bizbasics is a B2B control plane — identity, billing, entitlements, and an app catalog. You bring the product; we handle sign-in, who-can-use-what, and getting paid. Wire it up in an afternoon.
# 1 · the platform hands you a one-time token
GET https://your-product.com/auth/sso?token=…
# 2 · exchange it for the user — server to server
curl "$AUTH/api/v1/internal/verify-app-token?token=$T" \
-H "X-Internal-Key: $SSO_SECRET"
# → { "user_id", "org_id", "role", "plan", "apps": [...] }
# 3 · set your own session cookie. done — no login code.
How it fits together
Customers sign in once. The control plane owns identity, billing, entitlements, and the catalog — and every product, ours or yours, plugs in over the same four contracts.
Everything but your product
SSO, handled
One-time-token handoff. No login screens, no password storage, no JWKS to cache.
Billing & entitlements
Stripe is wired up. You receive role/plan/apps at SSO and query live usage via the API.
Workspace records
Publish a summary of any object; it shows up in search and recents across the whole suite.