Sign-in methods

On the application edit page, configure the sign-in items table: add, remove, and reorder methods. Supported methods: Password, Verification code, WebAuthn, and LDAP.

Field reference:

Column	Description
Name	Sign-in method name.
DisplayName	Label shown to users.
Rule	Rule that customizes this method (see table below).
Action	Move up, move down, or delete.

The methods below take a rule.

Method	Rules	Description
Password	All (default), Non-LDAP	All — LDAP users can sign in with password. Non-LDAP — LDAP users cannot use password sign-in.
Verification code	All (default), Email only, Phone only	Which channel to use for the code: both, email only, or phone only.
Device login	Tab (default), Login page	Tab shows the device login QR code in its own tab. Login page shows it next to the sign-in form, so users signed in to your mobile app can scan it to sign in to the website.

Native apps

A native app can sign users in with a verification code without opening this page: enable the Verification Code grant, which also signs up phone numbers and emails that have no account yet.

note

Example: Prefer email sign-in, then password. Add Verification code first and Password second; set the verification code rule to Email only so the code is sent only by email. Optionally set a clear display name for the verification code method (e.g. “Email login”).

tip

All methods except LDAP are available by default. At least one sign-in method must be configured.

Here is a video of how the sign-in method works: