructions for app integration setup. - [Okta SAML](https://docs.scalekit.com/guides/integrations/sso-integrations/okta-saml.md): Learn how to set up SAML-based Single Sign-On (SSO) using Okta as your Identity Provider, with step-by-step instructions for enterprise application configuration. - [OneLogin - OIDC](https://docs.scalekit.com/guides/integrations/sso-integrations/onelogin-oidc.md): Learn how to set up OpenID Connect (OIDC) Single Sign-On (SSO) using OneLogin, with step-by-step instructions for OIDC application setup. - [OneLogin SAML](https://docs.scalekit.com/guides/integrations/sso-integrations/onelogin-saml.md): A step-by-step guide to setting up Single Sign-On with OneLogin as the Identity Provider, including creating an enterprise application, configuring SAML, attribute mapping, assigning users, uploading IdP metadata, testing the connection, and enabling SSO. - [Ping Identity - OIDC](https://docs.scalekit.com/guides/integrations/sso-integrations/pingidentity-oidc.md): Learn how to set up OpenID Connect (OIDC) Single Sign-On (SSO) using Ping Identity, with step-by-step instructions for OIDC application setup. - [PingIdentity SAML](https://docs.scalekit.com/guides/integrations/sso-integrations/pingidentity-saml.md): Learn how to configure PingIdentity as a SAML identity provider for secure single sign-on (SSO) with your application. - [Shibboleth SAML](https://docs.scalekit.com/guides/integrations/sso-integrations/shibboleth-saml.md): A step-by-step guide to setting up Single Sign-On with Shibboleth as the Identity Provider, including creating an enterprise application, configuring SAML, attribute mapping, assigning users, uploading IdP metadata, testing the connection, and enabling SSO. - [Authenticate customer apps](https://docs.scalekit.com/guides/m2m/api-auth-m2m-clients.md): Use Scalekit to implement OAuth for customer apps. Issue tokens and validate API requests with JWKS - [Machine-2-Machine authentication](https://docs.scalekit.com/guides/m2m/overview.md): Secure interactions between software systems with M2M authentication, enabling secure API access for AI agents, apps, and automated workflows - [Bring your own email provider](https://docs.scalekit.com/guides/passwordless/custom-email-provider.md): Scalekit allows you to configure your own email provider to improve deliverability and security. - [Authentication best practices](https://docs.scalekit.com/guides/security/authentication-best-practices.md): Security best practices for authentication implementation, including threat modeling, advanced patterns, and security checklists. - [Pre-check SSO by domain](https://docs.scalekit.com/guides/user-auth/check-sso-domain.md): Validate that a user's email domain has an active SSO connection before redirecting to prevent dead-end redirects and improve user experience. - [Link to billing, CRM & HR systems](https://docs.scalekit.com/guides/user-auth/external-id-system-integration.md): Production-ready patterns for linking Scalekit organizations and users to Stripe, Salesforce, Workday and other enterprise systems using external identifiers - [Modular social logins](https://docs.scalekit.com/guides/user-auth/modular-social-logins.md): Learn how to integrate modular social logins module with Scalekit - [Preserve target route post-auth](https://docs.scalekit.com/guides/user-auth/preserve-intended-destination.md): Redirect users back to page they asked for after authentication using a signed return URL - [Set up SCIM connection](https://docs.scalekit.com/guides/user-management/scim-provisioning.md): Set up a SCIM connection to your directory provider - [Following webhook best practices](https://docs.scalekit.com/guides/webhooks-best-practices.md): Learn best practices for implementing webhooks in your SCIM integration. Covers security measures, event handling, signature verification, and performance optimization techniques for real-time directory updates. ## Passwordless - [Passwordless OIDC Quickstart](https://docs.scalekit.com/passwordless/oidc.md): Add passwordless sign-in with OTP or magic link via OIDC - [Overview](https://docs.scalekit.com/passwordless/overview.md): Passwordless authentication provides a secure and convenient way to authenticate users without the need for passwords. - [Headless email API for magic link and OTP](https://docs.scalekit.com/passwordless/quickstart.md): Implement email OTP or magic link using direct API calls with full control over UX ## Authentication Methods - [User authentication flow](https://docs.scalekit.com/authenticate/auth-methods/authentication-flow.md): Learn how Scalekit routes users through authentication based on login method and organization SSO policies. - [Implement enterprise SSO](https://docs.scalekit.com/authenticate/auth-methods/enterprise-sso.md): How to implement enterprise SSO for your application - [Add passkeys login method](https://docs.scalekit.com/authenticate/auth-methods/passkeys.md): Enable passkey authentication for your users - [Sign in with magic link or Email OTP](https://docs.scalekit.com/authenticate/auth-methods/passwordless.md): Enable passwordless sign-in with email verification codes or magic links - [Add social login to your app](https://docs.scalekit.com/authenticate/auth-methods/social-logins.md): Implement authentication with Google, Microsoft, GitHub, and other social providers - [Assign roles to