32 docs tagged with "oauth2"

What is Account Linking?

OAuth2/OIDC application types (client_type values), recommended flows, and configuration availability by type in cidaas.

cidaas provides fine-grained authorization beyond OAuth2 scopes and group/role restrictions through the OpenID AuthZEN standard. AuthZEN separates policy administration from policy decision and supports attribute-based policies (Rego/OPA), external data via Policy Information Points (PIP), and Relationship-Based Access Control (ReBAC).

Learn how to rotate client secrets and AppKeys securely in cidaas.

Overview

Overview

Learn how to create users in cidaas with admin-set passwords, including role requirements, API integration, user flow, and webhook events.

Benefits

When a user logs out of your application, you need to properly end their session with cidaas to ensure they're logged out from all applications using the same cidaas instance. This guide explains how to implement logout using OpenID Connect specifications.

This is a technical guide on how to implement the FIDO2 authentication by simply following the steps below.

Overview

Manage hosted page groups, themes, and translations in cidaas, including configuration, customization options, and API references.

cidaas allows the integration of third-party Identity Providers (IDP).

Integrating cidaas with your business is simple and can be done for the Admin and User Service portals.

Learn how to invite users in cidaas, including email templates, invitation states, API integration, and the complete invitation flow.

cidaas supports LDAP (Lightweight Directory Access Protocol) and Active Directory for authentication and user synchronization. You can configure cidaas to act as an Identity Provider (IdP) or as a Service Provider (SP).

This is a technical introduction on how you can implement the Magic Link by simply following the below steps.

cidaas supports OAuth2 and OpenID Connect (OIDC) for Single Sign-On (SSO) authentication. You can configure cidaas to act as an Identity Provider (IdP) or as a Service Provider (SP).

cidaas provides a set of hashing algorithms out of the box, and we continuously add the latest algorithms, and migrate the user passwords on the fly to a more secure hashing method.

Permission management may sound complex, but in simple terms, it is security for your resources.

Remote Fields is an advanced feature in cidaas that allows field values to be dynamically fetched from an external API during token generation or user profile retrieval.

Learn how scopes work in OAuth2/OIDC and how to configure and manage scopes and scope groups in cidaas.

Session management lets users stay signed in across applications and devices. This guide explains how sessions relate to OAuth 2.0 and OpenID Connect in cidaas, and points you to the right flows for validation, logout, and native-to-web handoff.

Native applications (for example mobile apps) often open company-owned web applications in the system browser: centralized profiles, webshops, help portals, and similar. Those sites typically expect an active IdP session in the browser—the same kind of session that powers Single Sign-On (SSO) for pure web apps—not only a token inside the native app.

Integrating Social Login in cidaas

This is a technical guide on how to implement the TOTP authentication by simply following the steps below.

This is a technical guide on how to implement the TOUCHID authentication by simply following the steps below.

Configure what information users provide during registration and how it's stored.

Configure registration and login field profiles in cidaas (User Setup), link them to applications via user_setup_id, and manage profiles through Trustdesk or the User Setup API.

Overview

webfinger

Benefits