You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/end-user-flows/account-settings/README.mdx
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,7 +10,7 @@ import GearIcon from '@site/src/assets/gear.svg';
10
10
11
11
Logto provides a two collection of account settings APIs to allow users to manage their account and profiles stored in Logto.
12
12
13
-
## Use Account APIs (Recommended)
13
+
## Use Account APIs (Recommended)\{#use-account-apis-recommended}
14
14
15
15
Logto’s Account APIs are ready-to-use, front-end endpoints that let end users securely view and update their own information with built-in permission checks. Simply embed them in your client application to power a polished, self-service account settings page.
16
16
@@ -36,7 +36,7 @@ Key features:
36
36
]}
37
37
/>
38
38
39
-
## Use Management APIs
39
+
## Use Management APIs\{#use-management-apis}
40
40
41
41
The Management APIs form Logto’s core administrative interface, accessible only to admins or back-end services. They deliver maximum flexibility and full CRUD control over every user account and allow you to build custom management tools. If you need a fully custom self-service portal or nonstandard user-management features, you can expose selected Management API endpoints behind your own “Account API” layer and secure them with your business’s auth logic.
42
42
@@ -61,7 +61,7 @@ Key features:
61
61
]}
62
62
/>
63
63
64
-
## Account API vs. Management API
64
+
## Account API vs. Management API\{#account-api-vs-management-api}
Copy file name to clipboardExpand all lines: docs/end-user-flows/security-verification/README.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@ When authenticated users attempt sensitive or high-risk actions—such as changi
8
8
9
9
This process, known as _security verification_, requires users to re-verify their identity to confirm they are the authorized account holder. By implementing security verification, the system reinforces protection against unauthorized access, adding a critical layer of security for high-risk actions and helping safeguard sensitive data.
10
10
11
-
## Implement security verification by Account API
11
+
## Implement security verification by Account API\{#implement-security-verification-by-account-api}
12
12
13
13
:::note
14
14
Remember to [enable Account API](/end-user-flows/account-settings/by-account-api) first, and get the `access_token` for the user.
Copy file name to clipboardExpand all lines: docs/end-user-flows/sign-out.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -181,7 +181,7 @@ If you are integrating Logto with your client application using Logto's SDKs:
181
181
For native applications that does not support sessionless webview or does not recognize the `emphasized` settings(Android app using **React Native** or **Flutter** SDK), you may force the user prompt to sign in again by passing the `prompt=login` parameter in the authorization request.
182
182
:::
183
183
184
-
## Enforce re-authentication on every access
184
+
## Enforce re-authentication on every access\{#enforce-re-authentication-on-every-access}
185
185
186
186
In high-security scenarios—such as verifying a user's identity before sensitive actions—you may want to require the user to re-authenticate on every access. To enforce this behavior, include `prompt=login` in your authentication request.
Copy file name to clipboardExpand all lines: docs/end-user-flows/sign-up-and-sign-in/disable-user-registration.mdx
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,7 +7,7 @@ sidebar_label: Disable user registration
7
7
8
8
In some circumstances, you may want to restrict user registration for your application. Logto allows you to disable anonymous user registration and restrict user sign-in to only users invited by an administrator.
9
9
10
-
## Disable user registration
10
+
## Disable user registration\{#disable-user-registration}
11
11
12
12
To disable end-user registration, follow these steps:
13
13
@@ -25,7 +25,7 @@ Once user registration is disabled:
25
25
26
26
Logto does not provide a built-in invitation flow. However, you can easily implement an invite-only sign-up flow by utilizing the users Management API in Logto.
27
27
28
-
### Option 1: Invite user with magic link (Recommended)
28
+
### Option 1: Invite user with magic link (Recommended)\{#option-1-invite-user-with-magic-link-recommended}
29
29
30
30
1. Disable user registration in the <CloudLinkto="/sign-in-experience/sign-up-and-sign-in">Console > Sign-in-experience</CloudLink>.
31
31
2. Go to <CloudLinkto="/sign-in-experience/sign-up-and-sign-in">Console > Sign-in-experience</CloudLink>, and toggle off "Enable user registration" to close public registration.
@@ -49,7 +49,7 @@ Logto does not provide a built-in invitation flow. However, you can easily imple
49
49
50
50
When users click "Accept the invitation", they will automatically register for your service, even with public registration disabled. This is referred to as "Targeted user invitation".
51
51
52
-
### Option 2: Invite and create users via management API
52
+
### Option 2: Invite and create users via management API\{#option-2-invite-and-create-users-via-management-api}
53
53
54
54
1. Disable user registration in the <CloudLinkto="/sign-in-experience/sign-up-and-sign-in">Console > Sign-in-experience</CloudLink>.
55
55
2. Create a custom invitation-based user registration form in your application.
@@ -64,7 +64,7 @@ Logto does not provide a built-in invitation flow. However, you can easily imple
64
64
3. Notify users via email that their account has been created.
65
65
4. Redirect users to the Logto sign-in or reset-password page to complete registration. See [Authentication parameters](/end-user-flows/authentication-parameters/) for guidance on customizing the first-screen and pre-filling the user’s email to streamline the sign-in process.
66
66
67
-
## User experience for pre-registered accounts
67
+
## User experience for pre-registered accounts\{#user-experience-for-pre-registered-accounts}
68
68
69
69
Pre-registered accounts (also known as provisioned users). In both Option 2 and Option 3, user accounts are created in advance via the Management API. The end users then sign in to your product for the first time.
