EGREED ID features — SSO, MFA, passkeys, devices and enterprise identity
A complete guide to every EGREED ID feature: single sign-on, multi-factor authentication, passkeys, biometrics, device and session management, OAuth, OpenID Connect, API tokens and organization accounts.
On this page
One account for all EGREED services
A single EGREED ID authenticates you across every product in the ecosystem, carrying your profile, language, notification and security preferences with you.
Secure authentication
Passwords are hashed with Argon2id, transported over TLS 1.3, and never logged. Adaptive rate limiting, bot detection and breach monitoring run on every attempt.
Single Sign-On (SSO)
Sign in once and move freely between EGREED services. Enterprises can federate their own identity provider with SAML 2.0 or OIDC so staff use existing corporate credentials.
Multi-Factor Authentication (MFA)
Add a second factor: authenticator app (TOTP), push approval, SMS code, or FIDO2 hardware key. Administrators can require phishing-resistant factors for privileged roles.
Passkeys
Passkeys replace passwords with device-bound cryptographic credentials built on WebAuthn. They cannot be phished, guessed, reused or leaked in a breach.
Biometric login
Unlock your passkey with Face ID, Touch ID, Windows Hello or Android biometrics. Biometric templates stay in the device secure enclave and never reach EGREED servers.
Device management
See, rename, trust and remove every device connected to your account. See Manage devices.
Active session management
Review live sessions with IP, location, browser and last-active time, and terminate any of them — or all of them — instantly.
Login history
Twelve months of sign-in events with outcome, risk score and location, exportable as CSV or JSON.
Recovery options
Recovery email, recovery phone, ten single-use backup codes and manual identity verification. See Account recovery.
Security alerts
Real-time email and push alerts for new sign-ins, password and MFA changes, new connected apps and recovery attempts.
Privacy controls
Granular consent, data minimisation, export and deletion. See Privacy.
Connected applications
Every authorised app with its scopes, grant date and last use — revocable in one click. See Connected apps.
Developer authentication
Register applications, obtain client credentials, configure redirect URIs, and implement Sign in with EGREED using the authorization-code flow with PKCE.
Organization accounts
Group members under one workspace with roles (Owner, Admin, Member, Viewer), shared billing, domain verification and policy enforcement.
Enterprise identity
SAML 2.0 federation, SCIM user provisioning and deprovisioning, conditional access policies, IP allow-lists, session limits and exportable audit logs.
OAuth 2.0 support
Authorization code with PKCE, client credentials, device code and refresh-token rotation, with fine-grained scopes and consent screens.
OpenID Connect
Standards-based discovery at /.well-known/openid-configuration, ID tokens signed with rotating RS256 keys, and userinfo plus JWKS endpoints.
API tokens
Scoped, revocable, expiring tokens for server-to-server automation, with last-used tracking and one-time display on creation.
Secure cloud synchronization
Profile, preferences, language and security settings sync encrypted across every device and product through EGREED Cloud.
Cross-platform login
Web, iOS, Android, Windows, macOS, Linux and CLI — the same identity, the same protections, everywhere.
More EGREED ID documentation
- EGREED ID overview
- Create an EGREED ID
- Sign in to EGREED ID
- EGREED ID account recovery
- EGREED ID Security Center
- Manage your devices
Related platforms: Authentication and SSO, Security, Account, EGREED AI, EGREED Cloud, EGREED Deploy.
Official links: id.egreedtech.org · egreedtech.org · EGREED FAQ hub · Contact support.
Frequently asked questions
How do I sign in to my EGREED ID?
Visit id.egreedtech.org or any EGREED product, enter your email or phone, then your password, passkey or biometric, and complete MFA if enabled.
What is Single Sign-On (SSO) in EGREED ID?
SSO means one authenticated session works across every EGREED service. Sign in once and move between EGREED AI, Cloud, Mail and Deploy without signing in again.
What is passwordless login?
Passwordless login lets you sign in with a passkey, biometric or one-time code instead of typing a password. It is faster and resistant to phishing.
What are passkeys?
Passkeys are cryptographic credentials stored on your device and unlocked with Face ID, Touch ID, Windows Hello or a device PIN. They cannot be phished or reused.
Can I sign in with my fingerprint or face?
Yes. Biometric login is supported on iOS, Android, Windows and macOS through platform authenticators. Your biometric data never leaves your device.
What does Remember this device do?
It marks the device as trusted so you are not asked for MFA on every sign-in. You can revoke trust at any time from Security → Devices.
Will I be notified when someone signs in?
Yes. EGREED ID sends a login notification by email and push whenever a new device, browser or country is used.
Why am I asked to verify my identity when signing in?
Step-up verification triggers on unusual signals such as a new device, new country, impossible travel or a sensitive action like changing your password.
How long does an EGREED ID session last?
Standard sessions last 30 days on trusted devices and 24 hours on public or unrecognised devices. Enterprise administrators can shorten these limits.
Can I sign out of all devices at once?
Yes. Open Security → Sessions → Sign out everywhere. All refresh tokens are revoked immediately.
How do I change my password?
Open Security → Password, enter your current password, then the new one. You are asked to re-authenticate and all other sessions are signed out.
How often should I change my password?
Only when you suspect compromise. A long unique password protected by MFA is safer than frequent rotation.