Broker authorization codes through tenant credential providers.

Third-party apps redirect here with an authorization request. This service resolves the tenant from the request host, checks the user against the linked provider, and redirects back with a short-lived code. Repeat hits reuse a valid IdP session.

Local demo

Detected tenant: sso
Authorization provider: Not configured
Client: Demo CRM
Redirect: https://sso.sprweb.org/callback

Start authorization

Use joyn.localhost for subdomain routing when your browser resolves it, or keep plain localhost for the default tenant.