Houm Authentication

generated: '2026-08-22'
method: probed
source: https://auth.houm.com/.well-known/openid-configuration
name: Houm authentication
note: >-
  Houm publishes no API reference and no OpenAPI, so there are no securitySchemes to derive from.
  This profile is built entirely from the OpenID Connect discovery document Houm's own Auth0 custom
  domain serves anonymously at auth.houm.com, saved verbatim in
  well-known/houm-openid-configuration.json. It describes how Houm authenticates users of its own
  web and mobile products (houm.com, admin.houm.com — whose CSP frame-src names auth.houm.com and
  *.auth0.com). It is NOT documentation of a public developer API: no client registration, key
  issuance, or authorization flow for third parties is published anywhere on Houm's site.
schemes:
- name: openIdConnect
  type: openIdConnect
  openIdConnectUrl: https://auth.houm.com/.well-known/openid-configuration
  issuer: https://auth.houm.com/
  provider: Auth0 (custom domain)
  endpoints:
    authorization: https://auth.houm.com/authorize
    token: https://auth.houm.com/oauth/token
    userinfo: https://auth.houm.com/userinfo
    jwks: https://auth.houm.com/.well-known/jwks.json
    revocation: https://auth.houm.com/oauth/revoke
    registration: https://auth.houm.com/oidc/register
    device_authorization: https://auth.houm.com/oauth/device/code
    mfa_challenge: https://auth.houm.com/mfa/challenge
  grant_types:
  - authorization_code
  - client_credentials
  - refresh_token
  - password
  - implicit
  - urn:ietf:params:oauth:grant-type:device_code
  - urn:ietf:params:oauth:grant-type:token-exchange
  - urn:ietf:params:oauth:grant-type:jwt-bearer
  - http://auth0.com/oauth/grant-type/password-realm
  - http://auth0.com/oauth/grant-type/passwordless/otp
  - http://auth0.com/oauth/grant-type/mfa-oob
  - http://auth0.com/oauth/grant-type/mfa-otp
  - http://auth0.com/oauth/grant-type/mfa-recovery-code
  response_types:
  - code
  - token
  - id_token
  - code token
  - code id_token
  - token id_token
  - code token id_token
  token_endpoint_auth_methods:
  - client_secret_basic
  - client_secret_post
  - private_key_jwt
  - none
  pkce_methods:
  - S256
  - plain
  id_token_signing_algs:
  - RS256
  - PS256
  - HS256
  mfa: true
  backchannel_logout_supported: true
  request_uri_parameter_supported: false
docs: null
docs_note: >-
  No authentication documentation is published by Houm. help.houm.com is an end-user help centre
  with no developer or API section, and developers.houm.com does not resolve.
evidence:
- url: https://auth.houm.com/.well-known/openid-configuration
  status: 200
- url: https://auth.houm.com/.well-known/jwks.json
  status: 200
- url: https://help.houm.com/cl
  status: 200