Skip to main content
OAuth consent start screen This lets your users use a Single Sign-On (SSO) to login to your app without going through the extra step of creating an identity directly with your app. In addition to offering identity management, IdPs often expose extensive functionality in their platform via API, e.g. reading and creating Google Calendar events or creating repos within GitHub. When you use Stytch OAuth, we automatically initiate a session with the IdP and return the necessary tokens to build on top of the provider’s API.

​
Identity provider details

Even though OAuth is a standard, IdPs can sometimes vary in data models and nomenclature within their own implementations. Stytch normalizes values and behavior as much as possible to ensure that you have a smooth integration with whichever providers you use. The list below lists each OAuth provider we support and lets you know which values you should expect to see returned for each provider and the default session length. ”—” indicates that the value is not applicable to the provider in question.
Provideraccess_tokenrefresh_tokenjwtSession length
GoogleReturnedReturnedReturned*1 hour
AmazonReturnedReturned—24 hours
AppleReturnedReturned—Until revoked
BitbucketReturnedReturned—2 hours
CoinbaseReturnedReturned—2 hours
DiscordReturnedReturned—7 days
Facebook (Meta)Returned——2 months
GitHubReturned——Until revoked
GitLabReturnedReturned—2 hours
LinkedInReturnedReturned—60 days
MicrosoftReturnedReturned*—60-90 minutes
SalesforceReturned——Until revoked
SlackReturned——Until revoked
TwitchReturnedReturned—60 days
YahooReturnedReturnedReturned1 hour
Google offers two pathways for a user to authenticate, a traditional OAuth flow with a consent pane, or via Google One Tap. If a user enters through the Google One Tap flow, you will only receive a jwt and no access_token or refresh_token; you will not be able to leverage Google’s API.Default Scopes
  • open_id
  • email
  • profile
Resources
Log in with Amazon lets users log in with their Amazon customer accounts and offers data like name, email address, and zip code to build a more personalized experience.Default Scopes
  • profile
Resources
Allow your users to log in with their Apple accounts. Apple does not offer any additional scopes. Note that Apple allows users to obfuscate their email address, and you may receive an email address like h79gps7k78@privaterelay.appleid.com. See the Resources section below to learn more.Default Scopes
  • name
  • email
Resources
Log in with Bitbucket let’s you build exciting tools on top of Atlassian’s Bitbucket source control product.Default Scopes
  • account
  • email
Resources
Log in with Coinbase let’s users easily and securely sign in to your app and lets you integrate Coinbase supported cryptocurrencies into your applications.Default Scopes
  • account
  • email
Resources
Discord OAuth login allows users to log into your app with their Discord account.Default Scopes
  • identify
  • email
Resources
Facebook OAuth login allows users to log into your app with their Facebook account.Default Scopes
  • public_profile
  • email
Resources
GitHub OAuth login allows users to log into your app with their GitHub account.Default Scopes
  • user:email
Resources
GitLab OAuth login allows users to log into your app with their GitLab account.Default Scopes
  • open_id
  • email
  • profile
Resources
LinkedIn OAuth login allows users to log into your app with their LinkedIn account.Default Scopes
  • r_liteprofile
  • r_emailaddress
Resources
Log in with Microsoft helps your users sign in easily with their corporate or person Microsoft accounts and lets you leverage Microsoft’s Graph API.Default Scopes
  • open_id
  • email
  • profile
Resources
Log in with Salesforce let’s your users log in with their Salesforce accounts.Default Scopes
  • id
  • openid
Log in with Slack let’s your users log in with their Slack accounts.Default Scopes
  • openid
  • email
  • profile
Log in with Twitch let’s your users log in with their Twitch accounts.Default Scopes
  • account
  • email
Log in with Yahoo let’s your users log in with their Yahoo accounts.Default Scopes
  • account
  • email
  • profile