-
Say “Hellō” to AI
The Hellō Admin MCP Server I recently watched Andrej Karpathy deliver a talk on Software 3.0, where he talked about coding in English, and notably expressed frustration with setting up authentication 😖. Inspired to address this issue (and to try out coding in English), I began experimenting with the Model Context Protocol (MCP) to enable the creation…
-
Introducing OpenID Provider Commands
Today the OpenID Foundation A/B Connect Working Group adopted the OpenID Provider Commands draft that I created with Karl McGuinness as a working group item. OP Commands introduces a standardized set of commands that empower OpenID Providers (OPs) to manage user accounts directly at Relying Parties (RPs). The suite of commands enabled management of the…
-
Hellō B2B SaaS
When talking to developers about their identity problems, the pain point of setting up identity federations with enterprise customers would keep coming up. Our initial focus has been in giving user’s control of their identity, which we thought of as B2C use cases, but as we looked at the B2B problem, we realized your work…
-
Introducing the “org” claim
August 4, 2025 Update We have migrated to thetenantclaim that is what was org.id and no longer include the domain. See our updated documentation. With the release of our B2B SaaS functionality, we needed a mechanism to communicate which organization a user belongs to. A domain name is a common human memorable identifier for an organization, just like email…
-
New Hellō Identifiers
Why we are moving away from UUIDv4 Updated July 1, 2024 – we will continue to provide UUIDv4 identifiers to our existing customers. Identifiers are a foundational component of any computing system, and key to an identity service. At Hellō, we have: We of course don’t have control over external identifiers. Our requirements for our…
-
Hellō in 60 Seconds
Adding auth to your app has never been this easy Tl;dr: Test drive the sample code https://github.com/hellocoop/hello-nextjs-sample/ In the video below, we walk through test-driving the sample repo: We then add Hellō to one of the Next.js sample apps per this post: Note the pointer to the clock so you can see the true elapsed time! See the blog…
-
Add Hellō to any Next.js App in seconds
In our mission to reduce developer friction, we looked at what we could do to simplify adding Hellō to your app. Running the commands below will create a Next.js sample app, add Hellō, and open up a sample page for you to log in — try it out! To add Hellō to your app, cd to your…
-
Hellō Auto Config
I have configured the popular social login providers for numerous applications over the years. Despite knowing a few things about identity, I find the configuration process tedious and confusing, and when talking to other developers, they have similar complaints. We strive to simplify login and registration at Hellō, and question why you need deep expertise in OAuth and…
-
Hellō `localhost`
A challenge when developing against any of the large Social Login providers such as Google is that for security reasons[1], they don’t support using http://localhost, which makes doing local application development that uses these providers challenging. At Hellō, we strive to simplify adding identity to your applications. To enable localhost development, we separated redirect URIs to be either…
-
Discord, GitHub, GitLab, Twitter (X) Scopes Now Supported
Verify Who Your Users are on Other Services You can now include discord, github, gitlab, and twitter in your authorization requests and Hellō will ask the user to link and select the requested provider(s) to provide you with a verified claim of their identifiers on those services. As usernames can be changed, we provide both the username, and the permanent id from the…
-
Hellō Login Installation and Comparison Video
Hellō Login can be installed in just 7 clicks and 19 seconds. This includes selecting which Google account you want to use if you chose Google! Chris Heuer, longtime WordPress user is pretty excited about how Hellō Login can provide 16+ ways to login, protect comments, and provide verified email addresses. In the video, Chris…
-
Hellō Passkeys
May the Fourth be with You – Passkey Support now in Beta Not only is it Star Wars Day, but it is also International Password Day. Expect lots of announcements about passkeys today as the prevailing wisdom is that the best password is no password, and passkeys have emerged as the shiny new replacement. Despite…
-
NPR’s Rise on the Fediverse
This week, NPR chose to no longer post on Twitter. We had been mirroring the @NPR and @nprpolitics Twitter accounts on press.coop, and had a surge of interest in following @NPR@press.coop, which is now the most popular account on press.coop.
-
Recommended Providers now Available
Control Which Providers are Recommended to Your Users As we have added to our list of login providers, new users were staWith this update, you can override which providers are recommended to your users by setting the provider_hint query parameter in the authorization URL. For example, if you want to add GitHub and remove email and Apple…