36Blocks is a hosted authentication, user and company management service. You set up a Block in the dashboard (the container you configure to add 36Blocks to one app), drop in widgets, and 36Blocks handles sign-up and login, sessions, companies, members, roles and permissions.

Getting Started

Create a Block, choose login methods, set your branding, and embed the Authentication widget.

Widgets

Embed login, profile, member management and organization settings.

Sessions & Tokens

Handle proxy_auth_token, JWTs, refresh tokens and post-login redirects.

Companies & Roles

Switch and create companies, and control access with roles and permissions.

Security & Access

Restrict which origins can trigger OTPs, and block new sign-ups.

Webhooks

Get notified when users and companies change.

OAuth 2.0 Module

Let third-party apps connect to your users' accounts with your own authorization server.

API Reference

Call 36Blocks from your own backend or app.

• Block: one 36Blocks setup for one app. It has its own login methods, branding, session settings and a reference ID.

• User: a person who signs in to your app through your Block.

• Company: an organization that users belong to. A user can belong to several companies and has a role in each one.

• proxy_auth_token: the session token returned after a successful login.