Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
37 changes: 19 additions & 18 deletions src/content/docs/authenticate/about-auth/about-authentication.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -12,46 +12,47 @@ relatedArticles:
app_context:
- m: settings
s: authentication
description: >-
Learn about Kinde's authentication methods including password, passwordless,
social sign-in, and enterprise connections.
description: "Discover Kinde authentication options from passwordless and passkeys to social, enterprise SSO, and multi-domain session sharing."
featured: false
deprecated: false
ai_summary: >-
Comprehensive overview of Kinde's authentication methods including password,
passwordless, social sign-in, and enterprise connections with multi-domain
support.
ai_summary: "Overview of authentication in Kinde and the sign-up and sign-in options available to end users. Lists supported methods including self-sign-up and invitation-only access, passwordless OTP enabled by default in new businesses, email and username password authentication, phone and WhatsApp authentication, passkeys for sign-in, social connections such as Google and Apple, enterprise connections such as Microsoft Entra ID and Google Workspace, and custom OAuth 2.0 and SAML providers. Explains that authentication is configured per environment and can differ per application. Covers multi-domain authentication across subdomains on the same primary domain, including using prompt=none in the auth URL for seamless session switching between sites. Warns that production social and third-party auth requires your own Client ID and Client Secret to avoid Kinde proxy rate limits and Apple SSO identity issues. Includes a get-started checklist for setting up authentication, adding social sign-in, and enabling multi-factor authentication. Intended for developers and product managers planning Kinde authentication."
topics:
- authenticate
- sign-in
- multi-domain-auth
sdk: []
languages: []
audience:
- developer
- product-manager
complexity: beginner
keywords:
- authentication
- authentication methods
- sign up
- sign in
- password
- passwordless
- social login
- enterprise
- SSO
updated: 2025-01-16
- passkeys
- social sign-in
- enterprise SSO
- multi-domain authentication
updated: 2026-06-17
---

Kinde makes authentication easy by providing a range of methods to choose from.

Allow your users to sign up or sign in:

- [by invitation only](/authenticate/custom-configurations/disable-sign-up/)
- using self-sign-up (default)
- [with a password](/authenticate/authentication-methods/password-authentication/)
- [by invitation only](/authenticate/custom-configurations/disable-sign-up/)
- [passwordless](/authenticate/authentication-methods/passwordless-authentication/) (Applied by default in all new Kinde businesses)
- with a [phone number](/authenticate/authentication-methods/phone-authentication/)
- with a range of [social sign in options](/authenticate/social-sign-in/add-social-sign-in/), like Google, Apple, Slack, and more
- via [enterprise connections](/authenticate/enterprise-connections/about-enterprise-connections/) such as Cloudflare or SAML
- with [password](/authenticate/authentication-methods/password-authentication/) (email or username)
- with [phone number](/authenticate/authentication-methods/phone-authentication/)
- with [WhatsApp](/authenticate/authentication-methods/whatsapp-authentication/)
- with [passkey](/authenticate/authentication-methods/passkeys/) (sign-in only)
- [social connections](/authenticate/social-sign-in/add-social-sign-in/), like Google, Apple, Slack, and more
- [enterprise connections](/authenticate/enterprise-connections/about-enterprise-connections/), like Microsoft Entra ID, Google Workspace, and more
- [Custom OAuth 2.0 connections](/authenticate/custom-configurations/custom-oauth2-connection/)
- [Custom SAML connections](/authenticate/enterprise-connections/custom-saml/)

Authentication can be set per environment, and can be changed for different applications, e.g. your production web app and mobile app can have different authentication requirements.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -126,6 +126,8 @@ Kinde supports the use of [Microsoft Entra ID](/authenticate/enterprise-connect

You can add any OAuth 2.0 compatible identity provider as an authentication method. You should check compatibility thoroughly and test these types of connections in a non-production environment. Here are the instructions for getting set up with [custom OAuth 2.0](/authenticate/custom-configurations/custom-oauth2-connection/). Note there may be variations in field names and terms depending on the provider you use.

## Passkeys (coming soon)
## Passkeys

Passkey authentication is not yet available in Kinde. It is currently in development and on the [Kinde roadmap](https://updates.kinde.com/board/secure-passkey-authentication). You can follow progress and vote on the roadmap to signal interest.
Passkeys are a passwordless sign-in method based on the Web Authentication (WebAuthn) standard. Users authenticate with device biometrics (Face ID, Touch ID, Windows Hello), a platform authenticator, or a FIDO2 security key — no password required.

See [Passkeys](/authenticate/authentication-methods/passkeys/) for setup, policies, and user experience details.
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
page_id: c4182a6d-64ca-4c82-ba33-e5fc5d8b8cad
title: Email deliverability in Kinde
sidebar:
order: 8
order: 9
relatedArticles:
- 0222489b-3478-48a7-a5c9-c99c6044f0e9
- 90134c89-16e4-4981-b988-b0cb4f1722c5
Expand Down
Loading
Loading