logo logo
  • Home
  • Get Started
  • Guides
  • Tutorials
  • Integrations
  • APIs
  • References
  • Home
  • Get Started
    • Create your Asgardeo account
    • Try login with Asgardeo
    • Start integrating Asgardeo into apps
      • Try for a sample app
          • React
          • JavaScript
          • OIDC Java EE
          • SAML Java EE
      • Try for your own app
          • React
          • Javascript
          • OIDC Java EE
          • SAML Java EE
  • Guides
    • Applications
      • Register an SPA
      • Register web app with OIDC
      • Register web app with SAML
      • Register a standard-based app
      • Register a mobile app
      • Register a machine-to-machine app
      • Register a FAPI-compliant app
    • Authentication
        • Add login to apps
        • Add login to an SPA
        • Add login to a web app
        • Add login to a mobile app
      • Add passwordless login
        • Add login with Magic link
        • Add login with Passkey
        • Add login with HYPR
        • Add login with Email OTP
        • Add login with SMS OTP
      • Enable user attributes
        • Enable attributes for OIDC apps
        • Enable attributes for SAML apps
      • Manage consent for user attributes
      • Add federated login
        • Add social login
          • Add Facebook login
          • Add Github login
          • Add Google login
          • Add Microsoft login
          • Add Apple login
        • Add decentralized login
          • Sign-in with Ethereum
        • Add standard-based login
          • Add login with OIDC IdP
          • Add login with SAML IdP
      • Add identifier first login
      • Add multi-factor authentication
        • Add TOTP
        • Add Email OTP
        • Add SMS OTP
        • Add Passkey
        • Add iProov
        • Add Duo
        • Add user-preferred MFA
      • Add conditional authentication
        • Set up conditional authentication
          • Add access control
          • User Age-based access
          • Group-based access
          • Concurrent session-based access
          • Add adaptive MFA
          • MFA based on user group
          • MFA based on sign-in option
          • MFA based on user device
          • MFA based on IP address
          • MFA based on advanced conditions (using WSO2 Choreo)
        • Add passkey progressive enrollment
        • Add on-demand silent password migration
        • Write a custom authentication script
      • App-native authentication
        • Add app-native authentication
        • Secure app-native authentication flows
        • Handle advanced login scenarios
      • Login Flow AI
      • Configure OIDC flows
        • Discover OIDC endpoints
        • Implement login using the Authorization Code flow
        • Implement login using the Authorization Code flow and PKCE
        • Implement private key JWT client authentication
        • Implement login using Pushed Authorization Requests
        • JWT Secured Authorization Response Mode (JARM) for OAuth 2.0
        • Implement login using the OIDC Hybrid Flow
        • Configure token exchange
        • Validate ID tokens
        • Request user information
        • Validate tokens
        • Revoke tokens
        • Implement logout
      • Configure SAML flows
        • Discover SAML endpoints and settings
      • Configure Just-in-Time user provisioning
    • Authorization
        • Role-based access control
        • User Impersonation
    • User management
      • Manage administrators
      • Manage users
      • Manage groups
      • Manage roles
      • Manage active sessions
      • Migrate users to Asgardeo
        • Migrate user accounts
        • Migrate user passwords
      • Manage attributes and mappings
        • User attributes
        • OIDC attribute mappings
        • OIDC scopes
        • SCIM2 attribute mappings
      • Manage user stores
        • Connect a remote user store
        • Configure high availability
        • Manage remote user stores
    • Account management
      • Configure password recovery
      • Configure self-registration
        • Configure login-attempts security
        • Configure bot detection
        • Configure password validation
        • Configure username validation
        • Configure alternative login identifiers
    • User self-service
        • Configure the self-service portal
        • Update profile information
        • Change password
        • Manage linked social accounts
        • Export profile information
        • Manage consents
        • Manage login sessions
        • Self-register
        • Register passkeys
        • Password recovery
        • Enroll TOTP
        • Manage backup codes
        • Discover applications
      • Build self-service capabilities
    • Organizations
      • Set up organizations
      • Administration of organizations
      • Share applications
      • Onboard organization admins
