Field 01 · Olyron Accounts

The login under every app.

Hosted sign-in, organizations, OAuth consent, and org-aware tokens. Any Olyron app can use Sign in with Olyron.

The product UI also lives on accounts.olyron.com.

Session readoutaccounts.olyron.com

One login · every Olyron app

Field 02 · Features

What Accounts gives every app

Integrate once. CRM, Labs, Browser, and the other apps use this same login.

Hosted authentication
Email magic links, OAuth providers (including Google), rotating refresh tokens, and secure session handling.
Organizations and invites
Orgs with slugs, memberships, and email invitations, the same model across the suite.
Role-based access (RBAC)
Owner, admin, member, billing, and read-only roles mapped consistently for buyers and auditors.
Org-aware JWT claims
Tokens carry active organization and role context so APIs enforce tenant boundaries without guesswork.
Sign in with Olyron
Any third-party app can add Sign in with Olyron in two API calls: register, redirect, exchange.
OAuth consent and app registry
Registered clients, redirect URI allow lists, client secrets, and explicit user consent for delegated access.
Cross-app SSO
Authorization codes and server-side token exchange for trusted and third-party apps alike.
Tenant isolation
Row-level security patterns for org-scoped data, built for multi-tenant SaaS at scale.
Security posture
Least-privilege defaults, hardened callbacks, and a crisp boundary between identity and applications.
Session lifecycle
Refresh rotation and predictable cookie behavior for SSR-friendly Next.js and API backends.

Field 03 · Flow

A person signs in once. The token carries the organization and the role into every app.

Field 04 · Start

Create an organization, invite the team, and issue org-aware tokens. That is the same login the other apps use.