Skip to main content

Sign in with LinkedIn

How to register Curupira with LinkedIn ("Sign In with LinkedIn using OpenID Connect") so your tenant's users can sign in with LinkedIn. Curupira verifies the id_token, so LinkedIn logins are as trustworthy as Google's.

Portal: linkedin.com/developers/appsCreate app (you need a LinkedIn Company Page to associate the app with — create one first if needed).

Curupira detailValue
TypeOpenID Connect (signed id_token, verified)
Callback URL to registerhttps://auth.curupira.api.br/sso/linkedin/callback
Default scopesopenid profile email

1 · Create the app

  1. Create app — fill the name, associate your Company Page, upload a logo, and accept the terms.
  2. On the Products tab, add "Sign In with LinkedIn using OpenID Connect." (This is the current product — not the deprecated "Sign In with LinkedIn" v2.)
  3. On the Auth tab:
    • Copy the Client ID and Client Secret.
    • Under Authorized redirect URLs for your app, add exactly: https://auth.curupira.api.br/sso/linkedin/callback
    • Confirm the scopes openid, profile, email are granted (they come with the OIDC product).

2 · Add the connection in Curupira

In the admin dashboard → SSO Connections, choose your tenant and Add SSO Connection:

  • Provider: LinkedIn
  • Client ID / Client Secret: from step 1 (the secret is stored encrypted and never shown again)
  • Scopes: leave blank to use the defaults (openid profile email)
  • Enabled: on

Then test at https://auth.curupira.api.br/sso/linkedin/authorize?tenant=<your-tenant-slug>.

:::info Email is required Request the Email scope so the id_token carries a verified address — Curupira won't provision or link an account without a verified email. :::

:::note Account linking If LinkedIn returns an email that matches an existing password account, sign-in is refused — sign in with your password first, then connect SSO from your account settings. A brand-new email creates an SSO-only user automatically. :::

Checklist

  • App created + associated with a Company Page
  • Product "Sign In with LinkedIn using OpenID Connect" added
  • Redirect https://auth.curupira.api.br/sso/linkedin/callback added (exact)
  • Scopes openid profile email granted
  • Client ID + Client Secret entered in SSO Connections