Integrate Authentication API

Adding an Authentication API application on Identity as a Service enables integration between the application using the Identity as a Service authentication APIs and Identity as a Service. Once configured, users are prompted to enter Identity as a Service challenge responses into their application user interface. The application communicates with Identity as a Service using the API calls to authenticate each response and grant access to the application.

See the Identity as a Service Authentication API Guide for more information.

Integrate Authentication API with Identity as a Service

1.      Go to > Security > Applications. The Applications page appears.

2.      Click Add. The Select an Application Template page appears.

3.      Scroll to Identity as a Service Integrations and click Authentication API. The Add Authentication API page appears.

4.      In the Application Name field, type a name for your application.

5.      In the Application Description field, type a description for your application.

6.      Optional. Add a custom application logo as follows:

a.      Click next to Application Logo. The Upload Logo dialog box appears.

b.      Click to select an image file to upload.

c.      Browse to select your file and click Open. The Upload Logo dialog box displays your selected image.

d.      If required, resize your image.

e.      Click OK.

7.      Select Enable passkey login to allow users to complete passkey authentication in the Auth API.

8.      Click Next. The General Settings page appears.

9.      Select the Source of the Client IP Address for Risk Conditions. The options are:

●       Not provided—The IP address is not provided and is not extracted from the connection.

●       Provided in the API—The IP address is provided in the request body of the API.

●       From the incoming HTTP connection—The IP address is extracted from the connection.

10.  Select Do not use IP Address for Resource Rule Risk Factors if you only want to use the IP address for Audits but not for the resource rule risk conditions.

11.  Select Enabled for User Verification Check to allow user verification through the Auth API for Identity Provider authentication.

12.  Select Application can store values for the user to allow the Auth API to call self-admin (internal) APIs that are used to Manage Client Values.

13.  Click Submit. The Application ID is generated.

14.  Copy and paste the Application ID into the IDaaS API calls being used by your application.

15.  Click Done.