A free OpenID Connect provider, hosted in the EU.
Dazr Identity is a hosted OpenID Connect provider, free for every app and every user, while you test and in production. People sign in with a passkey, a code by email or their Google or Microsoft account. From an Italian company, on servers in Germany.
What you get for free.
A real provider for real users, not a mock server.
The authorization code flow with PKCE, a discovery document, JWKS, user info and sign-out. Any standard library connects.
People sign in with the Face ID or fingerprint login of their device, or anywhere with a 6-digit code by email. No passwords to store or reset.
People who prefer their Google or Microsoft account use it inside Dazr Identity, so your app shows one button instead of three.
Ask for offline_access and your app gets rotating refresh tokens, with a revocation endpoint for the ones you no longer need.
Add the organisations scope to learn which organisations a person works for, with their role, read again at every token refresh.
Your apps receive an ID that is unique to your organisation, so people can’t be tracked across companies.
Connection details.
Everything else is in the discovery document.
| Setting | Value |
|---|---|
| Issuer | https://identity.dazr.eu |
| Discovery | https://identity.dazr.eu/.well-known/openid-configuration |
| Flow | Authorization code with PKCE (S256) |
| Client authentication | client_secret_basic or client_secret_post for web server apps, none for single-page and mobile apps |
| Scopes | openid, plus what you need from profile, email, address, organisations and offline_access |
| Redirect URIs while testing | http://localhost and http://127.0.0.1 on any port, next to your https:// URIs |
From localhost to live.
The same app and the same client ID, all the way.
In Dazr Identity, open Developers under your organisation and add your redirect URIs. You get a client ID, and a client secret for web server apps.
A new app is in testing: members of your organisation can sign in, and localhost redirect URIs work on any port.
Free with a qualified electronic signature or seal, a company extract with an ID, or a code by certified email (PEC) for Italian companies.
Add an https:// redirect URI and request a live review in the console. Then everyone can sign in to your app.
Auth.jsWordPressLaravelSupabaseDjangoNode.jsASP.NET CoreSpring BootKeycloak
Questions about the free provider.
Is it free in production too?
Yes. Sign-in is free for every app and every user, while you test and once your app is live. You pay only for the verifications you ask for: €25 per business verification and €1.50 per identity verification, excl. VAT.
Can I use it for local development and testing?
Yes. A new app starts in testing: members of your organisation can sign in, and http://localhost and http://127.0.0.1 redirect URIs on any port work. The sign-ins are real, so you test the same flow your users will see.
What does it take to go live?
Get your organisation verified in Dazr Identity, add an https:// redirect URI and request a live review in the console. Verification is free with a qualified electronic signature or seal, a company extract with an ID, or, for Italian companies, a code by certified email (PEC).
Do my users need a Dazr account?
They create one during sign-in, with a one-time code by email or their Google or Microsoft account, and return to your app straight away. Afterwards they can add a passkey.
Which libraries work with it?
Any standard OpenID Connect library that supports the authorization code flow with PKCE. Step-by-step guides cover Auth.js and Next.js, WordPress, Laravel, Supabase, Django, Node.js, ASP.NET Core, Spring Boot and Keycloak.
Where is the data?
Dazr is an Italian company, and Dazr Identity runs on servers in the EU, in Germany. Your app receives only what you ask for and the person approves.
Add sign-in to your app.
Register an app in a few minutes and sign in from localhost straight away.
Auth0 alternativeOkta alternativeEntra ID alternativeProcurement factsQuestions? Contact us