Integration Guide

These guides walk you through integrating the Prelude Auth into your application, from authentication to session management.

Available guides

Configure SMS one-time password authentication from your backend.

Configure email and password authentication from your backend using the Management API.

Configure OAuth providers (Google, Apple, Microsoft, GitHub, Okta).

Add scoped, multi-step challenges for sensitive operations.

Let MCP clients sign your users in using Prelude Auth as the OAuth authorization server.

Add single sign-on across your own apps using Prelude Auth as the OAuth authorization server.

Authenticate server-to-server requests using OAuth client credentials.

Once configured, follow the Web Integration guide to integrate the SDK into your frontend.

Regardless of which authentication method you use, Prelude Auth follows the same patterns:

Management API (backend): Configure authentication methods, create users, and manage identifiers using your API key
Frontend API: Authenticate users from the browser through your custom domain. The API returns JWT access tokens and manages sessions via headers and IndexDB
Token verification (backend): Verify JWT access tokens on each authenticated request using the JWKS endpoint

Set up Webhooks to receive real-time notifications when users are created or sessions change
Explore the Management API for advanced user management