Single Sign-On (SSO)

HostUp Cloud uses a unified Single Sign-On system powered by OpenID Connect (OIDC). Sign in once at auth.hostupcloud.com and access every HUC service without logging in again.

How It Works

1. You sign in at auth.hostupcloud.com.
2. When you visit any other HUC service (Billing, Support, Storage, etc.), you are automatically authenticated via SSO.
3. If you visit a service directly without being logged in, you are redirected to the HUC Auth Portal login page, then sent back to the service after authentication.

You → billing.hostupcloud.com
  ↓ (not logged in)
Redirect → auth.hostupcloud.com/login
  ↓ (sign in)
Redirect → billing.hostupcloud.com ✓ (authenticated)

SSO-Enabled Services

All HUC services use the same SSO system:

Accessing Services from the Dashboard

Your HUC Auth Portal dashboard has quick-access cards for all services. Clicking a service card:

1. Generates a one-time token for seamless authentication.
2. Opens the service in a new tab.
3. Automatically signs you in — no additional login required.

This means you can jump between Billing, Support, Storage, Learning, and other services without re-entering your credentials.

Direct Access to Services

You can also visit any HUC service URL directly in your browser:

• If you're already logged in to the Auth Portal — the service detects your session via OIDC and signs you in automatically.
• If you're not logged in — you'll be redirected to the Auth Portal login page. After signing in, you're sent back to the service you originally visited.

Session Behaviour Across Services

• Each service maintains its own session linked to your HUC account.
• Signing out from the Auth Portal ends your primary session. Other services may continue to work until their individual sessions expire.
• To sign out from all services at once, use Settings > Account Actions > Revoke All Sessions in the Auth Portal.

Account Data Sync

When you update your profile in the Auth Portal (name, email, avatar), the changes are reflected across all SSO-connected services on your next visit or session refresh. Services pick up updated profile information from the identity provider automatically.

Security

• All SSO communication uses HTTPS and the OIDC Authorization Code flow with PKCE for maximum security.
• Tokens are short-lived and refreshed automatically.
• IP and country restrictions set in the Auth Portal apply to sign-in attempts across all services.
• Sessions are tracked independently per service, giving you full visibility in Settings > Account Actions.

Troubleshooting

I'm being asked to log in again on another service

• Your Auth Portal session may have expired (sessions last 7 days). Log in to the Auth Portal first, then try the service again.
• Clear your browser cookies for the specific service domain and try again.

My profile isn't updated on a service

• Profile changes sync on next session refresh. Try signing out and back in to the affected service.

I can't access a service

• Make sure your account isn't restricted by IP or country rules.
• Check that your account isn't suspended. Visit the Auth Portal dashboard for any alerts.
• Contact support at hostupcloud.help if the issue persists.

Next Steps

• KYC Verification — Complete identity verification for full access
• Sign Up — Create your HostUp Cloud account