Single sign-on
One session across every *.thundera.eu app, plus OIDC / OAuth 2.1 for MCP clients and desktop apps with PKCE.
Sign in once and you are in every Thundera app and every app that follows. Manage your devices, your organization and your plans in one place.
Free to start · passwords never leave the auth service · EU-built
Account
Everything the auth service does, in plain terms.
One session across every *.thundera.eu app, plus OIDC / OAuth 2.1 for MCP clients and desktop apps with PKCE.
Trust a device, sign out one session or everywhere at once, and see every signed-in browser and app.
Invite members, claim your domains, choose which apps your team can open and connect SAML or OIDC single sign-on.
Every subscription, card and invoice for every product on one page, paid through Stripe. Organizations get one invoice.
Rotating refresh tokens, brute-force lockouts, optional MFA, audit log and a kill switch that revokes every token instantly.
The apps menu in every Thundera bar shows exactly the apps your account and organization may open.
For teams
Roles, domains, app access and SSO live in one workspace at auth.thundera.eu/settings. Every Thundera app honours it.
// Any app, one request
GET /api/v1/auth/me?optional=1
// -> user, roles, plan, orgHow it works
Email, name and a password, or a social login. Verify your email once.
You arrive signed in. Pick an app from the launcher in the top bar.
Plans, cards, devices and your team at auth.thundera.eu/settings.
No. One Thundera account works in every product; your plan and limits are resolved centrally.
Only here: auth.thundera.eu/billing. Apps show your current plan and send you to this page to upgrade.
Yes. Organization admins connect SAML 2.0 or OIDC under Settings → Organization → SSO.
Settings → Security lists every session; revoke one, or sign out everywhere to invalidate all tokens at once.