Supabase integration

Add MFA and passkeys to Supabase

Keep your Supabase database and stack, and add enforceable MFA and phishing-resistant passkeys with Tuurio ID as an OIDC provider — EU-hosted and GDPR-compliant.

Connect Supabase How it works

Keep your stack

Database and APIs stay on Supabase.

MFA & passkeys

Enforceable, phishing-resistant.

Standard OIDC

Connect over OpenID Connect.
Why

Stronger auth without leaving Supabase

Supabase is a great backend, but you may want stronger, policy-driven MFA, phishing-resistant passkeys and EU data sovereignty for the identity layer. Tuurio ID plugs in over standard OpenID Connect, so you keep your Supabase database and APIs and front authentication with an EU-hosted provider.

Setup

Add MFA and passkeys in three steps

1

Connect Tuurio ID via OIDC

Use Tuurio ID as the OIDC provider for your app login.

2

Create a Tuurio ID client

Enter the client ID/secret and redirect URI.

3

Enable MFA & passkeys

Turn on MFA and passkeys in your tenant; your Supabase data stays put.

What you get

Stronger identity for your Supabase app

Passkeys / WebAuthn

Phishing-resistant, passwordless login.

Enforceable MFA

Require a second factor by policy.

Keep your database

Your Supabase Postgres and APIs stay unchanged.

EU-hosted & GDPR

Identity hosted in Germany with a data-processing agreement.

FAQ

Supabase MFA & passkeys — frequently asked questions

No. You keep your Supabase database and APIs; Tuurio ID only provides the identity layer over standard OIDC.
Yes. If you later want to replace Supabase Auth completely, see our Supabase Auth alternative — the OIDC integration stays the same.
Yes. Tuurio ID is hosted in Germany and offers a data-processing agreement under Art. 28 GDPR.

Add MFA and passkeys to Supabase

Keep your Supabase stack and add enforceable MFA and passkeys with an EU-hosted OIDC provider.

Connect Supabase Developer guide