Linc’well Adopts Authlete for Common Authentication and Authorization Infrastructure in Healthcare Platform, Internally Developing OIDC-Compliant SSO Functionality

Authlete Inc. (Headquarters: Chiyoda-ku, Tokyo; CEO: Takahiko Kawasaki; hereinafter 'Authlete') announces that Linc’well Inc. (Headquarters: Minato-ku, Tokyo; CEO: Ryosuke Yamamoto; hereinafter 'Linc’well') has adopted Authlete's OAuth and OpenID Connect (OIDC) backend service 'Authlete' for its healthcare platform.

Linc’well provides a medical and healthcare platform centered on three core services: an 'Online Medical Consultation System' enabling remote healthcare access, 'Clinic DX Support' that digitizes key clinic operations such as appointments, consultations, and payments, and 'Healthcare E-Commerce' covering non-clinical healthcare areas such as cosmetics and self-medication products.

In response to increasing service offerings due to business expansion, Linc’well decided to implement single sign-on (SSO) to deliver a consistent user experience. To internally develop an OIDC-compliant common authentication and authorization infrastructure, the company adopted Authlete as the core component responsible for OIDC protocol processing.

Challenges Prior to Implementing the Common Authentication and Authorization Infrastructure

Previously, Linc’well implemented user management and authentication separately for each service. While this approach supported rapid initial service deployment, it led to the following challenges as the business scaled:

Deterioration of User Experience (UX): Users needed separate logins for each service, hindering cross-service usage. Inconsistent login flows also weakened the sense of cohesion across the platform.

Increased Development and Operational Burden: With each team independently managing authentication, responding to the latest security standards and ensuring quality became factors that prolonged development lead times.

To address these challenges, Linc’well decided to build a 'common authentication and authorization infrastructure' and transition to an architecture where all products securely interoperate using OIDC. To drive this migration, a dedicated 'Authentication Infrastructure Team' was newly established.

Reasons for Choosing Authlete and Selection Criteria

Linc’well adopted a 'Buy and Build' approach, optimally combining in-house development (Build) with externally sourced components (Buy). For example, the 'Common Authentication Page' (login screen), which directly impacts UX, was developed in-house, while Amazon Cognito was selected for managing identity and authentication data.

For the OIDC Identity Provider (IdP) functionality that operates in tandem with the common authentication page, the company determined that implementing complex standard specifications from scratch would be inefficient. Therefore, they adopted a design where Authlete handles the highly specialized protocol processing and token management.

The following factors were decisive in selecting Authlete:

Full Control Over User Experience: As a headless API operating in the backend, Authlete allows Linc’well to maintain complete control over the UX within the authorization flow.

Significant Reduction in Development Effort: By offloading complex tasks such as error handling and state management within the authorization flow to Authlete, Linc’well was able to build a compliant OIDC IdP with reduced development burden.

Flexibility in Technology Selection: All Authlete functionalities are accessible via API, independent of programming language or framework. This allowed seamless integration with Actix Web (a Rust-based web framework), which Linc’well used to build its OIDC IdP.

Ease of Evaluation and High Technical Expertise: The ability to verify requirement fulfillment through rich reference implementations and a free trial, combined with the high quality of publicly available technical documentation, strengthened trust in Authlete.

The New Infrastructure Powered by Authlete

Linc’well began designing its new infrastructure with Authlete in June 2025. After development and testing, the company began gradually migrating authentication functions of each product to the new infrastructure starting March 2026, completing the transition across all products by April 2026.

Figure: Linc’well’s Common Authentication and Authorization Infrastructure Using Authlete

Authlete’s Contribution to Development Efficiency and Governance Strengthening

With the adoption of Authlete, Linc’well achieved improved user experience and gained the following benefits:

Increased Productivity: By centralizing the implementation and operation of custom authentication logic, development efficiency was optimized.

Focus on Core Business: Product teams were freed from developing common functions and could concentrate on their core business logic.

Enhanced Governance: A foundation was established to uniformly apply high-level security measures—required in the healthcare sector—across all services.

Comment from Mr. Kazuya Shida, Engineering Manager, Authentication Infrastructure Team, Linc’well Inc.

"In building our common authentication and authorization infrastructure, leveraging Authlete enabled us to efficiently develop authentication and authorization features in-house, quickly improving user experience and reducing the burden on our product teams. As a company handling medical data, strengthening security remains our top priority. We look forward to continuing to benefit from Authlete’s high-quality OAuth/OIDC implementation."

For use cases from other companies, please visit our website’s customer success stories.

About Authlete

Authlete provides a web API that accelerates and simplifies the implementation of OAuth and OpenID Connect (OIDC) into authorization systems. Developed by experts involved in international standardization, Authlete is OpenID Certified and supports advanced security specifications such as FAPI and CIBA, as well as the latest standards like OpenID for Verifiable Credentials Issuance. Authlete’s solutions are widely adopted across diverse industries—including finance, media, retail, technology, and consulting—by startups, mid-sized, and large enterprises both in Japan and internationally.