Free evaluation

Try OAuth2, OpenID Connect, and passkeys with OpenIssuer.

OpenIssuer is an OAuth 2.0 and OpenID Connect authorization service. Create a free evaluation account, register an OAuth client for your application, and experience user authentication within its authorization flows. You can also protect sign-in with passwordless passkeys and passkey-enforced multifactor authentication.

Create a free accountWatch all demos

What you can try

  • Register a tenant-scoped OAuth 2.0/OpenID Connect client.
  • Connect your own application using the authorization code flow.
  • Inspect the identity, issuer, and tenant claims returned to your application.
  • Protect user authentication with a WebAuthn passkey.
  • Compare passwordless sign-in with passkey-enforced MFA.

Create your account

  1. Visit free.openissuer.com.
  2. Select Sign up and create an account.
  3. Activate the account using the link sent to your email.

How it works

From signup to a working OpenID Connect client

Create an account and organization, register a confidential OAuth client, and use it to sign in to a local NextAuth application.

1. Create your account Sign up with your user and organization details.
2. Register an OAuth client Configure the grant, scopes, secret, and callback URI.
3. Connect your application Start the local NextAuth client with your OpenIssuer configuration.
4. Verify the identity Sign in and inspect the issuer, tenant, and identity claims.

Free account walkthrough

Create an account and connect NextAuth

This walkthrough shows free account signup and activation, OAuth client registration, local NextAuth configuration, and an application signing in through OpenIssuer with OpenID Connect.

Watch the free account walkthrough on YouTubeOpen the live NextAuth demo client

Connect your own application

The passkey experience protects the user authentication step of a real OAuth 2.0 or OpenID Connect authorization flow. Free users can register an OAuth client in the tenant admin portal and connect an application to the free issuer.

  1. Open free.admin.openissuer.com.
  2. Create an OAuth client using the authorization code grant.
  3. Add your application's redirect URI and select its scopes.
  4. Configure the application to use the OpenIssuer client credentials and issuer.
  5. Start the sign-in flow and inspect the returned identity and tenant claims.
NextAuth callback examplehttps://your-app.example.com/api/auth/callback/myauth
Read the integration guideRead the OAuth client setup guideView the NextAuth example sourceOpen the NextAuth demo client

Secure sign-in with a passkey

  1. Return to free.openissuer.com.
  2. Sign in and select Manage your account.
  3. Open Passkeys and register your device.
  4. Sign out and select Sign in with a passkey.

Your biometric information remains on your device. OpenIssuer receives the cryptographic WebAuthn response used to verify the passkey.

Passkey demonstrations

See both authentication modes

Passwordless passkey sign-in

Register a passkey with Touch ID, sign out, and return to OpenIssuer without entering a password.

Watch on YouTube

Passkey-enforced MFA

See OpenIssuer require a registered passkey after username and password verification.

Watch on YouTube

Evaluation use

The free environment is intended for evaluation, learning, and feedback. Do not use it for production applications or sensitive data.

Try OpenIssuer freeReview security and trust guidance