Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Name

Datatype

Mandatory

Example

Description

Require Consent

Checkbox

false

Defines whether or not the user needs to give consent when accessing this client.

Allow remember me

Checkbox

false

Whether or not the user is presented with the option to select “remember me” which will cause the persistence of a cookie in the clients browser for any subsequent logins.

Enable local authentication

Checkbox

true

Specifies if this client can use CoreOne Suite users, or external providers only.

URI

string

https://www.coreone.ch

The url of the client / application.

Email verification redirect uri

REGEX Pattern

regex:^https:\/\/webshop\.ch$

If any external systems are using urls to verify the mail address of authentication users, the provided redirect uri in the link will be tested against this configured pattern.

Note

Wildcards can be configured, but only do this when absolutely necessary.

Post logout redirect URI's

REGEX Pattern

regex:^https:\/\/webshop\.ch$

The client provides an URL where the user will be redirected to after being logged out. It’s good practice to test those URLs against a pattern to ensure that the user can only be redirected to previously configured URLs. This will significantly increase the security of the system.

Note

Wildcards can be configured, but only do this when absolutely necessary.

Identity provider restrictions

REGEX Pattern

regex:^https:\/\/swissid\.ch$

Defines a list of allowed external identity providers that are allowed. If you do not specify any, all configured IdPs are allowed.

Version 7 and above

Required Multi-Factor Authentication

Checkbox

true

Whether or not a MFA authentication is required for the client

Deprecated version 6 and above

Allow self-registration

Checkbox

true

Whether or not a self registration is allowed for this client or not.

Activation disabled

Checkbox

true

If the activation process is enabled in the system, you can disable it for a specific client.

Show in self-service

Checkbox

true

Whether or not the client should be listed in the user self-service portal.

...