Authentication overview

Authalla supports passwordless and social authentication flows with a consistent token lifecycle.

Supported flows

• Passkeys (WebAuthn)
• Magic links and OTPs
• Social login providers

Tokens and sessions

Authalla issues short-lived access tokens and refresh tokens scoped to a tenant and application.

Redirects

Hosted auth screens redirect back to your app using the configured callback URLs.