Sign in with CAIRL
Bring your identity with you.
Use CAIRL to sign in to participating services through the documented OAuth and OpenID Connect integration.
- Participating services
- OAuth and OpenID Connect
- Integration documentation
Details & highlights
Add CAIRL sign-in to a compatible OpenID Connect application. Your service receives a stable, pseudonymous identifier scoped to your partner and authentication information.
Sign-in does not disclose a name, email address, identity document, age or verification status. Verified claims require a separate authorized verification request.
Specifications
| Protocol | OpenID Connect; authorization code with PKCE S256 |
|---|---|
| Scope | openid alone; never mixed with verification scopes |
| Subject | Stable pairwise identifier per partner |
| Signing | RS256; discovery and public signing keys |
| ID token lifetime | Five minutes |
| Sign-in userinfo | Subject identifier only |
| Callbacks | Exact registered URL; one host per sign-in-enabled business context |
Questions & answers
Answers from CAIRL’s documentation.
Does sign-in also verify someone’s identity?
No. Sign-in and verified claims use separate requests and credentials.
Will I receive the user’s email address?
No. The ID token does not contain name, email, age or verification status.
Can I use a second callback host?
Use a separate business context for a second application host.
Customer reviews
No customer reviews have been published on this page yet.
What you need
Business context
An Owner or Admin registers the application in CAIRL.
Sign-in credential
Enable sign-in, keep the client secret server-side, and request openid alone.
Registered callback
Register the exact callback URL reported by your identity platform.
Workflows
Connect your application
- Create a sign-in-enabled credential and register the callback.
- Configure your identity platform with CAIRL discovery.
- Follow the documented authorization and token-validation flow.
Get started with Sign in with CAIRL
Setup, usage, and the details that matter.