Identity provider - Tight API

If your platform uses a popular identity provider, like Auth0, AWS Cognito, Okta, or Stytch, then you can authenticate your users to Tight Embedded Accounting by following the steps below (no developer required). Simply use the Configure Identity Provider API to specify your Identity Provider and Issuer URI.

Configure business-specific attributes

Tight will use the standard user claims (attributes) included by your identity provider, like email, name, etc. Additionally, you can set up the following optional company-specific attributes in your identity provider:

Claim	Description
`companyName`	Name of the user’s company
`entityType`	The type of the entity (SOLE_PROPRIETORSHIP, LLP, LLC, S_CORP, C_CORP)
`companyId`	Id of the company in your DB
`address`	Address of the company

Get a JWT access token

Ready-to-Launch

If you are using Ready-to-Launch accounting, then you simply need to route your user to the Ready-to-Launch app. The RTL app will take care of the authenication using your identity provider.

Embedding Tight

If you are embedding accounting into your existing UX, then you can obtain a JWT from your identity provider, and simply pass that JWT into the front-end components as the access token.

⌘I