App Management
Manage OAuth2/OIDC applications and clients in cidaas, including app settings, advanced configuration, and API references.
Manage OAuth2/OIDC applications and clients in cidaas, including app settings, advanced configuration, and API references.
OAuth2/OIDC application types (client_type values), recommended flows, and configuration availability by type in cidaas.
General
After a user signs in with OpenID Connect, your application may need to periodically check if the user is still authenticated. While you can use prompt=none with the authorization endpoint for this purpose, the Check Session iFrame provides a more efficient, real-time solution.
cidaas can act as an OpenID Connect (OIDC) Identity Provider (IdP) for external applications.
Precheck
Manage and customize communication templates to deliver consistent, branded messages to users across multiple channels.
Overview
Benefits
When a user logs out of your application, you need to properly end their session with cidaas to ensure they're logged out from all applications using the same cidaas instance. This guide explains how to implement logout using OpenID Connect specifications.
cidaas allows the integration of third-party Identity Providers (IDP).
Integrating cidaas with your business is simple and can be done for the Admin and User Service portals.
cidaas supports LDAP (Lightweight Directory Access Protocol) and Active Directory for authentication and user synchronization. You can configure cidaas to act as an Identity Provider (IdP) or as a Service Provider (SP).
Hosted page
cidaas supports OAuth2 and OpenID Connect (OIDC) for Single Sign-On (SSO) authentication. You can configure cidaas to act as an Identity Provider (IdP) or as a Service Provider (SP).
cidaas lets you get data from your customers each time they interact with your product instead of requesting their profile information all at once during registration.
Implementing the Pushed Authorization Request (PAR) Flow
Precheck
Learn how scopes work in OAuth2/OIDC and how to configure and manage scopes and scope groups in cidaas.
Session management lets users stay signed in across applications and devices. This guide explains how sessions relate to OAuth 2.0 and OpenID Connect in cidaas, and points you to the right flows for validation, logout, and native-to-web handoff.
Overview
webfinger
After an authentication, cidaas approves the correctness of provided information with a token. OAuth2 and OpenID Connect work with different tokens. Either way, cidaas will provide an access token based on OAuth2 standard. The token is built up as a JWT (JSON Web Token), which is essentially a base64-encoded JSON format. Optionally, in a user authentication, cidaas can also provide an ID token, which is based on OIDC standard and also built up as a JWT.
Today's competitive landscape calls for better security implementation for user accounts. With customers becoming more demanding and applications becoming critical, a seasoned and reliable CIMS helps manage both optimally.