Supported Authentication Factors
š Factor Comparison Matrix
| Authentication Factor | Mobile App Required | Manual Enrollment | Auto-Available | |
|---|---|---|---|---|
| 1 | š Ditto IDVerify Push | ā Required | ā No | ā Yes* |
| 2 | š± Time-based OTP | ā Required | ā No | ā Yes* |
| 3 | š Password | ā Not Required | ā Yes | ā No |
| 4 | š² SMS OTP | ā Not Required | ā Yes | ā No |
| 5 | š§ Email OTP | ā Not Required | ā Yes | ā No |
*Automatically available after Ditto ID mobile app enrollment
šļø Factor Categories
š¢ Enterprise Factors (Ditto ID Mobile App Based)
- Automatic Setup: Available immediately after mobile app enrollment
- High Security: Provide strongest authentication security
- Offline Support: Time-based OTP works without internet connection
- Real-time: Push notifications provide immediate authentication
š Web-Only Factors (Manual Enrollment Required)
- Explicit Setup: User must manually register during activation
- Independence: Work without Ditto ID mobile app
- Accessibility: Suitable for users who cannot install mobile app
- Flexibility: Multiple communication channels available
āļø Administrative Configuration
Hard-Coded vs Configurable Factors
| Authentication Factor | Hard-Coded | Configurable | Admin Control |
|---|---|---|---|
| Ditto IDVerify Push Notification | ā Always On | ā No | Cannot disable |
| Time-based OTP (Mobile) | ā Always On | ā No | Cannot disable |
| Saved Browser (rememberMe) | ā Configurable | ā Yes | Can enable/disable |
| Password (alwaysAskForPassword) | ā Configurable | ā Yes | Can force requirement |
| SMS-based OTP | ā Configurable | ā Yes | Can enable/disable |
| Email-based OTP | ā Configurable | ā Yes | Can enable/disable |
Configuration Impact
- System Level: Administrators control which factors are available
- User Level: Users can only use factors enabled by administrators
- Login Flow: Available factors determine authentication options presented
- Registration: Factor availability affects user activation process
Updated 8 months ago
Did this page help you?