PRX Identity id.prx.is

Sign in

Choose a provider. Identity federates to a single trusted upstream and creates a session here once you're signed in.

Continue with…

What happens next

  1. You're redirected to the provider; they authenticate you.
  2. Provider sends you back to /callback/<provider> (or an allow-listed mount variant like /auth/callback/<provider>) with an authorization code.
  3. Identity exchanges the code, verifies the returned id_token against the provider's JWKS, and finds-or-creates your UUID.
  4. An Identity-side session cookie is set. From that point you're signed in — at id.prx.is only; consumer apps still create their own sessions in M5.