cidaas Multifactor or Two-factor Authentication offers an additional layer of security for end-users. It provides the user with the means of verifying their identity through a second channel to eliminate any doubt about the legitimacy of an access request. MFA is available for password-based (email/username/mobile number and password) and passwordless authentication flows.
Manage OAuth2/OIDC applications and clients in cidaas, including app settings, advanced configuration, and API references.
The Authentication to cidaas follows a sequential flow with three main steps. This documentation explains how to implement the complete authentication process.
Authenticate with a backup code in cidaas — a set of ten single-use 8-digit codes for signing in when no other method is available.
Brute force and credential stuffing protection in cidaas — lockout, MFA challenges, and account hardening controls.
cidaas can act as an OpenID Connect (OIDC) Identity Provider (IdP) for external applications.
Integrate cidaas login in your application
Communication providers in cidaas — send notifications for user creation, password reset or MFA using built-in or custom providers.
The cidaas device success hosted page — the confirmation screen shown after a successful login on a device code flow.
Authenticate with an email or SMS one-time password in cidaas — the flow, the APIs, and how the code is delivered and verified.
Enrol FIDO2 in cidaas — register a security key or passkey / platform authenticator as a verification method, with the flow and APIs.
Group selection in cidaas — let users pick the group or context they log in with, enforce the selection, or auto-select one using the group_hint parameter.
Manage hosted page groups, themes, and translations in cidaas, including configuration, customization options, and API references.
Integrating cidaas with your business is simple and can be done for the Admin and User Service portals.
The cidaas login hosted page — learn how to set it up, add login providers, and connect the login success page that follows a successful sign-in.
Authenticate with a magic link in cidaas — a passwordless sign-in link sent to the user, including the APIs for the login flow.
The cidaas MFA and suggest verification hosted page explained — guide users to configure additional verification methods after they sign in.
Multi-factor authentication (MFA) in cidaas — enforce MFA at login or SSO with Trustdesk prechecks and verification methods.
"Powering Secure Logins & Strengthening Identity Protection."
cidaas supports OAuth2 and OpenID Connect (OIDC) for Single Sign-On (SSO) authentication. You can configure cidaas to act as an Identity Provider (IdP) or as a Service Provider (SP).
Passwordless authentication in cidaas — FIDO2 passkeys, TOTP, magic links, push, OTP, and biometric verification methods.
Authenticate with a pattern in cidaas — the user traces a pattern that is verified as a passwordless factor, with the flow and APIs.
Enrol pattern verification in cidaas — register the pattern as a verification method, in the cidaas Authenticator or your own app.
This document describes a 3-step authentication verification flow using OpenAPI specifications.
cidaas lets you get data from your customers each time they interact with your product instead of requesting their profile information all at once during registration.
cidaas Public API guides — authentication, OAuth 2.0, MFA, passwordless, user management, and identity verification.
SAML 2.0 Single Sign-On in cidaas as Service Provider — configure external IdPs, assertions, attributes, and logout.
Authenticate with Smart Push in cidaas — the user picks the matching number from four shown in the mobile app to confirm the login.
Enrol push verification in cidaas — register a device for Smart Push, in the cidaas Authenticator or an app your users already have.
Integrating Social Login in cidaas
On-the-fly enrolment in cidaas — propose additional verification methods to users right after authentication for a smooth transition to modern authentication.
Besides performing a successful authentication, cidaas provides features to apply further conditions that must be fulfilled before issuing a token to the caller.
Enrol TOTP in cidaas — register a time-based one-time password generator in an authenticator app as a verification method.
Enrol Touch ID or fingerprint verification in cidaas — register the device biometric as a verification method, with the flow and APIs.
Translate cidaas hosted pages — manage localized strings through Translation Management, with multiple translation sets and layout assignment.
The user search is one important feature when managing users. This view gives an overview of current user metrics and provides multiple options to search for user information.
Authentication is one of the major parts of security; it is the process by which we recognize the authenticity of the entity. Since cidaas offers a variety of authentication options, such as pattern, face, and many more, we take the utmost care about the originality of the identity.
Configure Verification Options profiles in cidaas (MFA / step-up enforcement, allowed methods, password policy, suggest verification), link them to applications via verification_options_id, and manage profiles through Trustdesk or the Verification Options API.