        • Sales-led approach
        • Self-service approach
      • Invite users from parent organization
      • Try a B2B use case
      • API authorization for organizations
      • Email domain based organization discovery
      • Customize branding
        • Configure UI branding
        • Branding AI
        • Configure custom domains
        • Customize email templates
        • Localization in Asgardeo
        • Understanding actions
        • Setting up actions
          • Pre issue access token action
    • Your Asgardeo
      • Manage root organizations
      • Manage environments
      • Self-service
      • Recover your password
      • Delete your user account
      • Subscribe to Asgardeo
        • via Billing Portal
        • via Azure Marketplace
    • Asgardeo logs
      • Diagnostic logs
      • Audit logs
    • Monitoring
      • PII in Asgardeo logs
      • Asgardeo events
    • Organization insights
  • Tutorials
    • Authenticate users into Android applications
    • Authenticate users into Flutter applications
    • Connect Asgardeo as an OIDC attribute provider (with Microsoft Entra Verified ID)
    • Connect Asgardeo as an OIDC attribute provider (with MATTR)
    • Secure Spring Boot API with Asgardeo
  • Integrations
  • APIs
      • Action Management API
      • API resource management API
      • Application management API
      • App-native authentication API
      • Attribute management API
      • Authenticators API
      • Branding Preferences API
      • Consent management API
      • Email templates API
      • Event configuration API
      • Identity governance API
      • Identity provider API
      • Idle account identification API
      • OAuth Dynamic Client Registration API
      • Organization discovery API
      • Organization discovery configuration management API
      • Organization management API
      • Password expiring users identification API
      • Role management (SCIM 2.0) API
        • SCIM 2.0 API
          • SCIM 2.0 Users API
          • SCIM 2.0 Groups API
          • SCIM 2.0 Bulk API
          • SCIM 2.0 Resource types API
          • SCIM 2.0 Service provider configs API
        • User account associations API
        • Account Recovery API
        • Offline user onboard management API
        • Session management API
        • Session extension API
      • User store management API
      • Validation API
    • Orgnization APIs
      • Get access for organization APIs
      • Application management API
      • Authenticators API
      • Branding API
      • Claim management API
      • Identity provider management API
      • Identity recovery API
      • Idle account identification API
      • Invite parent organization's users API
      • Offline user onboard management API
      • Organization discovery API
      • Organization management API
      • Role management API
      • User management
        • SCIM 2.0 Users API
        • SCIM 2.0 Groups API
        • SCIM 2.0 Bulk API
      • SCIM 2.0 Me API
      • Backup codes API
      • Export user information API
      • Password recovery API
      • TOTP API
      • User account associations API
      • Export user information API
  • References
    • Asgardeo user roles
    • App configurations
      • OIDC configurations
      • SAML configurations
    • IdP configurations
      • OIDC configurations
      • SAML configurations
      • Conditional auth - API
    • Remote user store properties
    • Authorization policies for apps
    • Email templates
        • API contract to implement
        • Sample success reponses
    • Accessibility compliance
    • Data residency in Asgardeo
    • Production checklist
      • Readiness check
      • Security check
      • Best practices
    • Asgardeo rate limits
      • OAuth2 grant types
      • OAuth2 Pushed Authorization Requests
      • Token binding
        • Client-request
      • Financial-grade API
      • App-native authentication

How can we help?

Initializing search

    Welcome to Asgardeo documentation! Within these pages, you will learn how to build a seamless login experience for your applications using Asgardeo.

    Get Started
    Create your Asgardeo account
    Try login with Asgardeo
    Community and Support
    Community Help
    Enterprise Support
    Guides
    Applications
    Authentication
    API authorization
    Branding
    User management
    User self-service
    Organizations
    Developer Resources
    APIs
    Tutorials
    SDKs and Integrations
    Back to top

    Join our Discord

    Connect with our community on our official Discord server. Share ideas, get help, and be a part of the awesome conversations!

    Join Discord
    Send us an email
    Ask on Stackoverflow
    Follow us on X (Formerly Twitter)
    Subscribe to our YouTube Channel
    © 2024 WSO2 LLC.
    Content licensed under CC By 4.0. | Sample code licensed under Apache 2.0.