One sign-in for everything we build.
Authly is the central identity service behind every CrudSavvy product. Each product is a client of Authly rather than owning its own sign-in, so institutions get single sign-on across what they use from us, and we have one place to harden.
- Product
- Authly
- Category
- Platform
- Status
- Shared service
- For
- Every CrudSavvy product and the institutions that use them
- Where
- Nigeria & United Kingdom
- Site
- Shared service
- Built with
- .NET · OpenIddict · YARP gateway · SQL Server or PostgreSQL
What Authly does.
Authly is not sold on its own. It is the shared foundation that lets a new product ship with authentication, session policy and audit on its first day.
OpenID Connect and OAuth 2.0
Standard protocols on OpenIddict, so any product, web or mobile, signs in the same way.
Token brokering
A gateway keeps tokens on the server and hands the browser an opaque session, so no token ever sits in a web page.
Per-tenant policy
Each institution sets its own sign-in strength, second factor and session length.
One person, one account
Identity is checked once and reused across products, with device records for audit.
Audit
Every sign-in, refresh and sign-out is recorded and readable by the institution's auditors.
Built for the people who run it.
- Every CrudSavvy product
- The institutions and operators that use them
The rules it keeps.
- Authly is versioned and released on its own, so a product never carries identity code of its own.
- A product holds only an opaque session; the gateway holds the tokens.
- Changes to a tenant's sign-in policy need a second administrator's approval.
The same six rules apply to everything we build. How we build