Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified en/asgardeo/docs/assets/img/guides/mfa/push/setup-push-auth.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
{% set product_name = "WSO2 Identity Platform" %}
{% set base_url = "https://api.asgardeo.io/t/<org_name>" %}

{% include "../../../includes/tutorials/register-multiple-devices-for-push-notifications.md" %}
1 change: 1 addition & 0 deletions en/asgardeo/mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -303,6 +303,7 @@ plugins:

exclude_docs: |
/get-started/hello-world.md
/tutorials/register-multiple-devices-for-push-notifications.md

not_in_nav: |
/page-not-found.md
Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
1 change: 1 addition & 0 deletions en/identity-server/7.3.0/docs/tutorials/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,3 +13,4 @@ See the topics listed below for end-to-end tutorials on how to use WSO2 Identity
- [Integrating WSO2 Identity Server With Kong AI Gateway for Agent Identity-Aware Access Control]({{base_path}}/tutorials/kong-ai-gateway-with-agent-identity-aware-access-control/)
- [Secure MCP servers with WSO2 Identity Server and integrate them with n8n agentic flows]({{base_path}}/tutorials/secure-mcp-servers-and-integrate-them-with-n8n-agentic-flows/)
- [Authenticate Agents with their own Agent ID to Claude API Using Workload Identity Federation]({{base_path}}/tutorials/agent-id-claude-authentication/)
- [Register multiple devices for push notifications]({{base_path}}/tutorials/register-multiple-devices-for-push-notifications/)
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
{% set product_name = "WSO2 Identity Server" %}
{% set base_url = "https://localhost:9443" %}

{% include "../../../../includes/tutorials/register-multiple-devices-for-push-notifications.md" %}
1 change: 1 addition & 0 deletions en/identity-server/7.3.0/mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1005,6 +1005,7 @@ nav:
- Secure Agentic AI Systems with WSO2 Identity Server: tutorials/secure-agentic-ai-systems.md
- Access Control for Ambient Agents: tutorials/ciba-for-ai-agents.md
- Authenticate AI Agents to the Claude API with WSO2 Agent ID: tutorials/agent-id-claude-authentication.md
- Register multiple devices for push notifications: tutorials/register-multiple-devices-for-push-notifications.md
- Setup:
- Install:
- Install: deploy/get-started/install.md
Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
1 change: 1 addition & 0 deletions en/identity-server/next/docs/tutorials/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,3 +13,4 @@ See the topics listed below for end-to-end tutorials on how to use WSO2 Identity
- [Integrating WSO2 Identity Server With Kong AI Gateway for Agent Identity-Aware Access Control]({{base_path}}/tutorials/kong-ai-gateway-with-agent-identity-aware-access-control/)
- [Secure MCP servers with WSO2 Identity Server and integrate them with n8n agentic flows]({{base_path}}/tutorials/secure-mcp-servers-and-integrate-them-with-n8n-agentic-flows/)
- [Authenticate Agents with their own Agent ID to Claude API Using Workload Identity Federation]({{base_path}}/tutorials/agent-id-claude-authentication/)
- [Register multiple devices for push notifications]({{base_path}}/tutorials/register-multiple-devices-for-push-notifications/)
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
{% set product_name = "WSO2 Identity Server" %}
{% set base_url = "https://localhost:9443" %}

{% include "../../../../includes/tutorials/register-multiple-devices-for-push-notifications.md" %}
3 changes: 2 additions & 1 deletion en/identity-server/next/mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1019,7 +1019,8 @@ nav:
- Integrating WSO2 Identity Server With Kong AI Gateway for Agent Identity-Aware Access Control: tutorials/kong-ai-gateway-with-agent-identity-aware-access-control.md
- Secure MCP servers with WSO2 Identity Server and integrate them with n8n agentic flows: tutorials/secure-mcp-servers-and-integrate-them-with-n8n-agentic-flows.md
- Authenticate AI Agents to the Claude API with WSO2 Agent ID: tutorials/agent-id-claude-authentication.md

- Register multiple devices for push notifications: tutorials/register-multiple-devices-for-push-notifications.md

- Setup:
- Install:
- Install: deploy/get-started/install.md
Expand Down
21 changes: 18 additions & 3 deletions en/includes/guides/authentication/mfa/add-push-auth-login.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,5 @@
# Add MFA with Push Notification


Push notifications provide a seamless and secure MFA solution by allowing users to verify their identity with a simple tap on their registered device. This real-time authentication method reduces reliance on passwords and one-time passcodes, enhancing security against phishing and credential attacks.

Follow the instructions given below to configure Multi-Factor Authentication (MFA) using Push Notifications in {{ product_name }}.
Expand Down Expand Up @@ -75,10 +74,27 @@

5. Click **Update** to save your changes.


!!! note
Push notification device progressive enrollment can only be configured at the organizational level and cannot be modified at the application level.

{% if is_version is defined and is_version >= "7.3.0" %}

## Enable progressive enrollment for multiple devices

When multiple device registration is enabled, you can also let a user who already has a registered device add another one during sign-in.

!!! warning
Anyone who gets past the earlier authentication step can register their own device during sign-in. Enable this option only if your use case requires it.

