Skip to main content
The Authentication Identifiers settings define rules for the authentication identifiers (authN IDs) that the Digital Identity Management service accepts and processes. By customizing the types of emails and mobile numbers that your users are allowed to use, you can implement robust security protocols to minimize security breaches from unsafe or malicious networks and hackers. Depending on your corporate policies and requirements, you can modify formats, lengths, reuse, and obfuscation patterns of the specific authN ID. Configure your authentication identifiers from Admin console > Authentication > Authentication Identifiers. See the Authentication Identifier Fields for more details about the relevant settings. Note: Many of these settings are defined with regular expression (or regex) patterns. It’s recommended to have a basic understanding of regex to help configure the format settings of each type of authentication identifier.

​
Authentication Identifiers (Email) Settings

The configurable email settings include the following:
  • Number of emails allows users to sign in with different aliases that are associated with their primary email address. By using aliases, end users can hide their email address and prevent any spam from being directed to their primary email address.
  • Valid email pattern defines an email format that end users are required to use when the entering an email address. This pattern setting ensures end users enter a valid email address when onboarding/ authenticating.
  • Pattern to parse email address for obfuscation rule is used to parse the user’s email address in conjunction with the email obfuscation rule.
  • Email obfuscation rule masks or hides the user’s email to prevent the theft of a user’s credentials.
  • Allow authentication from an unverified email allows an user to continue their journey without a verified email so they may complete onboarding/authentication quickly without interruption.
  • Email domain block-list prevents users from submitting an email address from domains that are malicious or a security threat to your system.
  • Enable allowed email domain list contains a list of permissible email domains that users can use an email address from. The Enable allowed email domain list supersedes the Block-list and users can only submit emails from domains on this list. This setting prevents emails from being used from domains that pose a security risk to your system.

​
Mobile Phone Number Settings

The configurable mobile phone number settings include the following:
  • Number of mobile phone numbers allows users to sign in with different aliases that are associated with their primary phone number. By using aliases, end users can add secondary numbers from their household group, that may include minors, to the primary mobile phone number.
  • Valid mobile number pattern defines a phone number format that users are required to enter when submitting a phone number. This pattern setting ensures users enter a valid mobile phone number when onboarding/authenticating.
  • Mobile number obfuscation grouping pattern masks or hides the user’s phone number to prevent the theft of a user’s credentials.
  • Mobile number obfuscation rule masks or hides the end user’s phone number to prevent the theft of a user’s credentials.
  • Immediate verification notification for an unverified mobile allows a user to continue their journey without a verified mobile phone number so they may complete onboarding/authentication quickly without interruption.
Refer to the following topics for more information: Parent topic:Authentication