sso

Stock OIDC and the M7 path

Same authorization server, two profiles: stock OpenID Connect by default, and opt-in bindings, ACK, and DPoP when the threat is loss or replay.

By The Grim Scalper · Tags: m7 , identity , sso , apis , operators , documentation , access-control

People, machines, and tenants

M7 does not flatten the world into one user table. People, machines, and tenants are different principals — that is the product, not a footnote.

By The Grim Scalper · Tags: m7 , identity , tenants , sso , operators , access-control , platform , user.m7

Sign in with M7 on a PHP site

Put Sign in with M7 on a PHP site with web-php 0.1.3: checksum the zip, drop m7_sso_session, configure the worker, start login.

By The Grim Scalper · Tags: m7 , identity , getting-started , documentation , sso , operators , Frontend