# XID

XID brings Hosted Auth, passkeys, OIDC and OAuth, organizations, enterprise federation, SCIM, and SDKs into one identity platform built for Cloudflare.

- [Homepage](https://xid.dev/)
- [Documentation hub](https://xid.dev/index.md) - XID brings Hosted Auth, passkeys, OIDC and OAuth, organizations, enterprise federation, SCIM, and SDKs into one identity platform built for Cloudflare.
- [Sitemap](https://xid.dev/sitemap.xml)
- [Robots](https://xid.dev/robots.txt)
- [Full corpus](https://xid.dev/en/llms-full.txt)

## Pages

- [Getting started](https://xid.dev/getting-started/index.md) - Connect an application to XID with OIDC discovery and Hosted Auth.
- [Hosted Auth](https://xid.dev/hosted-auth/index.md) - Configure the unified sign-in and user creation flow.
- [OIDC and OAuth](https://xid.dev/oidc-oauth/index.md) - Discovery, authorization, token, logout, and OAuth extension endpoints.
- [Enterprise SSO](https://xid.dev/enterprise-sso/index.md) - Configure upstream enterprise IdPs and track downstream SaaS SSO boundaries without overstating production support.
- [Social login](https://xid.dev/social-login/index.md) - Configure social OAuth providers while keeping provider-ready separate from production support.
- [Management API](https://xid.dev/management-api/index.md) - Use scoped API keys to manage organization resources from your backend.
- [Webhooks](https://xid.dev/webhooks/index.md) - Subscribe to implemented user, organization, membership, invitation, and SAML certificate events through signed HTTP deliveries.
- [Branding](https://xid.dev/branding/index.md) - Manage the seven stored organization branding fields exposed by the Management API. Hosted Auth runtime application and custom CSS are not shipped.
- [SCIM API reference](https://xid.dev/scim/index.md) - SCIM 2.0 endpoint contract for provisioning users and groups into XID.
- [SAML SSO](https://xid.dev/saml/index.md) - Connect enterprise identity providers using SAML 2.0.
- [SDKs](https://xid.dev/sdks/index.md) - TypeScript packages and locally verified native SDKs for server, web, mobile, and desktop.
- [@xid-kit/core](https://xid.dev/sdks/core/index.md) - Browser client for session state, short-lived JWT access, and Management API helpers.
- [@xid-kit/backend](https://xid.dev/sdks/backend/index.md) - Networkless JWT verification, request authentication, and webhook signature validation for edge and server runtimes.
- [@xid-kit/react](https://xid.dev/sdks/react/index.md) - React 19 provider, hooks, control components, and hosted UI building blocks for customer applications.
- [@xid-kit/nextjs](https://xid.dev/sdks/nextjs/index.md) - Next.js middleware, App Router and Pages Router server helpers, plus React SDK re-exports.
- [@xid-kit/react-native](https://xid.dev/sdks/react-native/index.md) - React Native provider and hooks for Hosted Auth redirect, PKCE S256, deep-link callback, and secure token storage adapters.
- [@xid-kit/vue](https://xid.dev/sdks/vue/index.md) - Vue 3 plugin, composables, and headless components on top of @xid-kit/core.
- [@xid-kit/nuxt](https://xid.dev/sdks/nuxt/index.md) - Nuxt 3 module with H3/Nitro server middleware and auto-imported Vue composables for SSR and full-stack apps.
- [@xid-kit/svelte](https://xid.dev/sdks/svelte/index.md) - Svelte 5 reactive stores and SvelteKit server hook for client and SSR authentication.
- [@xid-kit/solid](https://xid.dev/sdks/solid/index.md) - SolidJS context provider, signal-based auth primitives, and headless components on top of @xid-kit/core.
- [@xid-kit/angular](https://xid.dev/sdks/angular/index.md) - Angular 17+ standalone provider, RxJS service, functional route guards, and standalone components on top of @xid-kit/core.
