Create and integrate the first application

In the sidebar click the “Blueprints” menu and click “Create Blueprint” Button. It is a central control point of the Auth. It holds all the necessary settings and configs for the application workflow. (You can think of a rule set that controls login, registration and all the self-service flows)

It asks for the Basic details and general config for the Blueprint.

Clients

(Goto Settings>Open Id Connect Setting >Client Setting)

Client details: Let the Blueprint know what client is involved in this workflow. Each type of application needs its own client with a specific type. (Example, mobile applications need to get the refresh token with PKCE flow which is not permitted in the other client types but only in Mobile Client.)

Choose your client type

In the new client page fill the Client details by providing “Name”,” Logo URL”, choose which type of application you'd like to integrate:

• Server side: is an app that renders and updates pages by the web server alone. E.g., JSP, PHP, ASP.Net MVC.

• Client Side : is an app that runs in a web browser, which updates the page with the new data from the server without loading entire new pages. E.g., React DOM app, Vue app, and Angular app.

• Server to Server : This client is used in applications that run at server level (which have no direct interaction with the UI). Ie, Background job, Spark applications, Kafka consumer applications

• Mobile: is an app that runs in a mobile environment. E.g., iOS app, Android app.

• Desktop: Applications run as a windows app or mac or Linux native app. (Thick client)

• CIBA Server: A CIBA server handles decoupled user authentication, enabling secure token issuance for client applications via backchannel communication protocols.( this is newly added please review)

Login Settings:

Login settings we have multiple option for customization as follows :

• Authentication Method Options Settings : Configure your preferred login methods from a variety of authentication options including traditional, social, and passwordless methods.

• Login access Control by Group and Role Configuration :

• Restrict login access so that only users belonging to specific groups or roles can log in with this configuration. This approach allows you to implement departmental or sectional user restrictions effectively

• CAPTCHA Behavior Settings : Incorporate a CAPTCHA verification feature into your authentication settings to enhance security and mitigate automated login attempts.

• Login Session Management: Determine whether to permit multiple concurrent login sessions for a single user account.

• Federation login Setting : Enable or disable Federation configuration

• Consent Settings: Customize how you collect and manage user consent for data processing,

• Multi-Factor Authentication (MFA) Settings: Select the Multi-Factor Authentication (MFA) methods to be enabled during login

Registration Settings :

In this we have,

• Customize Your Preferred Onboarding Methods: You can Select as per your preference.

• Automatic Group and Role Assignment Configuration

• CAPTCHA Behavior Settings

• Customize Schema Settings

Here are some of it , now you can choose which fields you require and take action over it.

• User Onboarding Workflow

• Auto-Generate Password

• Account link Settings

Once the flow is fully configured in the saved flow list page click the eye icon to see the integration details. Once you navigate into the flow view page you will see the login and registration links. Copy that link and integrate it into your application.

Now time to integrate into your application:

Copy the registration URL and replace the registration link in your portal/site/application. From this moment whenever your portal user will get redirected to the Auth system and auth handles the registration for you. In the same way, the login is also handled.