What you need
- a machine for the Veriqa server, with or without Docker, on Linux or Windows;
- a bot for at least one channel, such as Telegram, or a mailbox for the Email channel;
- access to the app’s code: it gets a standard OpenID Connect client.
Steps
1
Deploy the Veriqa server
In Docker, follow the self-hosted quickstart; without Docker,
install it as an OS service.
2
Enable a channel
Set up the bot and enable the channel as described in Channel setup.
3
Declare the client
Add the app and its
redirect_uri to Veriqa:OpenIddict:Clients —
step 4 of the self-hosted quickstart.5
Decide which data you need
What arrives in the
id_token, and why not every channel provides an email, is covered in
What arrives in the claims.6
Prepare for production
Go through the checklist in Preparing for production.
How to check
Check the server with step 8 of the self-hosted quickstart. Then start a sign-in in your app, scan the QR code with your phone and confirm the sign-in in the messenger: the app should receive the user’ssub. Each quickstart ends with a detailed checkpoint.
Next steps
- Getting the phone number and email — if the app needs contacts;
- Second factor and step-up — a confirmation before a sensitive operation;
- Sign-in surfaces — sign-in on a phone, a TV and a kiosk.