users](https://docs.scalekit.com/authenticate/authz/assign-roles.md): Learn how to assign roles to users in your application using to dashboard, SDK, or automated provisioning - [Create and manage roles and permissions](https://docs.scalekit.com/authenticate/authz/create-roles-permissions.md): Set up roles and permissions to control access in your application - [Implement access control](https://docs.scalekit.com/authenticate/authz/implement-access-control.md): Verify permissions and roles in your application code to control user access - [Role based access control (RBAC)](https://docs.scalekit.com/authenticate/authz/overview.md): Control what authenticated users can access in your application based on their roles and permissions - [Handle webhook events in your application](https://docs.scalekit.com/authenticate/implement-workflows/implement-webhooks.md): Receive real-time notifications about authentication events in your application using Scalekit webhooks - [Intercept authentication flows](https://docs.scalekit.com/authenticate/interceptors/auth-flow-interceptors.md): Apply decision checks at key points in the authentication flow - [Production readiness checklist](https://docs.scalekit.com/authenticate/launch-checklist.md): A focused checklist for delivering a production-ready authentication system that's secure, reliable, and compliant - [Set up environment & SDK](https://docs.scalekit.com/authenticate/set-up-scalekit.md): Create your account, install SDK, set up AI tools, and verify your setup to start building with Scalekit ## Other pages - [Agent framework integration examples](https://docs.scalekit.com/browse/code-samples/agent-framework-examples.md): Examples showing how to integrate Scalekit Agent Auth with various AI frameworks including LangChain, Google ADK, and direct integrations. - [AWS Cognito integration examples](https://docs.scalekit.com/browse/code-samples/cognito-examples.md): Examples showing how to integrate AWS Cognito with Scalekit SSO using OpenID Connect (OIDC). - [Firebase integration examples](https://docs.scalekit.com/browse/code-samples/firebase-examples.md): Examples showing how to integrate Firebase Authentication with Scalekit SSO across different implementations. - [Exchange code for user profile](https://docs.scalekit.com/browse/code-samples/gists/auth-code-exchange-scalekit-sdk.md): Learn how to exchange the authorization code for the user's profile - [Client credentials auth with Scalekit API](https://docs.scalekit.com/browse/code-samples/gists/client-credentials-auth.md): Learn how to authenticate with the Scalekit API using client credentials - [Admin portal embedding](https://docs.scalekit.com/browse/code-samples/github/admin-portal-embedding.md): Example showing embedded admin portal - [API collections](https://docs.scalekit.com/browse/code-samples/github/api-collections.md): Postman and Bruno collections for testing Scalekit APIs. - [Code gists collection](https://docs.scalekit.com/browse/code-samples/github/code-gists-collection.md): Curated gists with essential Scalekit code snippets. - [Go SDK](https://docs.scalekit.com/browse/code-samples/github/go-sdk.md): Official Go SDK for OIDC and SAML SSO integration. - [Java SDK](https://docs.scalekit.com/browse/code-samples/github/java-sdk.md): Official Java SDK with Spring Boot support for enterprise auth. - [M2M code samples](https://docs.scalekit.com/browse/code-samples/github/m2m-code-samples.md): Concise examples for machine-to-machine authentication. - [Browse Scalekit MCP auth demos](https://docs.scalekit.com/browse/code-samples/github/mcp-auth-demos.md): Model Context Protocol authentication examples and patterns. - [Node.js SDK](https://docs.scalekit.com/browse/code-samples/github/nodejs-sdk.md): Official Node.js SDK for OIDC and SAML integrations. - [Python SDK](https://docs.scalekit.com/browse/code-samples/github/python-sdk.md): Official Python SDK with integrations for popular frameworks. - [SSO migrations example](https://docs.scalekit.com/browse/code-samples/github/sso-migrations-example.md): Express.js example for migrating users between SSO providers. - [Webhook events](https://docs.scalekit.com/browse/code-samples/github/webhook-events.md): Next.js example handling webhook events from Scalekit. - [Hosted login examples](https://docs.scalekit.com/browse/code-samples/hosted-login-examples.md): Examples showing how to integrate Scalekit's hosted login experience into your Express.js applications. - [SSO implementation examples](https://docs.scalekit.com/browse/code-samples/sso-examples.md): Examples demonstrating Single Sign-On implementations across different frameworks including Express.js, .NET Core, and Python. - [Walkthrough implementing full stack authentication](https://docs.scalekit.com/browse/vids/fsa-walkthrough.md) - [Walkthrough implementing OAuth for MCP servers](https://docs.scalekit.com/browse/vids/mcp-oauth-walkthrough.md) - [Walkthrough implementing passwordless authentication](https://docs.scalekit.com/browse/vids/passwordless-walkthrough.md) - [Walkthrough implementing SCIM provisioning](https://docs.scalekit.com/browse/vids/scim-walkthrough.md) - [Walkthrough implementing enterprise SSO](https://docs.scalekit.com/browse/vids/sso-walkthrough.md) - [The Auth Stack for your SaaS](https://docs.scalekit.com/home/saaskit.md): Add SSO, SCIM, MCP auth, and user management to your B2B SaaS application