Demo Environment

Sign In

This is an open demo environment. Sign in with a passkey you created during registration. WebAuthn passkeys are the default authentication mechanism — the library itself can act as the identity provider. Optionally, enterprise SSO providers can be integrated during implementation. Emails are not enabled in this demo environment.

How Passkey Login Works

Passkey authentication uses public-key cryptography. No passwords are transmitted or stored.

1Enter your email address
2The server sends a random cryptographic challenge
3Your device signs the challenge with the private key stored during registration (biometric or PIN confirmation)
4The server verifies the signature against the stored public key and issues an OAuth 2.0 session token via PKCE

Magic Links (Recovery)

If you have lost access to your passkey (new device, cleared browser data), use "Don't have a passkey?" to receive a time-limited, single-use link that lets you create a new passkey on this device. Note: Emails are not enabled in this demo, so magic link recovery is not available here.

Enterprise Integration Options

The library can act as the identity provider using WebAuthn passkeys, or optionally integrate with enterprise identity infrastructure during implementation. There are many options available for proper enterprise integration:

SAML 2.0 / OpenID Connect

Optionally redirect authentication to your IdP (Okta, Azure AD, Google Workspace). After authentication, the IdP sends a signed assertion with the user's identity, roles, and group memberships. The platform issues a local session.

SCIM Directory Sync

User accounts can be created and deactivated automatically from your corporate directory. No manual provisioning required.

MCP Server Authentication

After login, users access MCP (Model Context Protocol) servers that extend Claude's capabilities. Each MCP server authenticates via API keys stored in encrypted per-user secrets and exposes tool endpoints for databases, APIs, and internal services — governed by per-user permissions and audit logging.