About

OneHux Accounts is the identity layer behind the OneHux family of products, and any third-party application that wants a real login system without building one from scratch. One account, one real session, checked by every connected application in real time — not a separate password and a separately-drifting "logged in" flag per app.

What it actually does

Every application registered with OneHux Accounts authenticates people through the same OAuth 2.0 Authorization Code flow with PKCE, and receives OIDC-shaped ID tokens and short-lived access tokens — 15 minutes by default, not a standing key. When a session is revoked, from any device, that revocation is checked on the very next request every connected application makes, not eventually, and not only if the application happens to poll for it.

Signing in

People can sign in with a password, a one-time emailed link, a one-time emailed code, a passkey (WebAuthn — no password to phish), or a Google account. Accounts with TOTP multi-factor authentication enabled are asked for a second factor on every sign-in; accounts without it are asked to re-verify only from a genuinely new device or location, never on every single visit.

Organizations, not one shared user list

Every account belongs to an Organization — a real tenant boundary. Two Organizations never share a user record, even when the email address matches. Each Organization defines its own Roles and Permissions from scratch; nothing is a fixed, platform-wide list decided for you. An Organization on a plan that includes it can also run its own custom domain and its own branding on the sign-in page, so the people signing in never see the word "OneHux" if you don't want them to.

Built for real integration work

Beyond the sign-in flow itself: real webhook delivery for account and security events, scoped API keys for server-to-server access, SCIM provisioning for enterprise identity providers (Enterprise plan), and a full audit trail of every sign-in, permission change, and session revocation — filterable by type, user, and date, not a raw log dump.

Who's behind it

OneHux Accounts is built and operated by OneHux. See pricing for the real, current plan tiers, or get in touch with questions.