1. On the {{ product_name }} Console, go to **Connections** > **Push Notification** and open the **Settings** tab.

2. With **Enable push notification device progressive enrollment** and **Allow users to register multiple devices** both enabled, select **Allow progressive enrollment for multiple devices** and confirm the security prompt.

3. Click **Update**.

!!! note
For the full walkthrough — enabling multiple device registration, registering additional devices, and device registration notifications — see [Register multiple devices for push notifications]({{base_path}}/tutorials/register-multiple-devices-for-push-notifications/).

Check warning on line 96 in en/includes/guides/authentication/mfa/add-push-auth-login.md

View workflow job for this annotation

GitHub Actions / Vale style check

[vale] reported by reviewdog 🐶 Did you really mean 'walkthrough'? Raw Output: {"message":"Did you really mean 'walkthrough'?","location":{"path":"en/includes/guides/authentication/mfa/add-push-auth-login.md","range":{"start":{"line":96,"column":18},"end":{"line":96,"column":29}}},"severity":"WARNING","code":{"value":"Vale.Spelling"}}
{% endif %}

## Try out Push Notification MFA flow with a user already enrolled with a device

Expand All @@ -96,7 +112,6 @@

5. Once you approve the authentication request, you will be successfully logged in to the application.


## Try out Push Notification MFA flow with a user not enrolled with a device

In this section, we will guide you through the steps to authenticate using Push Notification MFA with a user who has not enrolled a push notification device when progressive enrollment is enabled.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,14 +1,12 @@

# Add Passwordless login with Push Notifications


Push notifications enable a secure and seamless passwordless authentication mechanism by allowing users to verify their identity with a simple tap on their registered mobile device. Instead of relying on traditional passwords or one-time passcodes, authentication requests are securely delivered via push notifications, ensuring real-time, user-friendly login.

This method enhances security by reducing the risk of phishing and credential-based attacks while offering a frictionless login experience. Users can authenticate from any trusted device with internet access, eliminating the need to remember or enter passwords.

To configure push notifications as a passwordless authentication mechanism in {{ product_name }}, follow the instructions below.


## Prerequisites

- To get started, you need to [register an application with {{ product_name }}]({{base_path}}/guides/applications/). You can register your own application or use one of the [sample applications]({{base_path}}/get-started/try-samples/) provided.
Expand All @@ -21,7 +19,6 @@

- If push notification device progressive enrollment is disabled, [application users]({{base_path}}/guides/users/manage-users/#onboard-a-user) need to register their push notification devices via the My Account app prior to using push notification based login. Be sure to educate your users on how to [enroll push notification devices via My Account.]({{base_path}}/guides/user-self-service/register-push-notification-device/)


## Set up Push Notifications

{{ product_name }} has some default settings for Push Notifications, which are sufficient for most cases. If required, you can change the default settings, as explained below.
Expand Down Expand Up @@ -82,10 +79,28 @@

6. [Add the push notification device progressive enrollment adaptive script]({{base_path}}/guides/authentication/conditional-auth/push-device-progressive-enrollment-based-template) to the login flow of the application.


!!! note
Push notification device progressive enrollment can only be configured at the organizational level and cannot be modified at the application level.

{% if is_version is defined and is_version >= "7.3.0" %}

## Enable progressive enrollment for multiple devices

When multiple device registration is enabled, you can also let a user who already has a registered device add another one during sign-in.

!!! warning
Anyone who gets past the earlier authentication step can register their own device during sign-in. Enable this option only if your use case requires it.

1. On the {{ product_name }} Console, go to **Connections** > **Push Notification** and open the **Settings** tab.

2. With **Enable push notification device progressive enrollment** and **Allow users to register multiple devices** both enabled, select **Allow progressive enrollment for multiple devices** and confirm the security prompt.

3. Click **Update**.

!!! note
For the full walkthrough — enabling multiple device registration, registering additional devices, and device registration notifications — see [Register multiple devices for push notifications]({{base_path}}/tutorials/register-multiple-devices-for-push-notifications/).

Check warning on line 101 in en/includes/guides/authentication/passwordless-login/add-passwordless-login-with-push-notification.md

View workflow job for this annotation

GitHub Actions / Vale style check

[vale] reported by reviewdog 🐶 Did you really mean 'walkthrough'? Raw Output: {"message":"Did you really mean 'walkthrough'?","location":{"path":"en/includes/guides/authentication/passwordless-login/add-passwordless-login-with-push-notification.md","range":{"start":{"line":101,"column":18},"end":{"line":101,"column":29}}},"severity":"WARNING","code":{"value":"Vale.Spelling"}}
{% endif %}

## Try out Push Notification passwordless login flow with a user already enrolled with a device

In this section, we will guide you through the steps to authenticate using Push Notification passwordless login with a user who has already enrolled a push notification device.
Expand All @@ -106,7 +121,6 @@

5. Once you approve the authentication request, you will be successfully logged in to the application.


## Try out Push Notification passwordless login flow with a user not enrolled with a device

In this section, we will guide you through the steps to authenticate using Push Notification passwordless login with a user who has not enrolled a push notification device when progressive enrollment is enabled.
Expand Down Expand Up @@ -134,4 +148,3 @@
8. You will receive a push notification on your registered device. Approve the authentication request from the registered device.

9. Once you approve the authentication request, you will be successfully logged in to the application.

Loading
Loading