User authentication is a crucial aspect of integrating Genuin SDK into mobile and web applications. The three primary authentication mechanisms provided by Genuin SDK are SSO (Single Sign-On), Auto Login, and Bypass Login. Implementation for both mobile and web applications are explained to help determine the best authentication flow for integration.
Auto Login allows authentication using your existing authentication infrastructure.
If authentication is already managed independently in your ecosystem, an authentication endpoint can be provided to enable seamless verification of users within Genuin SDK.
Implementation Steps:
Provide an authentication API endpoint.
Genuin SDK verifies the user’s identity through this endpoint before allowing access.
2.1 Authentication Flow for “Apps with Login/Signup” System
Case 01 - Your own login/signupa. If your app allows users to explore content without logging in or signing up, you have the option to require them to do so before they can engage with the community (e.g., by commenting on or sparking a video).b. Genuin will provide a callback to your app so that you can prompt the user to log in or sign up.
Case 02 - Login with SSOa. If your app requires users to log in or sign up before they can access any content, then you will need to implement a mandatory login process.b. If you are using OAuth as the authorization protocol, you can configure SSO in the Brand Control Center.c. Here is How to Configure SSO in the Brand Control Center (BCC)
Case 03 - Auto Logina. If your app requires users to log in or sign up before they can access any content, then you will need to implement a mandatory login process.b. If you are not using OAuth, you will need to pass your user authentication token to the Genuin SDK as part of the auto-login process.c. Here is How Genuin Auto-Login Works?
Note: No separate authentication configuration is required for the web app, if SSO is already configured under BCC provided you are using OAuth authorization protocol.
3.1 Authentication Flow for “Web App with Login/Signup” System
Case 01 - Your own login/signupa. If your web app allows users to explore content without logging in or signing up, you have the option to require them to do so before they can engage with the community (e.g., by commenting on or sparking a video).b. Genuin will provide a callback to your web app so that you can prompt the user to log in or sign up.
Case 02 - Auto Logina. If your app requires users to log in or sign up before they can access any content, then you will need to implement a mandatory login process.b. Then you will need to pass your user authentication token to the Genuin SDK as part of the auto-login process.c. Here is How Genuin Auto-Login Works?
3.2 Authentication Flow for “Web App with Login/Signup” System (Bypass Login)
If the web app does not have a login/signup system and still user authentication is required, a white-label login/signup popup will be presented by the Genuin Web SDK.
Genuin will act as a data processor and will provide your user data via your data warehouse back into your ecosystem.
If authentication is not needed, login/signup entry points can be disabled in the SDK upon request.