18 documents tagués avec "authentication"

15-minute quickstart: implement Authorization Code Flow with PKCE against LuxID, with cURL examples, sequence diagram, and ID token validation.

Overview of LuxID authentication protocols - OIDC, OAuth 2.0, and SAML 2.0 - with guidance on choosing the right approach for your integration.

LuxID's auth_level authentication-strength scale, its informal eIDAS LoA alignment, and how to request a minimum level with acr_values.

A consolidated reference of every parameter LuxID accepts on the authorization endpoint, with its required/optional status, accepted values, and LuxID specifics.

LuxID checks passwords against breach intelligence at registration and reset, blocking compromised credentials before they reach your users' accounts.

Authentication, authorisation, federation, sessions vs tokens, open standards, and JWT structure explained for LuxID integrators.

Core identity concepts and the LuxID domain model you need before writing any integration code.

What LuxID is, its governance structure, ecosystem role in Luxembourg, and the use cases it is designed for.

LuxID MFA methods (OTP, TOTP, passkeys, LuxTrust), token claims amr and acr, minimum assurance configuration, step-up flows, and recovery paths.

Full OIDC protocol reference for LuxID: discovery, all request parameters, token validation, UserInfo, refresh, silent re-auth, logout, and response modes.

All WebAuthn passkey ceremonies run on LuxID Universal Login - Partners never call WebAuthn APIs. What you observe in tokens and what it means for native apps.

WebAuthn/FIDO2 passkeys on LuxID: device binding, platform and roaming authenticators, token claims, fallback behaviour, and phishing resistance.

Architectural decisions to make before writing production code: protocol, required auth_level, MFA, Sphere, session strategy, logout, and branding.

The LuxID domain model: User, Organisation, Partner, Application, Sphere, Subscription, Group, Claim, Consent, and Federation explained with worked examples.

Integrating LuxID as a SAML 2.0 Identity Provider: metadata, AuthnRequest, Assertion validation, attribute mapping, and logout behaviour.

LuxID evaluates each sign-in against contextual security signals and surfaces a qualitative risk indicator as an ID Token claim for Partner use.

ID Token, Access Token, and Refresh Token explained in depth: lifetimes, signing, validation rules, and the full LuxID claim catalogue including extensions.

LuxID's hosted login page: redirect-based authentication, branding boundaries, session reuse, and why Partners should never build their own login form.