Webrizendocs
Sign in
Getting started

Webrizen SSO

One secure account for every Webrizen AI Labs product. Customers sign in once, then move between Employee, Restaurant and Office Management with the same identity, the same organization and the same permissions.

Webrizen SSO is an identity provider, the same idea as accounts.google.com for Gmail, Drive and YouTube. Your SaaS apps never store passwords or build login screens. They send people to Webrizen SSO and get back a signed answer: this is user 123, they belong to Spice Route Restaurants, and they're a cashier.

Quickstart

Run the SSO server and a demo app on your machine in about five minutes.

Add sign-in to an app

Five lines with the @webrizen/sso SDK, or any OpenID Connect library.

Roles & permissions

How owners build custom roles and how apps enforce them.

Deploy to Vercel

Production setup with Neon Postgres, SMTP and your own domain.

What's included

AreaCapabilities
Sign-inEmail + password, email one-time codes, Google, passkeys, device PIN, TOTP two-factor
OrganizationsWorkspaces, email invitations (bulk), teams, members with multiple roles
Access controlBuilt-in owner / admin / member, plus unlimited custom roles from a permission matrix
SecurityBreached-password check, rate limiting, lockouts, session management, audit log
PlatformRegister apps as OIDC clients, rotate secrets, disable apps, manage and ban users
DeveloperStandard OpenID Connect, @webrizen/sso for Next.js, org + permissions in the token

How the pieces fit

                ┌─────────────────────────────────────────┐
                │   accounts.webrizen.com   (this app)    │
                │   sign-in · users · orgs · roles · audit │
                └────────────────────┬────────────────────┘
                                     │  OpenID Connect
       ┌──────────────────┬──────────┴───────┬──────────────────┐
  Employee Mgmt     Restaurant Mgmt     Office Mgmt       your next app

The repository is a small monorepo:

  • apps/accounts is the SSO server and account portal (what you deploy).
  • packages/sdk is @webrizen/sso, the drop-in client for Next.js apps.
  • apps/demo is "Webrizen Restaurant", a working example of SSO + role-based UI.

Built on open source

Every component is open source: Next.js, Better Auth, PostgreSQL, Drizzle ORM, Nodemailer, openid-client and jose. There's no per-user pricing and no vendor lock-in: your users and data live in your own database.

Press Ctrl K anywhere

Search every docs page and jump anywhere in the dashboard from the command palette.

Next
Quickstart