Sign in with LinkedIn
How to register Curupira with LinkedIn ("Sign In with LinkedIn using OpenID Connect") so your
tenant's users can sign in with LinkedIn. Curupira verifies the id_token, so LinkedIn logins are as
trustworthy as Google's.
Portal: linkedin.com/developers/apps → Create app (you need a LinkedIn Company Page to associate the app with — create one first if needed).
| Curupira detail | Value |
|---|---|
| Type | OpenID Connect (signed id_token, verified) |
| Callback URL to register | https://auth.curupira.api.br/sso/linkedin/callback |
| Default scopes | openid profile email |
1 · Create the app
- Create app — fill the name, associate your Company Page, upload a logo, and accept the terms.
- On the Products tab, add "Sign In with LinkedIn using OpenID Connect." (This is the current product — not the deprecated "Sign In with LinkedIn" v2.)
- On the Auth tab:
- Copy the Client ID and Client Secret.
- Under Authorized redirect URLs for your app, add exactly:
https://auth.curupira.api.br/sso/linkedin/callback - Confirm the scopes
openid,profile,emailare granted (they come with the OIDC product).
2 · Add the connection in Curupira
In the admin dashboard → SSO Connections, choose your tenant and Add SSO Connection:
- Provider: LinkedIn
- Client ID / Client Secret: from step 1 (the secret is stored encrypted and never shown again)
- Scopes: leave blank to use the defaults (
openid profile email) - Enabled: on
Then test at https://auth.curupira.api.br/sso/linkedin/authorize?tenant=<your-tenant-slug>.
:::info Email is required
Request the Email scope so the id_token carries a verified address — Curupira won't
provision or link an account without a verified email.
:::
:::note Account linking If LinkedIn returns an email that matches an existing password account, sign-in is refused — sign in with your password first, then connect SSO from your account settings. A brand-new email creates an SSO-only user automatically. :::
Checklist
- App created + associated with a Company Page
- Product "Sign In with LinkedIn using OpenID Connect" added
- Redirect
https://auth.curupira.api.br/sso/linkedin/callbackadded (exact) - Scopes
openid profile emailgranted - Client ID + Client Secret entered in SSO Connections