Sign in with Upvera
An OpenID Connect provider that tells a site how strongly the person signing in is verified, under an identifier made for that site alone.
- Released
- In the archive
- /releases/#oidc
- Plain text
- /releases/oidc.md
Sites and apps can let people sign in with Upvera, through a standard OpenID Connect provider. The provider lives at id.upvera.co.
Two choices shape it. Every site sees the person under an identifier made for that site alone, so two sites can't match the same person by ID. And instead of more personal data, a sign-in tells the site how strongly the person is verified: one of four tiers, and the month it was reached. Email is off by default and comes only if the person turns it on.
#For developers
Discovery, scopes and claims are documented at upvera.dev. Startup owners register clients in the Upvera app, from version 1.7.0, once their domain is verified.
The design is in the Upvera ID report, and the identifier scheme is explained in What is a pairwise identifier.