Initializing search

Asgardeo

Home
Home
Get started
Get started
- Create your Asgardeo account
- Try login with sample
- Start integrating Asgardeo into apps
  Start integrating Asgardeo into apps
  - Try for a sample app
    
    Try for a sample app
    
    Single Page apps
    Single Page apps
    
    React
    
    Javascript
    
    Web apps
    Web apps
    
    OIDC Java EE
    
    SAML Java EE
  - Try for your own app
    
    Try for your own app
    
    Single Page apps
    Single Page apps
    
    React
    
    Javascript
    
    Web apps
    Web apps
    
    OIDC Java EE
    
    SAML Java EE
- Connect/Build your app
  Connect/Build your app

Guides
Guides
- Applications
  Applications
- Authentication
  Authentication
  - Add login to apps
    Add login to apps
    
    Add login to an SPA
    
    Add login to a web app
    
    Add login to a mobile app
  - Add login to SaaS apps
    
    Add login to SaaS apps
    
    Google Workspace
    
    Salesforce
    
    Microsoft 365
    
    Zoom
    
    Slack
  - Add passwordless login
    
    Add passwordless login
    
    Add login with Magic link
    
    Add login with Passkey
    
    Add login with HYPR
    
    Add login with Email OTP
    
    Add login with SMS OTP
    
    Add login with Push Notification
  - Enable user attributes
    
    Enable user attributes
    
    Enable attributes for OIDC apps
    
    Enable attributes for SAML apps
  - Manage consent for user attributes
  - Add federated login
    
    Add federated login
    
    Add social login
    
    Add social login
    
    Add Facebook login
    
    Add Github login
    
    Add Google login
    
    Add Microsoft login
    
    Add Apple login
    
    Add LinkedIn login
    
    Add decentralized login
    
    Add decentralized login
    
    Sign-in with Ethereum
    
    Add standard-based login
    
    Add standard-based login
    
    Add login with OIDC IdP
    
    Add login with SAML IdP
  - Add identifier first login
  - Add multi-factor authentication
    
    Add multi-factor authentication
    
    Add TOTP
    
    Add Email OTP
    
    Add SMS OTP
    
    Add Push Notification
    
    Add Passkey
    
    Add iProov
    
    Add Duo
    
    Add user-preferred MFA
  - Add conditional authentication
    
    Add conditional authentication
    
    Set up conditional authentication
    
    Add access control
    Add access control
    
    Add access control
    
    User Age-based access
    
    Group-based access
    
    Concurrent session-based access
    
    Add adaptive MFA
    Add adaptive MFA
    
    Add adaptive MFA
    
    MFA based on user group
    
    MFA based on sign-in option
    
    MFA based on user device
    
    MFA based on IP address
    
    MFA based on advanced conditions (using WSO2 Choreo)
    
    Add passkey progressive enrollment
    
    Add push notification device progressive enrollment
    
    Add on-demand silent password migration
    
    Write a custom authentication script
  - App-native authentication
    
    App-native authentication
    
    Add app-native authentication
    
    Secure app-native authentication flows
    
    Handle advanced login scenarios
  - Login Flow AI
  - Configure OIDC flows
    
    Configure OIDC flows
    
    Discover OIDC endpoints
    
    Implement login using the Authorization Code flow
    
    Implement login using the Authorization Code flow and PKCE
    
    Implement private key JWT client authentication
    
    Implement login using Pushed Authorization Requests
    
    JWT Secured Authorization Response Mode (JARM) for OAuth 2.0
    
    Implement login using the OIDC Hybrid Flow
    
    Configure token exchange
    
    Validate ID tokens
    
    Request user information
    
    Validate tokens
    
    Revoke tokens
    
    Implement logout
  - Configure SAML flows
    
    Configure SAML flows
    
    Discover SAML endpoints and settings
  - Configure Just-in-Time user provisioning
- Authorization
  Authorization
  - API authorization
    API authorization
    
    Role-based access control
  - User impersonation
- Identity Verification
  Identity Verification
  - Configure an Identity Verification Provider
  - Identity Verification with Onfido
- User management
  User management
  - Manage administrators
  - Manage users
  - Manage groups
  - Manage roles
  - Manage active sessions
  - Migrate users to Asgardeo
    