Logto uses the [OpenID Connect (OIDC)](https://auth.wiki/openid-connect) flow for authentication. A valid OIDC authorization flow must be initiated by your application, e.g, clicking your app’s “Sign in” button sends an OIDC authorization request to Logto, which then sets up a secure session (cookie).
24
24
@@ -35,7 +35,7 @@ How to set it up:
35
35
1. Go to <CloudLinkto="/sign-in-experience/sign-up-and-sign-in">Console > Sign-in experience > Sign-up and sign-in > Advanced settings</CloudLink>
36
36
2. Set the "Unknown session redirect URL" to your service address or product’s homepage. E.g., Logto Cloud will set "https://cloud.logto.io".
37
37
38
-
## Support contact info
38
+
## Support contact info\{#support-contact-info}
39
39
40
40
If other errors occur (such as visiting an invalid path, a social callback with no session, or opening an expired magic link), Logto will show a default error page. To help users, you can display contact information on these unavoidable error pages.
Copy file name to clipboardExpand all lines: docs/end-user-flows/sign-up-and-sign-in/reset-password.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -29,7 +29,7 @@ Not seeing the "Forgot password" link? Make sure you have a valid **Email** or *
29
29
30
30
For authenticated users, they can update their password by visiting the account settings page. Check the [account settings](/end-user-flows/account-settings/) to learn more about implementing a user account settings page.
Customize password length, character requirements, and word restrictions to meet your business's security needs while providing a good user experience. These settings can be configured in the **Security** section. Check the [password policy](/security/password-policy) to learn more.
Copy file name to clipboardExpand all lines: docs/integrate-logto/README.mdx
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,7 +14,7 @@ Logto provides comprehensive authentication solutions for web, mobile and deskto
14
14
15
15
Start your integration by selecting the solution that best matches your needs:
16
16
17
-
## Add authentication for your applications
17
+
## Add authentication for your applications\{#add-authentication-for-your-applications}
18
18
19
19
Whether you're building user-facing applications (like web, mobile, or desktop apps) or machine-to-machine (M2M) applications for service-to-service communication, you can quickly implement comprehensive [authentication](/end-user-flows) and [user management](/user-management) features by integrating Logto.
20
20
@@ -50,7 +50,7 @@ Or try a no-code integration solution via Protected App when you’re using Logt
50
50
]}
51
51
/>
52
52
53
-
## Add SAML apps
53
+
## Add SAML apps\{#add-saml-apps}
54
54
55
55
Logto (as an Identity Provider) supports integration with SAML protocol-based applications (as a Service Provider). Through SAML app integration, you can provide enterprise users with a secure, standardized Single Sign-On (SSO) experience.
56
56
@@ -69,7 +69,7 @@ Logto (as an Identity Provider) supports integration with SAML protocol-based ap
69
69
]}
70
70
/>
71
71
72
-
## Add OIDC/OAuth apps
72
+
## Add OIDC/OAuth apps\{#add-oidc-oauth-apps}
73
73
74
74
When you want to enable third-party applications to authenticate with your Logto identity system, you can configure Logto as an [Identity Provider (IdP)](https://auth.wiki/identity-provider).
Copy file name to clipboardExpand all lines: docs/integrate-logto/third-party-applications/README.mdx
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -82,12 +82,12 @@ These requested permissions will be granted to the third-party applications only
82
82
]}
83
83
/>
84
84
85
-
## FAQs
85
+
## FAQs\{#faqs}
86
86
87
87
<details>
88
88
<summary>
89
89
90
-
### How do we ensure users can only grant permissions they actually have on the consent screen?
90
+
### How do we ensure users can only grant permissions they actually have on the consent screen?\{#how-do-we-ensure-users-can-only-grant-permissions-they-actually-have-on-the-consent-screen}
Copy file name to clipboardExpand all lines: docs/integrate-logto/third-party-applications/permission-management.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -86,7 +86,7 @@ You can define your own organization scopes under the organization template sett
86
86
Organization scopes that are not enabled to the third-party applications will be ignored when sending an authorization request. It won't be displayed on the user consent screen and won't be granted by Logto.
Core OIDC permissions are automatically configured for your app. These scopes are required for OIDC authentication and will **not** appear on the user consent screen. OAuth apps can choose not to request them if OIDC authentication isn’t needed.
Copy file name to clipboardExpand all lines: docs/logto-cloud/tenant-settings.mdx
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -80,13 +80,13 @@ However, there are certain limitations that apply to development tenants:
80
80
81
81
The production tenant is where end-users access the live app and you might need a [paid subscription](https://logto.io/pricing). You can subscribe to the Free plan or Pro plan to create a production tenant. If you subscribe to the Free plan, you can only create up to 10 tenants.
82
82
83
-
## Enable MFA
83
+
## Enable MFA\{#enable-mfa}
84
84
85
85
Enhance your workspace security by requiring Multi-Factor Authentication (MFA) for all members in your Logto Pro/Enterprise tenant.
86
86
87
87
Since self-service is not yet available, please [contact us](https://logto.io/contact) to enable this feature.
88
88
89
-
## Enable Enterprise SSO
89
+
## Enable Enterprise SSO\{#enable-enterprise-sso}
90
90
91
91
Logto Cloud supports enterprise Single Sign-On integration for paid tenants, including providers like Google Workspace, Okta, Azure AD, and more.
0 commit comments