This page focuses on SuperTokens's OpenID Connect protocol support. Looking for SuperTokens’s (C)IAM features like MFA, SSO, and user management? View SuperTokens on the (C)IAM Identity Providers benchmark.

SuperTokens OpenID Connect Provider

🇺🇸

Open-source embedded authentication with no redirects — auth runs on your own domain. Recipe-based modular architecture. Self-hostable for free on PostgreSQL or MySQL, with optional managed cloud. Core differentiator: no hosted login page, no vendor domain in the auth flow.

Features

Grant Types

Extensions

Endpoints

Token Endpoint Authentication Methods

none
client_secret_basic
client_secret_post
client_secret_jwt
private_key_jwt
tls_client_auth

Prompts

Features

Financial-grade API (FAPI)

If you want to compare OpenID Connect features of different providers, please check out the OpenID Connect Providers benchmark.

Looking for SuperTokens’s (C)IAM features like MFA, SSO, and user management? View SuperTokens on the (C)IAM Identity Providers benchmark.

Frequently Asked Questions

Does SuperTokens support the Authorization Code grant type?

SuperTokens supports Authorization Code grant type. Provided by the OAuth2 provider recipe, which is built on Ory Hydra.

Does SuperTokens support the Refresh Token grant type?

SuperTokens supports Refresh Token grant type.

Does SuperTokens support the Client Credentials grant type?

SuperTokens supports Client Credentials grant type.

Does SuperTokens support the Device Authorization Grant grant type?

SuperTokens does not support Device Authorization Grant grant type. SuperTokens documents the device code grant as not supported natively.

Does SuperTokens support the PKCE extension?

SuperTokens supports PKCE extension.

Does SuperTokens support the Authorization Endpoint endpoint?

SuperTokens supports Authorization Endpoint endpoint.

Does SuperTokens support the Token Endpoint endpoint?

SuperTokens supports Token Endpoint endpoint.

Does SuperTokens support the UserInfo Endpoint endpoint?

SuperTokens supports UserInfo Endpoint endpoint.

Does SuperTokens support the Token Revocation endpoint?

SuperTokens supports Token Revocation endpoint.

Does SuperTokens support the Token Introspection endpoint?

SuperTokens supports Token Introspection endpoint.

Does SuperTokens support the OpenID Connect Discovery Endpoint endpoint?

SuperTokens supports OpenID Connect Discovery Endpoint endpoint.

Does SuperTokens support the tls_client_auth token endpoint authentication method?

SuperTokens does not support tls_client_auth token endpoint authentication method.

Does SuperTokens support the RP-initiated Logout feature?

SuperTokens supports RP-initiated Logout feature. Handled by the OAuth2 provider logout API.

Does SuperTokens support the Dynamic Client Registration Protocol feature?

SuperTokens does not support Dynamic Client Registration Protocol feature. Clients are created through the Core admin API.

Does SuperTokens support the Dynamic Client Registration Management Protocol feature?

SuperTokens does not support Dynamic Client Registration Management Protocol feature.

Does SuperTokens support the Refresh Token Rotation feature?

SuperTokens supports Refresh Token Rotation feature. Enabled per client.

Does SuperTokens support the OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature?

SuperTokens does not support OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature.

Does SuperTokens support the JARM feature?

SuperTokens does not support JARM feature.

Compare with other providers

Note: The current data is based on provider documentation/experience and may not be 100% accurate.