KOBIL Verify User Identity
KOBIL Verify User Identity
This execution has the following main tasks to verify user identity on IDP Provider.
Type
| Protocol | OpenID Connect 1.0 |
|---|---|
| HTTP method | GET |
| Type | Browser Flow |
| Endpoint | Authorization Endpoint |
| Flow Supported | Authorization code flow Implicit flow Hybrid flow |
| Response | ID Token, Access Token, Refresh Token |
| Response Mode | query, form_post, fragment |
How to configure
To access the config of the execution press the Actions button and select Config. The authenticator configuration screen will appear. Then enter your config data.
Configuration
Parameters involved in KOBIL Verify User Identity execution
| Parameter | Description |
|---|---|
| ID | Unique system UUID, which will be assigned automatically. |
| Alias | Display name of configuration, which occurs in authentication flow. (Example: Login with Email) |
| Authentication Flow Type | Type of flow for which the authenticator is used. (Example: Login) |
| User Identity attribute | User property to identify the user for login validation. Default : Email. |
| Display User Identity attribute | User property to be displayed for login validation. |
| User Attribute | User attribute value selected for login validation. This should be set only if the User Identity Attribute value is "user attribute" |
| Enable Password Check | If enable this will turn on password verification against IDP Provider credentials. |
| Reset Bruteforce failure count | If enabled the Bruteforce failure count will be set to 0 on successful login. |
| Disable the check for registration status | If enabled, it will disable the check for user registration status. |
| Disable show previous input | If enabled, it will erase the previously entered invalid credentials. |
| Invalid credentials message | Message to be displayed when the user credentials invalid. For default : incorrect password. |
| User disabled message | Message to be displayed when the user is disabled. Default Message: User is currently disabled, please contact admin. |
| User temporarily locked message | Message to be displayed when the user is temporarily locked. Example: User is temporarily locked for %time% minutes. |
| OTP temporarily locked message | Message to be displayed when the OTP resend option is temporarily locked. |
| ACR value | This ACR value will be set in the end, if verification succeeds. |
| AMR value | This AMR value will be set in the end, if verification succeeds. |
| Show Success Popup screen | Enable to show success popup in the flow. |
| Success Popup Title | Text wil be displayed in the success popup title. |
| Success Popup Description | Text wil be displayed in the success popup body. |
| Is Captcha Required | To support the reCAPTCHA. |
User Flow
Execution Flow
This execution contains the following main steps:
- KOBIL Verify User Identity can be used as a standalone execution, since it is used to configure a user. This execution will be used in the login flow.