cidaas Multifactor or Two-factor Authentication offers an additional layer of security for end-users. It provides the user with the means of verifying their identity through a second channel to eliminate any doubt about the legitimacy of an access request. MFA is available for password-based (email/username/mobile number and password) and passwordless authentication flows.
The Authentication to cidaas follows a sequential flow with three main steps. This documentation explains how to implement the complete authentication process.
The AMR value is used in authentication protocols. It refers to a value that indicates the methods or mechanisms used to authenticate a user during an authentication process.
This flow can be reimplemented and integrated into their own pages and platform directly using the cidaas APIs
Device management in cidaas — register and manage devices including device-bound verification methods.
Authenticate with FIDO2 in cidaas — let users sign in with FIDO2 compliant Keys, or via passkeys or platform authenticators.
Enrol FIDO2 in cidaas — register a security key or passkey / platform authenticator as a verification method, with the flow and APIs.
Passwordless authentication in cidaas — FIDO2 passkeys, TOTP, magic links, push, OTP, and biometric verification methods.
Enrol pattern verification in cidaas — register the pattern as a verification method, in the cidaas Authenticator or your own app.
cidaas Public API guides — authentication, OAuth 2.0, MFA, passwordless, user management, and identity verification.
Enrol push verification in cidaas — register a device for Smart Push, in the cidaas Authenticator or an app your users already have.
On-the-fly enrolment in cidaas — propose additional verification methods to users right after authentication for a smooth transition to modern authentication.
Enrol TOTP in cidaas — register a time-based one-time password generator in an authenticator app as a verification method.
Enrol Touch ID or fingerprint verification in cidaas — register the device biometric as a verification method, with the flow and APIs.
Passwordless authentication of cidaas (Touch ID, Face Recognition, etc.) will help you seamlessly log in to your desired application without worrying about the authenticity of the actor, which will in turn save you time with our quick, secure, and dependable service.