custom login flow.
Hi I am sorry if this has been discussed before but I am wondering why I cent create a custom login for email and password but I can create a custom signup flow. WIth the management api I have a complete custom flow where i can create a org, user, set password, add user to org and set a role. this is all done form my signup page no issues. but I cant create a basic Login page. If I follow what i have seen i can a custom page with a email input but then to add the password i have to redirect to kinde to add the email.... I dont get this. I have tried to look for an endpoint that i can hit and sort it out but everything i try I get a login failed message.
Is there an endpoint I am missing, is it possible at all???
3 Replies
Hi @plebeian,
Thanks for the question totally understandable, and you’re not missing anything!
The reason you're able to build a fully custom sign-up flow (including setting passwords via the Management API) but not a custom email+password login flow is due to how Kinde handles password security.
Kinde doesn't expose an endpoint for live password authentication. To protect credentials, the password verification step always takes place on Kinde-hosted screens. So even if you collect the email on your own page, users will be redirected to Kinde to enter their password.
This differs from your sign-up flow because you're creating users and setting passwords server-side, there's no real-time credential check involved.
If you're looking for more control, here are a few options:
- Use social logins only (Google, Apple, etc.): users stay on your custom page and are redirected straight to the provider.
- Switch to passwordless authentication: using email or phone OTP avoids password screens entirely.
- Keep a hybrid setup: collect the email on your own screen, then redirect to Kinde for secure password entry.
You can read more here:
Custom authentication pages – Kinde Docs
Let me know if you'd like help adjusting the flow!
Kinde docs
Custom sign-up and sign-in pages
Step-by-step guide to creating custom authentication pages while maintaining Kinde's security for verification and MFA processes.
thank you foe getting back to me
You're very welcome! Let me know if you run into anything else or if you'd like help setting up one of those alternative flows, happy to assist.