OAuth providers

Sign in with Google, GitHub, Microsoft, Discord, Apple, and more. Toggle on in workspace settings.

vly’s built-in auth supports OAuth via every major provider. Each provider takes about 5 minutes to set up: register a client app at the provider, paste credentials into vly.

Supported providers

Google

Google Cloud Console → OAuth 2.0 Client IDs.

GitHub

GitHub Settings → Developer settings → OAuth Apps.

Microsoft

Azure Portal → App registrations.

Discord

Discord Developer Portal → Applications.

Apple

Apple Developer → Sign in with Apple.

Linkedin

LinkedIn Developer Portal.

For SSO via SAML / OIDC (enterprise customers), see SSO.

Setup

1. Register an OAuth app at the provider

   Each provider has its own dashboard. You’ll get a Client ID and Client Secret.

2. Set the redirect URL

   https://your-app.vly.app/api/auth/callback/{provider} (vly shows the exact URL in the dialog).

3. Paste credentials into vly

   Workspace settings → Auth → Providers → [provider] → Configure.

4. Toggle on

   The provider button appears on your sign-in / sign-up pages.

Per-provider gotchas

Google: 'redirect_uri_mismatch'

The exact URL must match what’s registered. Include the protocol (https://), and don’t include trailing slashes if the registration omits them.

Apple: requires JWT signing

Apple’s OAuth uses a JWT signed with a .p8 key. Upload the key when configuring; vly handles the JWT generation.

Microsoft: tenant scoping

For “any Microsoft account” use common; for “only my org” use the tenant ID. Misconfigured tenant = sign-in fails.

GitHub: scopes

Default scopes (user:email) are usually enough. Add more (repo, read:org) only if your app needs to call GitHub’s API on the user’s behalf.

Related

Built-in auth

The full auth system.

Passwordless

Magic links as an alternative.

OAuth login recipe

Step-by-step setup walkthrough.