A single sign-on product with enterprise-grade security
Oliqon SSO is a production-ready authentication service that any number of applications can plug into: one place for sign-up, sign-in, two-factor authentication, email verification, password reset and role-based access, secured with RSA-signed tokens and AES-256 encryption.
- Client
- Oliqon
- Industry
- Identity & Access / SaaS
- Service
- Custom Software
Every new application was rebuilding the same login, password reset and permissions logic, each slightly differently, and each a new place for a security mistake. Oliqon needed one central authentication service that several applications and services could share, serve three kinds of users (Admin, Moderator and Participant), and meet enterprise security expectations from day one.
We designed Oliqon SSO as a standalone product: a Node.js, Express and TypeScript API on MongoDB with a Next.js front end. Client applications hand sign-in to the SSO and receive RSA-256 signed JWTs; project-based roles and permissions decide what each user can do in each app; webhooks notify connected applications the moment a user changes; and service-to-service credentials let back ends talk to it securely. Email verification and password resets use one-time codes sent through Resend or SendGrid, admins are protected by TOTP two-factor authentication with backup codes, and scheduled jobs keep expired sessions and codes cleaned up.
Want numbers like these on your own project?
Price a comparable engagement in the quote generator, or book a call and we'll tell you straight whether we're the right team for it.