Common Use Cases
Explore how SyAuth adapts to different application architectures and business needs.
π B2C Applicationsβ
Consumer-facing apps focused on easy onboarding.
Goalβ
Maximize conversion with social login and passwordless entry while securing user data.
Solutionβ
- Authentication: Social Login (Google, Facebook) + Email/Password
- User Management: Self-service registration & profile management
- Security: Email verification required for sensitive actions
Implementationβ
- Enable Social Providers
- Use the Universal Login settings for a branded experience
- Implement Email Verification
π’ B2B SaaS Platformsβ
Business applications requiring multi-tenancy and organization management.
Goalβ
Isolate data between customers (tenants) and manage team access.
Solutionβ
- Workspaces: Each customer gets a dedicated Workspace
- Roles & Permissions: Use Groups for RBAC (Admin, Editor, Viewer)
- SSO: Allow enterprises to bring their own identity provider (Coming Soon)
Implementationβ
- Create a Workspace for each customer creation
- Assign users to specific Groups within the workspace
- Use the SDK to check permissions:
if (user.groups.includes('admin')) { ... }
π€ Machine-to-Machine (M2M)β
Backend services communicating without user interaction.
Goalβ
Secure communication between microservices, daemons, and cron jobs.
Solutionβ
- Grant Type: Client Credentials Grant
- Identity: Services authenticate as themselves using
client_id+client_secret - Security: Short-lived access tokens, no refresh tokens
Implementationβ
- Create a "Machine-to-Machine" OAuth Client in Dashboard
- Follow the M2M Integration Guide
- Validate tokens in your API using the public key
π Legacy Migrationβ
Moving from an existing database to SyAuth.
Goalβ
Modernize authentication without forcing users to reset passwords.
Solutionβ
- Custom Database: Connect SyAuth to your existing SQL/NoSQL database
- Lazy Migration: Authenticate against legacy DB, then migrate user to SyAuth on successful login
Implementationβ
- Set up a Custom Database Connection
- Write the "Login" script to verify legacy hashes
- Turn on "Import to SyAuth" (Lazy Migration)
π± Mobile Applicationsβ
Native iOS and Android apps.
Goalβ
Secure native authentication with optimal user experience.
Solutionβ
- Flow: Authorization Code Flow with PKCE (Proof Key for Code Exchange)
- Session: Long-lived Refresh Tokens with rotation
- Biometrics: Can be implemented on top of the access token
Implementationβ
- Use a native SDK or AppAuth library
- Configure a native callback scheme (e.g.,
com.myapp://callback) - Follow the Mobile/Native Best Practices