The Blocks Blog

How to Add SSO Login to a React App (OIDC + PKCE Guide)

Your React app has email-and-password login, and a customer just asked for SSO in the security review. This guide wires single sign-on into an existing React app using Blocks IAM as the identity provider, with the authorization code flow and PKCE. The flow is standard OpenID Connect, so everything transfers if your provider is Okta, Entra ID, or Keycloak instead; only the endpoints change. What you'll have by the end: a login button that redirects to Blocks IAM, a callback route that exchanges the code for tokens, and a guard that keeps unauthenticated visitors out.