KOBIL Verify User Identity

Overview

The primary function of this authenticator is to verify a user's identity during the login process. It is essential for authenticating users before granting access to applications.

Type

Protocol	OpenID Connect 1.0
HTTP method	GET
Type	Browser Flow
Endpoint	Authorization Endpoint
Flow Supported	Authorization code flow Implicit flow Hybrid flow
Response	ID Token, Access Token, Refresh Token
Response Mode	query, form_post, fragment

How to configure

To configure the authenticator, follow these steps:

1. Navigate to Authentication tab
2. Click Add step
3. Select the authenticator to proceed with the next step
4. Keep the default Settings unchanged.

By following these steps, you will be able to successfully configure the authenticator.

Configuration

Parameters involved in KOBIL Verify User Identity execution

Parameter	Description
Alias	Name for the overall configured configurations which occurs in particular authenticator. (Example: KOBIL Verify User Identity )
Authenticator Reference	Authenticator Reference    Specifies the authentication method used, such as password (pwd), one-time password (OTP). This reference is used to track authentication steps in the authentication flow.
Authenticator Reference Max Age	Authenticator Reference Max Age specifies the validity period (in seconds) for a completed authentication. Once this time expires, the user must re-authenticate using the specified method.
Authentication Flow Type	Choose the actions that the authenticator should perform. The Actions in the config include: First-Login : If First-Login is selected, the system initiates an AST Activation call to activate the device. Subsequent-Login: If Subsequent-Login is selected, the system triggers an AST Login call to perform device login. Reset-Credentials : If the Reset-Credentials option is enabled, it enables the Back button in the authentication flow. For example : This lets users go back to the login page if they suddenly remember their password and don’t want to reset it.
User Identity attribute	Defines the attribute used to locate and identify the user in the system, such as email, username or User attribute.
Display User Identity attribute	Specify the attribute to display on the front end after identifying the user such as first name, last name, username, or email.
User Attribute	Configure the user attribute through which login validation should happen. This should be set only if the User Identity Attribute value is set to user attribute.
Enable Password Check	Password verification will be executed during login flow when Enable Password Check is enabled.
Disable the check for registration status	If Disable the check for registration status is enabled, it won't check the user registration status. Note: Registration status will be stored in user attributes.
Disable show previous input	If enabled, it will erase the previously entered inputs.
Invalid credentials message	Invalid credentials message displays the message when user credentials are invalid. Example: The information you entered could not be verified. Please check all the information and try again.
OTP temporarily locked message	Display the configured message to notify users when the user is temporarily locked due to too many OTP requests. Example: You have requested too many verification codes and have been locked out. Please try again in %timer%.
ACR value	Configured ACR value which will be set in the token if verification succeeds.
AMR value	Configured AMR value, which will be set in the token if verification succeeds.
Show Success Popup screen	Enable to show an explicit success popup after user identity verification.
Success Popup Title	Configure the text that will be displayed in the success popup title.
Success Popup Description	Configure the text that will be displayed in the success popup body.
Is Captcha Required	Enable Is Captcha Required to add Captcha Verification to the flow to protect against automated bot attacks and ensure user authenticity. Note: Ensure all required preconfigurations are configured for Captcha to function properly. For details on captcha pre-configurations, refer to KOBIL Captcha Documentation.

Parameter specific to Bruteforce feature

Parameter	Description
User disabled message	Message to be displayed when the user is disabled. Default Message: User is currently disabled, please contact admin.
User temporarily locked message	Message to be displayed when the user is temporarily locked. Example: User is temporarily locked for %time% minutes.
Reset Bruteforce failure count	If the Reset Bruteforce Failure Count option is enabled, the failure count will be reset to 0 upon successful login.

User Flow

This execution contains the following main steps:

1. KOBIL Verify User Identity works as a standalone step to configure a user and is used in the login flow.