Linc’well Adopts Authlete to Build OIDC-Compliant SSO In-House

We’re pleased to announce that Linc’well Inc. (Linc’well) has adopted Authlete’s OAuth and OpenID Connect (OIDC) backend service to build in-house, OIDC-compliant Single Sign-On (SSO) functionality for its medical and healthcare platforms.

Linc'well provides solutions built around three core service areas focused on primary care: Telehealth Platform, which enables patients to receive medical care remotely; Smart Clinic, which digitizes core clinic operations such as appointments, patient intake, and payments; and Healthcare EC, which offers physician-dispensed cosmetics, contact lenses, and over-the-counter products online.

As the number of services increased with business growth, Linc’well decided to implement an SSO system to provide a consistent user experience. In building an in-house shared authentication and authorization infrastructure compliant with OIDC specifications, Linc’well selected Authlete as the critical component for OIDC protocol processing.

Challenges With the Previous Authentication and Authorization Infrastructure

Previously, each Linc’well service implemented its own user management and authentication functionality. While this structure contributed to rapid service rollout in the early stages, the company faced the following challenges as its business expanded:

• ‍Fragmented user experience (UX): Users had to log in separately to each service, creating friction when using multiple services. Inconsistent login flows also undermined cohesion across platforms.‍
• Growing development and operational overhead: With each team managing authentication independently, keeping pace with the latest security standards and ensuring quality became a bottleneck, prolonging development lead times.

To resolve these issues, Linc’well decided to build a shared authentication and authorization infrastructure and migrate to an architecture where all products securely federate via OIDC. To drive this migration, the company also established a dedicated Authentication Infrastructure Team.

Why Linc'well Chose Authlete

Linc’well adopted a “Buy and Build” approach, optimizing what to develop internally and what to offload to external solutions. For example, the company chose to build the shared login UI in-house, which directly shapes the UX, while using Amazon Cognito to manage identity and credentials.

For the OIDC identity provider (IdP) function that operates alongside the login UI, Linc’well determined that implementing complex standard specifications from scratch was not a viable option. As a result, Authlete was selected to handle highly specialized protocol processing and token management. Key factors in the decision included:

• ‍Full control over UX: Because Authlete operates as a headless backend API, Linc’well retains complete control over the UX of the authorization flow.‍
• Significant reduction in development effort: Authlete handles complex processing, including error handling and authorization flow state management, enabling Linc’well to build an OIDC IdP that meets its requirements while reducing development burden.‍
• Architectural and language flexibility: All Authlete functions are available as APIs and are not dependent on any specific programming language or framework. This flexibility allowed Linc’well to integrate Authlete smoothly with Actix Web, the Rust-based web framework used to build its OIDC IdP.‍
• Seamless feasibility testing and technical credibility: Authlete's comprehensive reference implementations and free trial enabled Linc’well to easily validate that its requirements could be met. The high quality of Authlete’s publicly available technical documentation helped solidify Linc’well’s trust in Authlete.

New Infrastructure Built With Authlete

Linc’well began architecting its new infrastructure using Authlete in June 2025. Following development and testing, gradual migration of each product's authentication functionality to the new infrastructure started in March 2026, with all products completed in April 2026.

‍Authlete Contributes to Greater Development Efficiency and Stronger Governance

By deploying Authlete, Linc’well enhanced its user experience while gaining the following benefits:

• ‍Improved productivity: Linc’well centralized the implementation and operation of custom authentication logic, optimizing development efficiency.‍
• Focus on core business: Product teams were freed from developing shared functionality, enabling them to concentrate on their core business logic.‍
• Stronger governance: Linc’well established a foundation capable of applying advanced security measures required in the medical field across all services at once.

Comment From Kazuya Shida, Engineering Manager, Authentication Infrastructure Team, Development Department, Linc’well Inc.

“By leveraging Authlete to build our shared authentication and authorization infrastructure, we were able to efficiently develop these capabilities in-house and quickly improve the user experience while reducing the burden on each product team. As a company handling medical data, strengthening security remains our highest priority. We look forward to Authlete’s high-quality OAuth/OIDC implementation continuing to support our efforts.”

‍

Read more customer success stories here.

‍