Back
Auth & SSO
Configure OAuth2/OIDC, SAML, and session best practices.
Options
- OAuth2/OIDC for customer logins.
- SAML for enterprise SSO.
- Session tokens with same-site and HTTP-only cookies.
Best practices
- Short-lived tokens; rotate refresh tokens.
- Enforce MFA and device checks for admins.
- Use PKCE for public clients.