Dusk IDLive

One sign-in for all your apps

Dusk ID is the single sign-on behind the Dusk and Helix apps: one account and one sign-in that every connected app trusts. It is a standards-based OpenID Connect provider.

Open Dusk ID See what it does
What it does

One sign-in for every Dusk and Helix app

01

OpenID Connect

Standard discovery, authorization code flow, JWKS, userinfo and token revocation, with openid, email, profile and groups scopes.

02

PKCE for public clients

Supports PKCE with S256, and single-page or mobile apps must use it.

03

Two-factor sign-in

Authenticator app codes can be turned on per account, with replay protection on each code.

04

Group-based access

Admins choose which groups may sign in to each app, and groups reach apps in a groups claim.

05

Token safety

Refresh tokens rotate, reusing an old one revokes the whole chain, and a replayed authorization code revokes what it produced.

06

Central sign-out

Signing out, or an admin disabling an account or resetting its password, revokes every token issued under that session.

And there is more
Admin console for people, apps and signing keysSigning key rotationConnect an app with a generated client ID and secretYour apps launcher pageAccount page with password change and active sessionsSign-in throttling after repeated failuresRP-initiated logoutDrop-in OIDC client module for appsRecent activity log

Runs on: Runs at id.duskengineering.services. Self-hosted Node.js server with no dependencies, secure cookies and HSTS.

Ready when you are

Dusk ID is live now.

Dusk ID is running now. Accounts are created by the admin of the Dusk apps you use.

Open Dusk ID Explore the universe
Also in Systems
Dusk SentinelSee attacks live, get alerted, block attackers Every productBack to the Dusk Universe