Create an authentication

Before you start, make sure you have an active domain and brand.

Create the flow

1. In Ver.iD Studio, open Verify, then Authentications.
2. Click Create authentication.
3. Enter an internal name and click Create authentication.

The name helps you find the flow in Studio. Your selected brand is shown to the user.

Add digital identity wallets and scopes

Digital identity wallets are currently labelled identity apps in Studio.

Open the Scopes tab and click Add identity app. Select a digital identity wallet, then use its row actions to add one or more supported scopes. Repeat this for every wallet you want to offer.

You can mark a digital identity wallet as recommended. It will still remain a choice for the user.

Add redirect URIs

Open Redirect URIs and click Add redirect URI. Select an active domain and enter the protocol, port, and callback path used by your application.

The redirect URI must exactly match the value sent in the OAuth request. Use HTTPS in production. To use the OAuth Debugging Tool, select test.ver.id. Studio automatically sets HTTPS, port 443, and /authentication/callback for this domain.

Add a brand

Open Brands, click Add brand, and select an active brand. If you add more than one brand, use the row actions to select the default.

Optional settings

• Use Secrets when a confidential server-side client authenticates with a client secret. Public clients can use the authorization code flow with PKCE without a secret.
• Use Settings to add the purpose, retention, sharing, and deletion information shown during the flow.

Activate the flow

Click Activate. Activation may briefly show a provisioning state. When the authentication is active, the Configuration tab shows its OAuth endpoints, client identifier, and scope.

An active flow cannot be edited. Click Deactivate before changing it.