- [@xid-kit/astro](https://xid.dev/sdks/astro/index.md) - Astro integration with SSR middleware, server helpers, and island client singleton for static and server-rendered Astro sites.
- [@xid-kit/remix](https://xid.dev/sdks/remix/index.md) - Remix loader and action server helpers, cookie session storage, and OAuth callback handler with React SDK re-exports.
- [@xid-kit/expo](https://xid.dev/sdks/expo/index.md) - Expo SecureStore and WebBrowser adapters for @xid-kit/react-native plus an Expo Router route guard hook.
- [@xid-kit/electron](https://xid.dev/sdks/electron/index.md) - Electron SDK with main process PKCE flow, contextBridge preload, OS keychain token storage, and loopback or custom-scheme callback strategies.
- [@xid-kit/tauri](https://xid.dev/sdks/tauri/index.md) - Tauri v2 desktop SDK with PKCE S256 flow, deeplink callback handler, OS keychain adapter, and Rust plugin template.
- [sdk/go](https://xid.dev/sdks/go/index.md) - Go server SDK for networkless JWT verification, request authentication, and webhook signature validation.
- [sdk/rust](https://xid.dev/sdks/rust/index.md) - Async Rust server SDK for networkless JWT verification, request authentication, and webhook signature validation.
- [sdk/python](https://xid.dev/sdks/python/index.md) - Async Python server SDK for networkless JWT verification, request authentication, and webhook signature validation.
- [sdk/ruby](https://xid.dev/sdks/ruby/index.md) - Ruby server SDK for networkless JWT verification, Rack/Rails request authentication, and webhook signature validation.
- [sdk/php](https://xid.dev/sdks/php/index.md) - PHP 8.1+ server SDK for networkless JWT verification, PSR-7 request authentication, and webhook signature validation.
- [sdk/java](https://xid.dev/sdks/java/index.md) - Java 17+ server SDK for networkless JWT verification, HTTP request authentication, and webhook signature validation.
- [sdk/dotnet](https://xid.dev/sdks/dotnet/index.md) - .NET 8 server SDK for networkless JWT verification, ASP.NET Core request authentication, and webhook signature validation.
- [sdk/ios](https://xid.dev/sdks/ios/index.md) - Swift SDK for iOS and macOS using ASWebAuthenticationSession, PKCE S256 authorization code flow, and Keychain token storage.
- [sdk/android](https://xid.dev/sdks/android/index.md) - Kotlin SDK for Android using Chrome Custom Tabs, PKCE S256 authorization code flow, and Keystore-backed EncryptedSharedPreferences token storage.
- [sdk/flutter](https://xid.dev/sdks/flutter/index.md) - Dart / Flutter SDK for iOS, Android, and desktop using flutter_web_auth_2, PKCE S256 authorization code flow, and flutter_secure_storage token persistence.
- [sdk/macos](https://xid.dev/sdks/macos/index.md) - Swift SDK for macOS using ASWebAuthenticationSession, PKCE S256 authorization code flow, and Keychain token storage. Shares the implementation pattern with sdk/ios.
- [sdk/windows](https://xid.dev/sdks/windows/index.md) - C# / .NET SDK for WinUI 3 applications using WebView2 for authorization, PKCE S256, and DPAPI-protected IsolatedStorage for token persistence.
- [sdk/linux](https://xid.dev/sdks/linux/index.md) - Rust SDK for Linux desktop using xdg-open for browser launch, loopback TCP for the authorization callback, PKCE S256, and freedesktop.org Secret Service token storage.
- [Self-hosting](https://xid.dev/self-hosting/index.md) - Deploy XID as three isolated Workers on your Cloudflare account, with the complete data, queue, consistency, email, routing, and production-control inventory.
- [Status](https://xid.dev/status/index.md) - Live service health and timestamped incident updates from XID Core.

## Section indexes

- [sdks](https://xid.dev/sdks/llms.txt) - 29 published pages