General information about Airlock IAM flows

Flow design and flow visualization

Flows are designed (or defined) in the configuration using the Config Editor. In addition to selecting steps and putting them in a particular order, additional flow concepts like various types of conditions, selection, goto, and dynamic step activation allow modeling more complex flows.

The mentioned flow concepts are explained in detail in this chapter.

Consider the following example showing a very simple 2-factor authentication flow in the Config Editor:

AuthFlowConfigEditor

Airlock IAM flows can be visualized by clicking the visualizer button next to the flow property – this opens the integrated Flow Visualizer. It creates a flow chart based on the current flow configuration.

Select a flow chart element with a mouse click to display detailed information:

Flow Visualizer - simple flow

Flows and REST APIs

Flow steps can be interactive and non-interactive. While non-interactive steps are simply processed, the interactive ones expose REST API end-points (see REST API specification for details). The flow state machine in IAM enforces a valid sequence of steps and expects the REST client to act accordingly.

Consider the following password reset flow example:

Public-Self-Service-Password-Reset-Simple

More details can be found in the sub-sections of this chapter.