Custom Auth SPI — Passwordless SMS OTP & Push Login
Keycloak Authentication SPIs for passwordless e-commerce login: customers check out with a phone number and SMS One-Time Password (OTP), while returning mobile users get one-tap push approval.
Overview
We build two custom Keycloak Authentication SPI plugins for passwordless, consumer-facing login. The SMS OTP authenticator is the primary login method: customers enter their phone number, receive a one-time code via Twilio or AWS SNS, and are logged in or automatically registered — no account password required. The push notification authenticator gives returning mobile app users a one-tap login via Firebase FCM or APNs, with no code to type. Both SPIs slot into Keycloak's authentication flow engine without custom frontend code. Every plugin ships with unit tests and integration tests against a containerised Keycloak instance.
Delivery Process
What's Included
- SMS OTP passwordless login SPI
- Push notification login SPI
- Passwordless authentication flow configuration
- Twilio / AWS SNS integration
- Firebase / APNs integration
- Unit + integration tests
Timeline & Scope
Timeline
2-3 weeks
Ideal For
E-commerce stores wanting passwordless checkout via SMS OTP and push login for mobile app users.
Warranty
30-day warranty covering message delivery failures, authentication flow regressions, and provider API compatibility issues.
Tech Stack
Ready to get started?
Fixed price. Clear scope. 30-day warranty.