Vonvon

Identity platform

Identity infrastructure built for every tenant

Vonvon is a multi-tenant OpenID Connect and OAuth 2.1 identity provider that runs on Cloudflare. Passkeys, social sign-in, enterprise SSO, directory sync, organizations and a Management API.

What Vonvon provides

Capabilities available today.

  • Passkeys and multi-factor

    Passkey-first sign-in with WebAuthn, passwords hashed with Argon2id, authenticator app codes, backup codes and SMS as a second factor.

  • OpenID Connect and OAuth 2.1

    Authorization code flow with PKCE, rotating refresh tokens, device authorization, pushed authorization requests, DPoP and dynamic client registration.

  • Social sign-in

    Let people sign in with external providers such as Google and Apple, configured per organization.

  • Enterprise SSO

    Connect each organization to its own SAML or OpenID Connect identity provider.

  • Directory sync

    Provision and deprovision users with SCIM, in both directions.

  • Organizations and roles

    Tenants, organizations, projects, roles and permissions, with tenant isolation enforced on every query.

  • Management API and SDKs

    A versioned REST API, signed webhooks and TypeScript SDKs for the browser, servers and React, plus native SDKs distributed as source.

  • Built for Cloudflare

    Runs on Workers with Durable Objects, Queues, KV and R2 at the edge, backed by a PostgreSQL database for relational data.