Authenticate with an External JWT

Bring Your Own Auth is an enterprise feature. Contact us in Slack or at dynamic@fireblocks.com to enable it.

If your app already has an authentication system or uses a provider like Auth0, Firebase Auth, or Supabase, you can exchange the JWT that system issues for a Dynamic session. Dynamic verifies the token, creates or matches a user record, and returns its standard session. For concepts, JWT requirements, and console configuration, see Bring Your Own Auth.

Prerequisites

Dynamic Kotlin SDK installed and configured (see Quickstart)
Bring Your Own Auth enabled and configured in the Dynamic developer console (issuer, JWKS URL, and optionally audience and cookie name)
Your backend issues a JWT with at least iss, sub, and exp claims

Call signInWithExternalJwt on sdk.auth.externalAuth with the JWT issued by your auth provider.

viewModelScope.launch {
    try {
        sdk.auth.externalAuth.signInWithExternalJwt(
            SignInWithExternalJwtParams(jwt = jwtToken)
        )
    } catch (e: Exception) {
        println("External JWT sign-in failed: ${e.message}")
    }
}

Bring Your Own Auth: concepts, configuration, and JWT requirements.
Session Management: manage the session after sign-in.

Last modified on September 21, 2026

Learn

Implement

Authenticate with an External JWT

Prerequisites

​Prerequisites

​Sign in

​Related

Prerequisites

Sign in

Related