Identity and Access Systems
Identity and access systems: single sign-on across connected applications, custom two-factor verification, multi-step identity checks, and passwordless access that removes account friction.
Single sign-on
One login across connected applications, with centralized control over who reaches which tools.
Two-factor verification
Custom 2FA built into your site, with the security policy set by you.
Identity verification
Multi-step screening that verifies an applicant's identity before an account is created.
Passwordless access
Verified access without accounts or passwords, removing the sign-up step that discourages submissions.
84EM matches authentication to the risk being protected
Login systems fail in two directions. A financial application that’s too weak grants access without knowing who’s applying. A store owner facing too much friction abandons a listing update rather than create another account.
Single sign-on fits platforms where members move between connected tools, and multi-step identity verification belongs where regulations demand it. Where the account itself is the obstacle, a passwordless flow removes it.
When is a custom login worth building over a third-party service?
When the fees, the policy caps, and the vendor dependence cost more than they save, a custom build removes all three.
Sometimes the trade a third-party service offers is fine.
When it isn’t, a custom build ends the subscription, and the policy limits with it. One client replaced a third-party 2FA service with a custom text-message system for exactly that reason. Sensitive data raises the same question: 84EM has built identity verification that screens applicants for a financial institution without storing personal data on the client’s own servers.
What does 84EM build for authentication?
Single sign-on across connected applications, custom two-factor verification with no per-user fees, multi-step identity verification that keeps sensitive personal data off your servers, and passwordless access through time-limited links. Each authentication method is designed around what it protects.
Single sign-on
Single login access across connected applications, with administrators deciding which tools each member can reach. Built for platforms where members use several systems.
Custom two-factor verification
Text-message and multi-step login verification with full control over security policies and no ongoing per-user fees.
Multi-step identity verification
Automated applicant screening before access is granted, designed so sensitive personal data never lands on your servers.
Passwordless access
Account-free management flows: verified access through time-limited links instead of credentials, improving completion rates for the people who use them.
Proof of Work
Single Sign-On Access to Connected Applications for an AI Platform
An AI platform needed members to access multiple connected applications without logging in separately to each one. A single sign-on system replaced fragmented logins with one-click access and gave administrators centralized control over who can reach which tools.
Read moreMulti-Step Identity Verification for a Financial Services Application
A financial services institution needed to verify applicant identities before granting access to their credit application -- without storing sensitive personal data on their own servers. A multi-step verification system automated the screening process while keeping the applicant experience seamless.
Read moreCustom Two-Factor Login Verification for a Web Application
An organization needed secure two-step login verification with full control over security policies, without the ongoing costs and limitations of a third-party service. A custom text-message verification system eliminated subscription fees and gave the team complete control over how users are authenticated.
Read moreHigh-Performance Business Directory with Passwordless Listing Management
A niche directory needed to serve thousands of location-based listings with instant page loads while letting store owners manage their own listings without creating accounts. A headless WordPress architecture delivered sub-second performance and passwordless listing management that improved submission rates.
Read moreWho This Work Is For
Financial Services
84EM builds and rescues websites, web apps, and software for investment funds and financial platforms, and handles the security work that comes with regulated data.
Read moreHealthcare
Healthcare work carries constraints most sites don't: patient data, provider records that go stale, and security expectations that come with both. 84EM builds and hardens websites and integrations for healthcare and wellness organizations.
Read moreNonprofit & Arts
Nonprofits and arts organizations run lean, and software gaps become staff time. 84EM builds donor systems, secure document portals, and ticketing integrations that close those gaps.
Read moreCustom build or a third-party auth service?
A third-party service is fine when its per-user pricing, policy limits, and a vendor in your login flow are a fair trade. A custom build wins when they aren’t: no subscription and full control over policy.
Choose a third-party auth service when
- Per-user pricing fits your account volume and budget
- Its built-in policy controls cover what you need to set
- A vendor between you and your login flow is acceptable
- What you’re protecting doesn’t call for custom policy
Choose a custom build when
- The subscription fees no longer make sense at your scale
- The policy you need goes beyond what built-in controls can set
- Sensitive personal data can’t be stored on your infrastructure
- The login path shouldn’t depend on an outside service
Read all testimonialsWorking with Andrew has been a breath of fresh air. The difference a highly competent developer makes -- especially one who is responsive, clear, and reliable in communication -- cannot be overstated.
Frequently asked questions.
Can 84EM build single sign-on across our applications?
Yes. 84EM builds single sign-on that gives members one login across connected applications, with centralized administration of who can reach which tools.
Can 84EM build custom two-factor authentication without per-user fees?
84EM builds custom text-message and multi-step 2FA with full control over security policy and no ongoing per-user subscription. One client replaced a third-party 2FA service with a custom system for exactly that reason.
Can 84EM verify user identity without storing sensitive personal data?
Yes. 84EM builds multi-step identity verification that screens applicants before access is granted, designed so sensitive personal data never lands on your servers. It was built this way for a financial institution.
Can 84EM add passwordless login to reduce account friction?
Yes. 84EM builds passwordless access through time-limited links instead of accounts and passwords, removing the friction that discourages submissions and improving completion rates.
How does 84EM handle website security?
Regular updates, vulnerability scanning, malware detection, access controls, two-factor authentication, strong password enforcement, SSL/TLS, database hardening, file monitoring, audit trails, least privilege principle, and backup/disaster recovery.
How do I get started with 84EM?
Contact 84EM to discuss your requirements, timeline, and budget. No commitment required.
Need logins that get out of the way?
Describe who needs access to what. 84EM will show you an authentication design that fits -- one senior engineer, direct.
Folks we've helped.
