Skip to main content
Digital Identity Management provides user authentication with an email address or mobile number and FIDO challenge. A user navigates to an organizations’s login page and signs in with their authN ID and enters their biometrics (FIDO factor). After a successful FIDO2 verfication, the user is logged in and can access the services they signed up for.

​
User Authentication with FIDO2 Flow

Preconditions
  • The User ID exists in Digital Identity Management.
  • The user is configured to use FIDO2 to verify their authN ID.
  • The user has registered a FIDO2 option.
Following is a typical user authentication example for this flow:
  • A user visits the organization’s login page.
  • The user logs in with their email/mobile.
  • Digital Identity Management redirects user to FIDO2 assertion page to select their option.
  • The user enters their FIDO2 credentials. Note: If the user doesn’t have any factors registered for FIDO2, Digital Identity Management guides the user through the onboarding steps to complete their registration and first factor setup.
  • The user is logged in after Digital Identity Management’s successful identity verification.

​
Authenticate User with FIDO2

Email or mobile user authentication with FIDO2 flow

​
Application Settings

Some of the relevant app settings for this use case are:
  • showLoginPrompt
  • shortTokenExpirationPeriodinMinutes
  • longTokenExpirationPeriodinMinutes
See additional details about more app settings in the MarketONE Admin console and parameters to help you configure your Digital Identity Management instance. Parent topic:Onboard and Authenticate Process