Toggle navigationAirlock Secure Access HubAbout this documentAbout Airlock IAMIAM 8.4 release notesSecurity best practicesInstallation and upgradeOperationInitial configurationConfiguration managementAuthenticationSelf-servicesTarget applicationsOAuth and OIDCSAMLAPI access control Flows (Airlock IAM concept)Loginapp ConfigurationLoginapp REST APIService overviewAuthentication REST APIFlow-based authenticationConfigurationExamplesUsername password authentication in the Loginapp REST APIAirlock 2FA authn. in Loginapp REST APIFIDO authenticationDevice tokensSSO ticket authenticationFront-Side KerberosIdentity propagationUser representation (representee side)Failed logins and lockout configTemp locking configurationRemember-Me configurationVoluntary password changeAdditional Cronto device activationLatest login information in the Loginapp REST APIREST – Permanent and temp. locking during authSuccessful authenticationInterpreting error responsesError in the first authn. factorError in the 2nd authn. factorLocked accountEffects of temporary locksUsername transformationOIDC and OAuthRisk-based authentication in the Loginapp REST API/UIProcessing role removalCFP-based lockoutUser self-registration REST APIPublic self-servicesProtected self-servicesSAML IDP setupSAML SP setupCleanup on user lockCustomizing non-UI text elementsAdditional and custom attributesJWKS endpointLoginapp UIOne-Shot authenticationOAuth / OIDCHTTP Basic Auth accessEvent notificationAdminapp ConfigurationService Container ConfigurationTransaction Approval ConfigurationIAM REST APIsCustomizing UIs and textsThird-party licensesLoginapp ConfigurationLoginapp REST APIAuthentication REST APIREST – Permanent and temp. locking during authREST behavior of permanent and temporary locking during authenticationChapter contentSuccessful authenticationInterpreting error responsesError in the first authentication factorError in the second authentication factorLocked accountEffects of temporary locks
Chapter contentSuccessful authenticationInterpreting error responsesError in the first authentication factorError in the second authentication factorLocked accountEffects of temporary locks