Login Portal

O2ID ships with an embedded login portal served at /login. No extra configuration is needed — it works out of the box when you run o2id serve.

To use your own externally hosted portal instead, set external_login_portal under [server] in o2id.toml:

[server]
external_login_portal = "https://login.example.com/login"

O2ID will redirect unauthenticated authorization requests to that URL and pass a transaction_id query parameter. The portal posts credentials back to O2ID's POST /login endpoint to complete the login.

See Authorization Code Grant for how the portal fits into the full authorization flow.