Available guides
OTP Login
Configure SMS one-time password authentication from your backend.
Password Authentication
Configure email and password authentication from your backend using the Management API.
Social Login
Configure OAuth providers (Google, Apple, Microsoft, GitHub, Okta).
Step-Up Authentication
Add scoped, multi-step challenges for sensitive operations.
MCP Login
Let MCP clients sign your users in using Prelude Auth as the OAuth authorization server.
SSO Login
Add single sign-on across your own apps using Prelude Auth as the OAuth authorization server.
Server Tokens
Authenticate server-to-server requests using OAuth client credentials.
General concepts
Regardless of which authentication method you use, Prelude Auth follows the same patterns:- Management API (backend) — Configure authentication methods, create users, and manage identifiers using your API key
- Frontend API — Authenticate users from the browser through your custom domain. The API returns JWT access tokens and manages sessions via headers and IndexDB
- Token verification (backend) — Verify JWT access tokens on each authenticated request using the JWKS endpoint
What’s next?
- Set up Webhooks to receive real-time notifications when users are created or sessions change
- Explore the Management API for advanced user management