This page focuses on Memority's OpenID Connect protocol support. Looking for Memority’s (C)IAM features like MFA, SSO, and user management? View Memority on the (C)IAM Identity Providers benchmark.

Memority OpenID Connect Provider

French identity and access management vendor offering the Memority Identity Factory, a SaaS platform unifying identity governance and administration (IGA), SSO and federation, multi-factor authentication, and customer identity (CIAM) for employees, partners, customers, IoT, and non-human identities such as service accounts and AI agents. The platform is split into MY-Identity (lifecycle and rights governance), MY-Access (SSO and federation via SAML 2.0, WS-Federation, OAuth 2.0, and OpenID Connect, with risk-based adaptive authentication), MY-Keys (second-factor management: TOTP, WebAuthn/FIDO2, push, X.509), and MY-Discovery (shadow SaaS and ghost account discovery). Extensible through Groovy rules and actions and OAuth2-protected REST APIs. Hosted in Europe (Paris or Dublin) on AWS, S3NS (SecNumCloud 3.2), or GCP; ISO 27001 and ISO 27701 certified, with NIS2 and DORA compliance support. Pricing is quote-based.

Frequently Asked Questions

Does Memority support the Authorization Code grant type?

Memority supports Authorization Code grant type. The Authorization Code flow is an optional authorized flow per federation (enabled by default). Read more

Does Memority support the Refresh Token grant type?

Memority supports Refresh Token grant type. Refresh tokens are enabled per tenant (default validity 7 days) and per federation. Read more

Does Memority support the Client Credentials grant type?

Memority supports Client Credentials grant type. The Client Credentials flow is supported, notably for non-human identities calling Memority APIs. Read more

Does Memority support the Implicit grant type?

Memority supports Implicit grant type. The Implicit flow is an optional authorized flow per federation (enabled by default). Read more

Does Memority support the Device Authorization Grant grant type?

Memority supports Device Authorization Grant grant type. The Device Authorization Grant is supported, with a configurable user code (default 8 characters, 6 to 20, with a configurable alphabet). Read more

Does Memority support the JWT Bearer Token grant type?

Memority supports JWT Bearer Token grant type. The JWT Bearer flow is an optional authorized flow per federation. Read more

Does Memority support the Resource Owner Password Credentials grant type?

Memority supports Resource Owner Password Credentials grant type. The Resource Owner Password Credentials flow is an optional authorized flow per federation. Read more

Does Memority support the Authorization Endpoint endpoint?

Memority supports Authorization Endpoint endpoint. The authorization endpoint is part of the OAuth2/OpenID Connect federation; endpoints are displayed from the federation form. Read more

Does Memority support the Token Endpoint endpoint?

Memority supports Token Endpoint endpoint. A token endpoint serves access tokens (for example the client credentials flow at the tenant SSO path under /access_token). Read more

Does Memority support the Device Authorization Endpoint endpoint?

Memority supports Device Authorization Endpoint endpoint. Supported as part of the Device Authorization Grant. Read more

Does Memority support the none token endpoint authentication method?

Memority supports none token endpoint authentication method. Federations can be declared as Public clients, which have no client secret. Read more

Does Memority support the RP-initiated Logout feature?

Memority supports RP-initiated Logout feature. Federations declare authorized post-logout redirect URIs, and the id_token_hint can be verified against the client's JWKS URL. Read more