45 docs tagged with "hosted-pages"

Identify and merge duplicate user accounts with the cidaas account deduplication hosted page.

What is Account Linking?

cidaas Multifactor or Two-factor Authentication offers an additional layer of security for end-users. It provides the user with the means of verifying their identity through a second channel to eliminate any doubt about the legitimacy of an access request. MFA is available for password-based (email/username/mobile number and password) and passwordless authentication flows.

The Authorization Code Flow is one of the OAuth2 flows that was designed to securely authenticate a user and issue an access token. The basic concept behind the authorization code flow is that a code is issued after identification and this must be exchanged for an access token.

Authenticate with a backup code in cidaas — a set of ten single-use 8-digit codes for signing in when no other method is available.

Claim consent in cidaas — let users authorise the release of identity claims such as name, email or roles to an application before a token is issued.

Integrate cidaas login in your application

Communication change precheck in cidaas — let users correct a wrong email address or mobile number during verification, before a token is issued.

Communication medium verification in cidaas — require a verified email address or mobile number as a token condition before issuing a token.

The cidaas consent hosted page — inform users about data processing and let them consent to your terms of use, newsletter consents and more.

Consents and consent groups in cidaas — straightforward organisation of consents in groups and versioning.

The Device Code Flow (officially: OAuth 2.0 Device Authorization Grant) is an OAuth 2.0 grant type designed for devices that don't have a browser or have limited input capabilities, such as smart TVs, gaming consoles, CLI tools, or IoT devices. It enables users to authorize these devices to access their resources by authenticating on a separate device (e.g., smartphone or computer) with a full browser.

The cidaas device success hosted page — the confirmation screen shown after a successful login on a device code flow.

Authenticate with an email or SMS one-time password in cidaas — the flow, the APIs, and how the code is delivered and verified.

Group selection in cidaas — let users pick the group or context they log in with, enforce the selection, or auto-select one using the group_hint parameter.

The cidaas group selection hosted page — let authenticated users choose which group or context they access an application during login.

Manage hosted page groups, themes, and translations in cidaas, including configuration, customization options, and API references.

Identity providers in cidaas — connect SAML, OAuth 2.0, OpenID Connect, and LDAP/AD for enterprise and social SSO.

The cidaas login hosted page — learn how to set it up, add login providers, and connect the login success page that follows a successful sign-in.

The cidaas login success page — confirm a successful sign-in and give users a clear next step, configurable per application.

Authenticate with a magic link in cidaas — a passwordless sign-in link sent to the user, including the APIs for the login flow.

The cidaas MFA and suggest verification hosted page explained — guide users to configure additional verification methods after they sign in.

Multi-factor authentication (MFA) in cidaas — enforce MFA at login or SSO with Trustdesk prechecks and verification methods.

"Powering Secure Logins & Strengthening Identity Protection."

Enforce a password change on next login in cidaas — configuration and implementation guide.

The cidaas password hosted page explained — Reset Password, Password Change, Forgot Password and Successful Password Change.

A password policy defines the password strength rules that are used to determine whether a new password is valid. A password strength rule defines how a password must be set and the guidelines it must conform to. For example, password strength rules might specify that the minimum number of characters of a password must be 5.

To set a password there are multiple use cases for how to use the different APIs and when to use which API.

cidaas lets you get data from your customers each time they interact with your product instead of requesting their profile information all at once during registration.

cidaas Public API guides — authentication, OAuth 2.0, MFA, passwordless, user management, and identity verification.

Implementing the Pushed Authorization Request (PAR) Flow

Learn how to implement self-service user registration in cidaas, including webfinger user existence checks, invitation-based registration, and the complete registration flow.

The cidaas registration hosted page — configuration and customization options for the registration page and flow.

SAML 2.0 Single Sign-On in cidaas as Service Provider — configure external IdPs, assertions, attributes, and logout.

Configure cidaas as a SAML 2.0 Identity Provider — register an external SP with the SAML_SP app type in Trustdesk.

Scope consent in cidaas — pause the authentication flow to obtain explicit user authorization for scopes such as email or profile.

Native applications (for example mobile apps) often open company-owned web applications in the system browser: centralized profiles, webshops, help portals, and similar. Those sites typically expect an active IdP session in the browser—the same kind of session that powers Single Sign-On (SSO) for pure web apps—not only a token inside the native app.

Integrating Social Login in cidaas

Theme cidaas hosted pages with CSS — typography, headings, boundary box and background image, so login and registration match your brand.

Translate cidaas hosted pages — manage localized strings through Translation Management, with multiple translation sets and layout assignment.

Configure what information users provide during registration and how it's stored.

When a user forgets their password and wants to request a password reset, this is called user-initiated password reset.

Authentication is one of the major parts of security; it is the process by which we recognize the authenticity of the entity. Since cidaas offers a variety of authentication options, such as pattern, face, and many more, we take the utmost care about the originality of the identity.

The cidaas verification hosted page — learn how to setup and customize the screen that initiates a verification method during login.

Domain- and user-based redirection in cidaas — use webfinger to send users straight to their own identity provider, bring-your-own-identity style.