Passionfruit Design

Passkey login and single sign-on

One sign-in for every app, with passkeys instead of passwords and roles that match how the organisation works.

What I build

Identity as its own small service, shared by every app.

  • Passkey sign-in with WebAuthn.
  • A central identity service using OIDC, so every app shares one sign-in.
  • Role hierarchies that match the organisation.
  • Google sign-in and magic links, where they fit better.
  • Single sign-on with the accounts an institution already has.

In production

Three systems, three kinds of sign-in.

  • Solent Gay Men's Chorus: one identity service for every app, with passkey sign-in and a role hierarchy.
  • SUMS, a university marking platform: single sign-on and a full audit trail, in production since 2018.
  • alicedennis.net: the owner signs in to her admin page with Google.

Questions people ask

Why passkeys?

There is nothing to remember and nothing to phish. The private key never leaves the user's device.

Work like this

  • Solent Gay Men's Chorus

    Registered charity. The whole platform, built and run by me.

  • SUMS

    Single-blind double-marking platform for a university, with automated reconciliation.

  • alicedennis.net

    Site for a piano and singing teacher. Replaced a broken legacy site.

In plain English

  • Web apps and booking systems

    Bespoke web apps and booking systems for schools, charities and small businesses. Designed with the people who will use them, then built and run by me.

Tell me what you need

A few lines about the project is enough. I read every message myself. I meet people face to face within about 30 miles of Portsmouth, and work with organisations anywhere in the UK.

Send me a message

Or email hello@passionfruit.design, or call or WhatsApp 07385 509278.