Site Search
Security business menu
Security business
HOME
To be elected
cause
Service
Handling Manufacturer
Examples/reports/
Blog/Glossary
Seminar/
video on demand
Event/Seminar
video on demand

Okta

Octa

Introduction

By using Auth0's Passwordless Connections feature, you can achieve passwordless login with one-time codes (sent to SMS/email) and magic links (sent to email). This eliminates the need for users to register a password when registering an account.

This time, we will introduce the passwordless login operation when using the Passwordless Connections function, using the one-time code transmission by e-mail as an example.
As shown below, the login operation is completed by entering the one-time code sent to the email address specified by the user.

By eliminating the need to have the password itself, there are the following advantages.

  • Avoid password leaks
  • Reduce user abandonment by omitting troublesome password entry
  • Eliminates the need for password management (password reset, password hashing, storage processing, etc.), reducing management man-hours and costs

This page introduces the setting method and actual login behavior for passwordless authentication using Auth0's Passwordless Connections feature.

supplement

As a passwordless login realized by Auth0, there is also a method using WebAuthn. This requires password registration on the user side. For details, please refer to [Password-less login by Auth0 device biometric authentication].

Note that it is not possible to use both the Passwordless Connections function and the method using WebAuthn at the same time due to product specifications.
Configure Universal Login with Passwordless - Auth0 docs

premise

The information on functions and settings described on this pageis current as ofApril2023.

Notes

Please note the following when using the Passwordless Connections function.

1. Available authentication methods

Please select from the following three types.

2. Available login screens

You need to use "New Universal Login *", "Classic Universal Login", and "Embedded Login" login screens.

*Supported as GA function from April 2023 (see below)

Setting Example

This section explains how to set up the Passwordless Connections function, taking as an example the sending of a one-time code by e-mail and the use of the Classic Universal Login screen. The flow of necessary settings is as follows.

0. Preparation
1. Enabling the Passwordless Connections feature
2. Change login page of Universal Login

From here, we will introduce the specific setting method.

0. Preparation

Please prepare the following before performing the following settings.

1. Enabling the Passwordless Connections feature
  • On the Auth0 admin screen, click [Authentication] > [Passwordless]
Auth0管理画面で、[Authentication] > [Passwordless]をクリック
  • Enable Email
Enable Email
  • On the Settings tab, leave the default settings and click Save
    *If you want to change the subject or body of the sent email, change it each time.
[Settings]タブで、デフォルト設定のまま[Save]をクリック
  • On the Applications tab, enable the desired application and click Save
On the Applications tab, enable the desired application and click Save
2. Change login page of Universal Login

Use the login page template dedicated to Passwordless provided by Classic Universal Login.

  • On the Auth0 admin screen, click [Branding] > [Universal Login]
Auth0管理画面で、[Branding] > [Universal Login]をクリック
  • In the Login tab, enable Customize Login Page
In the Login tab, enable Customize Login Page
  • In [Default Templates], select [Lock(Passwordless)] and move to the bottom of the screen
[Default Templates]で、[Lock(Passwordless)]を選択し、画面下部へ移
  • Click Save Changes
Click Save Changes

operation check

1. Access the sample application (http://localhost:3000) with a web browser and click [Log in].
Webブラウザでサンプルアプリ(http://localhost:3000)にアクセスし、[Log in]をクリック
2. On the login screen, enter your email address and click [SUBMIT].
ログイン画面で、メールアドレスを入力し、[SUBMIT]をクリック
3. Enter the one-time code included in the email sent to you on the login screen and click [SUBMIT].
送付されたメールに記載されたワンタイムコードをログイン画面へ入力し、[SUBMIT]をクリック
4. Confirm that you were able to log in to the application
アプリケーションにログインできたことを確認
5. Confirm the user information on the Auth0 management screen
Auth0管理画面において、当該ユーザ情報を確認

in conclusion

By using Auth0 's Passwordless Connections feature, you can easily implement passwordless logins that do not require password registration on the user side. Although there are some restrictions, please use the Passwordless Connections function, which improves usability and security for users.

If you are interested in passwordless authentication realized by Auth0, please contact us.

reference

Click here for a list of Customer Identity Cloud (Auth0) basic setting operation guides

Inquiry/Document request

In charge of Macnica Okta Co., Ltd.

inquiry Document request

Weekdays: 9:00-17:00