    Migrate users to Asgardeo
    
    Migrate user accounts
    
    Migrate user passwords
  - Manage attributes and mappings
    
    Manage attributes and mappings
    
    User attributes
    
    OIDC attribute mappings
    
    OIDC scopes
    
    SCIM2 attribute mappings
    
    Configure unique attributes
    
    Verification and notification settings for attribute updates
    Verification and notification settings for attribute updates
    
    Configure settings
    
    Try it out
    Try it out
    
    Email address update verification
    
    Mobile number update verification
  - Manage user stores
    
    Manage user stores
    
    Connect a remote user store
    
    Configure high availability
    
    Manage remote user stores
    
    Deployment best practices
    
    Advanced configuration for the agent
- Account configurations
  Account configurations
  - Login security
    Login security
    
    Login attempts
    
    Password validation
    
    Bot detection
    
    Fraud detection
  - Account recovery
    Account recovery
    
    Password recovery
  - User onboarding
    User onboarding
    
    Self-registration
  - Manage login identifiers
    Manage login identifiers
    
    Configure username validation
    
    Configure alternative login identifiers
  - Account disabling
- User self-service
  User self-service
  - Self-service portal
    Self-service portal
    
    Configure the self-service portal
    
    Update profile information
    
    Change password
    
    Manage linked social accounts
    
    Export profile information
    
    Manage consents
    
    Manage login sessions
    
    Self-register
    
    Register passkeys
    
    Register Push Notification Device
    
    Password recovery
    
    Enroll TOTP
    
    Manage backup codes
    
    Discover applications
  - Build self-service capabilities
- Organizations
  Organizations
- Customizations
  Customizations
  - Customize branding
    
    Customize branding
    
    Configure UI branding
    
    Branding AI
    
    Configure custom domains
    
    Customize email templates
    
    Customize SMS templates
    
    Localization in Asgardeo
  - Extend with service extensions
    Extend with service extensions
    
    Understanding service extensions
    
    In-flow extensions
    In-flow extensions
    
    Custom authentication
    
    Pre-flow extensions (Actions)
    Pre-flow extensions (Actions)
    
    Setting up an action
    
    Pre issue access token action
    
    Pre update password action
- Your Asgardeo
  Your Asgardeo
  - Manage root organizations
  - Manage environments
  - Self-service
  - Recover your password
  - Delete your user account
  - Subscribe to Asgardeo
    
    Subscribe to Asgardeo
    
    via Billing Portal
    
    via Azure Marketplace
- Asgardeo logs
  Asgardeo logs
  - Diagnostic logs
  - Audit logs
- Monitoring
  Monitoring
  - PII in Asgardeo logs
  - Asgardeo events
- Organization insights
Tutorials
Tutorials
SDKs
SDKs
APIs
APIs
- Management APIs
  Management APIs
- Organization APIs
  Organization APIs
- End User APIs
  End User APIs
References
References
- Operational policies
- Asgardeo outbound IP addresses
- Asgardeo user roles
- App configurations
  App configurations
  - OIDC configurations
  - SAML configurations
- IdP configurations
  IdP configurations
  - OIDC configurations
  - SAML configurations
- Conditional authentication
  Conditional authentication
  - Conditional auth - API
- Remote agent properties
- Authorization policies for apps
- Email templates
- SMS templates
- Service extensions
  Service extensions
  - In-flow extensions
    In-flow extensions
    
    Custom authentication
    Custom authentication
    
    API contract to implement
  - Pre-flow extensions (Actions)
    Pre-flow extensions (Actions)
    
    Pre issue access token action
    Pre issue access token action
    
    API contract to implement
    
    Sample success reponses
    
    Pre update password action
    Pre update password action
    
    API contract to implement
- Accessibility compliance
- Data residency in Asgardeo
- Production checklist
  Production checklist
- Asgardeo rate limits
- Tutorials
  Tutorials
  - Build your own push authenticator app
- IAM concepts
  IAM concepts

Technology Guides
Technology Guides
Best Practice Guides
Best Practice Guides
- Frontend Security
  Frontend Security
  Frontend Security

IdP configurations

Configure the OpenID enterprise IdP or SAML IdP related settings in Asgardeo

Join our Discord

Connect with our community on our official Discord server. Share ideas, get help, and be a part of the awesome conversations!

Join Discord

Need Assistance?Send us an email

Got a tough question?Ask on Stackoverflow

Like to stay updated?Follow us on X (Formerly Twitter)

Prefer video tutorials?Subscribe to our YouTube Channel

© 2024-2025 WSO2 LLC.

Content licensed under CC By 4.0. | Sample code licensed under Apache 2.0.