Kristall × CrystalID

Kristall uses CrystalID for user authentication. This endpoint is used by the Kristall client to initiate the Single Sign-On flow.

The auth flow works like this:

1. The client generates a random challenge token
2. Your browser opens the CrystalID login page
3. After login, CrystalID redirects back with a session token
4. The Kristall client uses this token for authenticated API calls