Verify first
Validate the protocol ceremony: signatures, state, nonce, PKCE, issuer, audience and replay boundaries.
Identity infrastructure
One identity layer.
One identity layer.
Every way in.
OpenProof turns passkeys, social sign-in, wallets and enterprise federation into one explicit account model — without silently guessing who a user is.
PasskeysWebAuthn
OAuth / OIDCFederated
SIWEWallet control
SAML / LDAPSEnterprise
OPCanonical accountexplicit links only
GoogleOIDC
GitHubOAuth
WalletSIWEPasskeyWebAuthn
proofidentityaccess
01 / Architecture
Proof is evidence. Identity is a decision.
Link explicitly
A verified subject links to a canonical account by an explicit relationship — not by an email coincidence.
Issue controlled access
Sessions and tokens carry the assurance and authorization context the relying application actually needs.
02 / Identity surface
Different proofs. One explicit account.
Canonical account model
Explicit links only
PasskeysWebAuthn
ProvidersOAuth / OIDC
WalletsSIWE / SIWF
EnterpriseSAML / LDAPS
01
Verify proof
ceremony · signature · nonce
02
Link explicitly
no inferred merges
OP
Canonical account
one stable subject
verified proof→explicit relationship→controlled access
Verify → link → issue access.
Every credential keeps its own provenance and verification rules. OpenProof links verified subjects to the canonical account only when the relationship is explicit and auditable.
Proof adaptersHover or select a path
03 / Self-hosting
Keep the identity boundary inside your infrastructure.
OpenProof is designed to run where your trust lives.
Put the identity core behind your own application edge, keep provider credentials and session policy under your control, and connect the datastore you operate. No hosted Genyleap identity service is required.
Your originChoose the public identity URL.
Your secretsKeep provider credentials in your own secret boundary.
Your datastoreOperate the persistence layer you trust.
Self-hosting guide ↗
ApplicationWeb / API
→
Identity coreOpenProof
→
StateYour datastore
OAuth / OIDC providers
Wallet proofs
Enterprise federation
04 / Providers
Web2, Web3 and enterprise — side by side.
Google
GitHub
𝕏X
Microsoft
Apple
LinkedIn
Telegram
EVM
Farcaster
Open source · Self-hosted