Tenant-aware identity infrastructure for modern teams.

A clear identity surface

Keep tenants, projects, and environments isolated. Route auth flows and policy checks through a predictable boundary.

“Example topology - adapt to your stack.”

Copy/paste integration

Start with Authorization Code + PKCE and a single callback route. Expand to policies and audit exports when you're ready.

// Authorization Code + PKCE (example)
const authUrl = new URL("https://id.uselamba.com/connect/authorize");
authUrl.searchParams.set("response_type", "code");
authUrl.searchParams.set("client_id", process.env.LAMBA_CLIENT_ID!);
authUrl.searchParams.set("redirect_uri", "https://app.example.com/api/auth/callback");
authUrl.searchParams.set("scope", "openid profile email");
authUrl.searchParams.set("code_challenge", pkce.challenge);
authUrl.searchParams.set("code_challenge_method", "S256");
authUrl.searchParams.set("state", state);

return NextResponse.redirect(authUrl);

Auditability by default

Exportable audit logs and trace IDs help you debug auth issues without guessing.

“Example dashboard.”