LINKSPREED Releases UIID v2.14: Enterprise Single Sign-On, White-Label Portals and Dynamic OAuth

October 27, 2026 — LINKSPREED today announced the release of UIID v2.14, the biggest step so far in bringing UIID into the enterprise. The release adds full Enterprise Single Sign-On (SSO) for organization accounts, lets companies use UIID as their own identity provider (IdP), connects to existing corporate directories, and introduces a rebuilt OAuth consent experience called Dynamic OAuth.

With v2.14, a company can give its employees one secure, passwordless way into internal tools and SaaS applications. Employees sign in with biometrics and zero-trust credentials instead of passwords. At the same time, anyone who signs in to an app with UIID gets much finer control over what that app may access.

The complete list of changes is available in the UIID changelog. More about the platform is at https://uiid.me.

Why this release matters

Passwords are still the weakest link in most companies. Employees reuse them, forget them and enter them on fake login pages. IT teams spend time on resets, and every additional SaaS tool adds another login to manage.

Single sign-on solves part of this problem: employees sign in once and get access to everything they are allowed to use. Many SSO setups are still tied to passwords, though, and consent screens for third-party apps often follow an all-or-nothing approach. Users either accept every permission an app asks for or they cannot use the app.

UIID v2.14 addresses both problems. It brings passwordless, zero-trust sign-in to the company level, and it gives users and applications a clearer, fairer way to agree on permissions.

Enterprise Single Sign-On for organization accounts

At the center of v2.14 is full support for enterprise single sign-on for organization accounts. Company teams and employees can now sign in seamlessly with passwordless biometrics and zero-trust credentials.

For employees, this means fewer logins, no passwords to remember and a sign-in that feels the same across all connected tools. For IT and security teams, it means one place to manage access, and a login method that is much harder to phish or steal than a password.

SSO-as-a-Service and outbound identity

With SSO-as-a-Service, organizations can use UIID as their primary identity provider for internal company software and SaaS applications. The connection uses standard OpenID Connect (OIDC) protocols.

OIDC is widely supported, so many modern applications can connect to UIID without custom development. A company can place UIID in front of its internal tools and its external SaaS subscriptions, and employees sign in through UIID everywhere.

This is the outbound side of identity: UIID tells your applications who the user is and what they may do.

Inbound corporate SSO integration

Most companies already have a directory and an identity system. UIID v2.14 works with them instead of replacing them.

The inbound integration connects existing company directories directly to UIID. Supported are:

Microsoft Azure AD / Entra ID
Okta
SAML 2.0

Once connected, UIID provides automatic employee account linking and domain routing. An employee with a company email address is recognized by their domain and sent to the right company sign-in. The existing corporate account is then linked to the employee’s UIID account.

Together, inbound and outbound SSO let UIID sit between a company’s existing directory and the applications its people use.

White-label portals that look like your company

Employees should recognize the page they sign in on. UIID v2.14 therefore includes white-label portal customization for company login screens. Organizations can set:

A custom logo, added through a direct image URL
A primary brand color
A welcome message
Custom CSS styles
A dedicated company URL, for example /sso/login/company-name

The result is a login page that looks like part of the company. It is easier for employees to trust, and it helps them spot pages that do not belong.

The second major theme of v2.14 is Dynamic OAuth. UIID has overhauled the OAuth consent interface at /oauth/authorize, and users can now selectively grant or uncheck individual permission scopes during sign-in.

A scope is a single permission, such as access to a profile. Previously, a user usually had to accept the whole package or cancel. With Dynamic OAuth, the user sees each permission separately and can decide which ones to allow.

Mandatory scopes when an app really needs them

Some permissions are essential for an app to work at all. For these cases, applications can pass required scopes through the required_scopes parameter, for example required_scopes=openid,profile.

Required scopes cannot be switched off on the consent screen. All other scopes remain optional and fully customizable by the user. Developers can therefore ask only for what is truly necessary and let users decide on the rest.

Permanent access or a single 15-minute execution

The consent screen also includes Authorization Duration Modes. Users can choose between:

Permanent Access, the standard mode for ongoing relationships with an app
15-Minute Single Execution Grants, for one-time tasks where long-term access is not needed

The second option suits one-off actions such as a single import or a quick check. The access then expires by itself.

Incremental scope enforcement and seamless re-authorization

Applications do not have to ask for everything on day one. With incremental scope enforcement, an API endpoint returns a structured 403 Forbidden JSON response when the current permissions are not enough. The response contains insufficient_scope and an authorization_url.

An app can use this response to guide the user to approve only the additional permission that is now needed. A response could look like this, shown here as a simplified illustration:

{
  "error": "insufficient_scope",
  "authorization_url": "https://..."
}

Apps can start with minimal access and request more only when a feature needs it. This is better for users, because they see a permission request at the moment it makes sense, and better for developers, because the flow works without custom error handling.

Self-service dashboard and public integration guide

Setting up SSO should not require a long support ticket. UIID v2.14 adds a self-service dashboard in the Organization Dashboard at /dashboard/sso. Organizations can manage their SSO settings there and see a live preview of their branded login screen while they edit it.

For developers and IT teams, LINKSPREED has published a public integration guide at /sso-docs. It documents how to connect applications and directories to UIID.

Security and quality improvements

Alongside the SSO and OAuth features, v2.14 includes two smaller changes.

Stricter passkey registration. Passkey registration is now restricted to allowed identity categories. The Digital Service, AI Agent and Hardware Node types are not allowed to register passkeys. Registration also requires acceptance of the Terms and a Cloudflare Turnstile CAPTCHA check, with inline error notifications that tell users what to fix.

Dark Mode fix. The “Accept & Provision” short code action button now shows white text on dark backgrounds, so it stays readable in Dark Mode.

What v2.14 means in practice

A few examples show how the new features work together:

A company with Microsoft Entra ID connects its directory to UIID. Employees are linked automatically, their domain routes them to the company portal, and they sign in with biometrics instead of a password.
An IT team that wants one login for all tools uses UIID as the IdP over OpenID Connect. Internal software and SaaS apps then share the same passwordless sign-in.
A team that cares about branding sets up a white-label portal with its own logo, colors and company URL, and checks the result in the live preview.
A developer who wants minimal permissions marks only openid and profile as required and lets users decide on everything else. Further permissions are requested later through incremental scope enforcement.
A user who wants control unchecks optional scopes on the consent screen, or picks a 15-minute single execution grant for a one-time task.

Availability

UIID v2.14 was released on October 27, 2026. The full changelog is at https://uiid.me/changelog. SSO documentation is available at /sso-docs, and organizations can manage their SSO setup at /dashboard/sso.

To learn more about UIID, visit https://uiid.me.

About LINKSPREED

LINKSPREED builds UIID, an identity platform that gives people, organizations and applications a secure, passwordless way to prove who they are and stay in control of their data. With v2.14, UIID extends this approach to companies through enterprise single sign-on, outbound and inbound identity integration, branded portals and Dynamic OAuth.