IIT Bombay has an official SSO, but it mostly works inside the IITB network and setup. That makes life tough for student clubs and student projects that need login, but do not have access to the internal infra.
I wanted to build something useful, so I built IITB SSO middleware that lets student projects use IITB login in a clean and safe way. It supports OAuth 2.0 style flows, token based sessions, and strict callback URL validation so nobody can hijack redirects. We also added controls like IP allowlists and proper validation checks because auth is one place where you cannot be casual.
Today it has around 4k active users. Seeing real students actually use what you built for their club apps is honestly the best part.