AI & Agents
SSO for Your Product
Last updated 2026-08-21 · benchmark measured 2026-10-18 — deterministic & reproducible
SSO service letting products add a username.md sign-in button via standard OIDC.
SSO for Your Product at a glance
Username.md SSO lets corporate and product teams add a fourth federated sign-in button, using standard OIDC, backed by identities their customers own rather than a platform.
Good for
- Adding a customer-owned sign-in option alongside GitHub, Google, and Facebook
- Reducing stored PII by resolving profile data on demand instead of storing it
- Letting customers' software agents authenticate with the same identity used for browser sign-in
Pricing
Contact for pilot pricing (corporate/product teams); Pro membership for handle owners is $49/year.
Questions people ask
What protocol does username.md SSO use?
It uses standard OpenID Connect, specifically Authorization Code flow with PKCE (S256), against a live issuer at login.username.md.
Do we need a proprietary SDK to integrate it?
No. It works as a drop-in badge script or through your existing OIDC configuration, the same way GitHub or Google sign-in buttons work.
How is identity verified?
Each handle carries cryptographically signed claims (domain ownership, linked accounts) under its own Ed25519 key, and Platform API responses are additionally signed end-to-end per RFC 9421.
Does this reduce the personal data we have to store?
Yes, you receive standard OIDC claims and resolve additional profile data on demand from the handle's public profile, rather than storing it all yourself.
How long does onboarding take?
After you send your app name, redirect URIs, and client type, a client_id is usually provisioned within a business day.
Written by Legit.Show from username.md on 2026-09-30. It does not change the score.
Are you the maker of SSO for Your Product? Claim this listing. It is free, takes a meta tag, a DNS record or GitHub admin rights, and never changes the score.
Launched something? Add your product, free.
To cite this score: legit.show/s/username-md/2026-10-18. That address never changes; this page moves with every re-measure.
Legit.Show scored SSO for Your Product 90/100 on 2026-10-18, measured across all 7 frames from its public surface. legit.show/s/username-md/2026-10-18
Is SSO for Your Product production-ready?
Legit.Show scores SSO for Your Product 90 out of 100 — the simple average of its 7 measured frames. Legit.Show ran its deterministic 7-Frame production-readiness benchmark on SSO for Your Product (public-surface assessment), measured from the public surface with no LLM in the scoring path. Its strongest frame is Privacy; its weakest is Reliability. Every frame it averages is published with its evidence on the Legit.Show listing.
The 7 Frames
- Performance — 88/100
- Accessibility — 95/100
- Security — 80/100How this compares across the catalogue: The Web Security Baseline
- Privacy — 100/100How this compares across the catalogue: The Privacy Gap
- Reliability — 75/100
- Standards — 92/100
- Discoverability — 100/100
What we measured
- Security headers present: HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy.
- No Content-Security-Policy.
- Served over HTTPS with a valid certificate.
- Real Lighthouse performance run — 356 ms to first byte.
- 3 of 3 sampled routes reachable.
- Has a reachable privacy policy.
- Sets cookies / loads scripts with no consent prompt.
- Discoverable: structured data, sitemap, OpenGraph image, canonical URL.
Who it's for
Corporate teams · Product teams · Identity providers · Developers · Support teams
Pricing
Contact for pilot pricing; Pro membership $49/year for handle owners
Sources and updates
- Description
- Taken from username.md's own website on 2026-08-21.
- Operator
- The Holding Company, as named in username.md's terms, privacy page or footer.
- Benchmark
- Measured by Legit.Show from the live site, the way any visitor sees it — with no access to its code or accounts. Same method for every product, and no AI decides the score. Last checked 2026-10-18.
Put together from public information, without SSO for Your Product's involvement. If anything here is wrong, tell us and a person will check it.
Visit SSO for Your Product → · Alternatives to SSO for Your Product → · How this was measured →