Flow Configuration
Choose how users verify their identity in your project
Configure your authentication flow from the Flow Configuration tab in your project. Use the Signup / Signin toggle to configure each flow independently. Changes take effect when you hit Save.
Phases
Each flow has three phases, shown as steps at the top of the editor:
| Phase | What it does |
|---|---|
| 1. Primary | How users verify their identity (required) |
| 2. MFA | Optional second factor for extra security |
| 3. Device Trust | Remember this device for faster future logins |
Primary Verification
Choose one or more methods users can use to prove their identity:
| Method | Description |
|---|---|
| Email OTP | 6-digit code sent via email |
| SMS OTP | 6-digit code sent via SMS |
| Magic Link | One-click email link |
| QR Code | Scan to authenticate from a registered device |
| Push | One-tap approval on a registered device |
QR Code and Push are labeled DEVICE because they require a previously registered device.
Multi-Factor Authentication
Add a second layer of security after primary verification. Set the MFA Policy to control when MFA is required:
| Policy | What it means |
|---|---|
| Off | MFA never runs |
| Optional | MFA runs only if the user has already set up an MFA method |
| Required | All users must complete MFA to sign in |
When MFA is Optional or Required, choose which methods are available:
| Method | Description |
|---|---|
| Email OTP | 6-digit code via email |
| SMS OTP | 6-digit code via SMS |
| TOTP | Authenticator app code |
| QR Code | Scan to authenticate |
| Push | One-tap approval |
Identity Verification
Third-party identity proofing providers (ID.me, CLEAR) are coming soon.
Trusted Device Benefits
When a user returns on a device they've already enrolled, you can skip steps to make login faster. This option appears under Trusted Device Benefits in the editor:
- Skip MFA: no second factor required on trusted devices
This is on by default. The Live Preview updates to show the difference. For example, a new device might need 2 steps while a trusted device only needs 1.
Live Preview
The preview on the right shows what users will experience. Toggle between New device and Trusted device to see the difference:
- New device: full verification flow (2 steps)
- Trusted device: shortened flow for enrolled devices (1 step)