Federated access

One sign-in for every Everspring application.

Identity Hub is a broker, not a directory. It never stores passwords — your organisation's own identity provider authenticates you, and the Hub issues the short-lived session your applications trust.

• Your email domain decides which provider signs you in.
• OpenID Connect authorization code flow with PKCE, or SAML federation.
• Every authentication and administration event is written to an immutable audit log.