Docs / Getting started

Your first signed token

You can check your test provider before writing code or registering an app callback. Free includes this whole path.

Milestone 1: get your first signed token

Create your test provider

  1. Sign up with your email and a name for your app or team.
  2. Open the newest verification email and choose Confirm. Opening the email link alone does not activate the tenant.
  3. Confirmation signs you in and opens the editor in this browser. A tenant is your workspace; each configuration is a separate test provider with its own users, clients and endpoint URLs.

Check the provider

  1. In the starter configuration, find its client under Clients and choose Test sign-in.
  2. Keep the default scopes and choose Start. A single-user configuration signs in immediately; with several users you choose one.
  3. Inspect the returned identity, ID/access token claims, signature checks and userinfo. You have now obtained real signed test tokens.

No redirect URI change, source token or Pro activation is needed. This test uses HeyIdentity’s own callback; it checks the provider, not a connection to your own app.

Milestone 2: connect your own app

  1. Choose the relevant integration example or Entra ID guide.
  2. In Clients, edit or add your app’s client. Register its exact callback URL, such as http://localhost:3000/callback. Use only development credentials.
  3. Copy the values under Connect your app into your application. Match its client ID, scopes and secret if it is a confidential client.
  4. Start sign-in from your app. Finish the callback in that app, then check the displayed user and expected roles/claims.

The second milestone is a successful callback in your own app. A passing built-in Test sign-in does not prove that connection.

Come back to your tenant

Sign in with your verified owner email to reach your tenants. Sessions end after 1 hour idle or 8 hours in all. See account access and claim codes.

Next tests

Test a different role, reuse signed-in state in CI, or compare Free and Pro. Pro is optional for the first signed token and basic integration.