-
Notifications
You must be signed in to change notification settings - Fork 52
new doc: configure authentication flows #770
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from all commits
Commits
Show all changes
4 commits
Select commit
Hold shift + click to select a range
495fca5
add new page, configure auth flows
tamalchowdhury f18de91
add custom branding option in the flows
tamalchowdhury fce427f
distinguished self-hosted pages from Kinde-hosted changes
tamalchowdhury c972776
update the aside wording to cover 3 ways
tamalchowdhury File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
108 changes: 108 additions & 0 deletions
108
src/content/docs/authenticate/about-auth/configure-authentication-flows.mdx
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,108 @@ | ||
| --- | ||
| page_id: 591ea0d9-f08a-49ee-82d9-5687e59ebef4 | ||
| title: Configure your authentication flows | ||
| sidebar: | ||
| order: 2 | ||
| label: Configure auth flows | ||
| relatedArticles: | ||
| - cc242fb3-4b06-4842-97c8-dd58e87308df | ||
| - 43e8aa2d-76a4-4445-ae90-84d3f1a55fcb | ||
| - 1c180220-a98c-42b7-8707-3b95a1ecb4e5 | ||
| - 66f83c18-d261-48b8-a517-648ed1b7b064 | ||
| - 85c135db-f55a-4edf-8d1b-0af4140c1925 | ||
| app_context: | ||
| - m: settings | ||
| s: authentication | ||
| description: "Configure Kinde authentication flows with settings, custom pages, and workflows—no app redeploy required" | ||
| featured: false | ||
| deprecated: false | ||
| topics: | ||
| - authenticate | ||
| - about-auth | ||
| - authentication-flows | ||
| sdk: [] | ||
| languages: [] | ||
| audience: | ||
| - developer | ||
| - product-manager | ||
| complexity: beginner | ||
| keywords: | ||
| - authentication flows | ||
| - auth flows | ||
| - without redeploying | ||
| - custom configurations | ||
| - custom pages | ||
| - workflows | ||
| - custom UI | ||
| updated: 2026-07-20 | ||
| ai_summary: "Overview of how to configure authentication flows in Kinde without redeploying your application. Explains three approaches: dashboard custom configurations such as seamless registration, name fields, authentication methods, redirects, and invitation-only access; custom pages including your own sign-up screens and custom HTML CSS JavaScript on Kinde-hosted pages; and workflows that run TypeScript or JavaScript at auth and token triggers for claims, external checks, and custom validation. Includes guidance on choosing an approach and links to Manage the authentication experience, Custom sign-up and sign-in pages, Customize designs with code, About workflows, and authentication method overviews. Intended for developers and product managers shaping the sign-up and sign-in journey." | ||
| --- | ||
|
|
||
| With Kinde, you can reconfigure authentication flows without redeploying your application. | ||
|
|
||
| Kinde hosts the sign-up and sign-in journey. You change how that journey works with settings, page design, or custom code that runs in Kinde — not by shipping a new build of your app every time. | ||
|
|
||
| This page maps the main ways to configure your authentication flows and where to go next. | ||
|
|
||
| ## Ways to configure authentication flows | ||
|
|
||
| | Approach | What you change | Typical use | | ||
| | --- | --- | --- | | ||
| | [Custom configurations](#custom-configurations) | Dashboard settings for the auth experience | Seamless sign-up, name fields, redirects, invitation-only access | | ||
| | [Custom pages](#custom-pages) | Your own sign-in screens or Kinde-hosted page design | Brand the start of the flow, or fully style hosted pages | | ||
| | [Workflows](#workflows) | Custom code at auth and token triggers | Token claims, external checks, logic Kinde doesn’t support out of the box | | ||
|
|
||
| You can combine these. For example, use dashboard settings for the registration experience, custom UI for branding, and a workflow to enrich tokens after sign-in. | ||
|
|
||
| ## Custom configurations | ||
|
|
||
| Use application and environment settings in Kinde to shape the authentication flow without writing code. | ||
|
|
||
| Common options include: | ||
|
|
||
| - Unified sign-up and sign-in (seamless registration) | ||
| - Asking for first and last name on sign-up | ||
| - Change [authentication methods](/authenticate/authentication-methods/set-up-user-authentication/) per application (email, social, enterprise, etc.) | ||
| - Redirects after auth | ||
| - Invitation-only access ([disable self sign-up](/authenticate/custom-configurations/disable-sign-up/)) | ||
| - Pre-filling identity on the sign-in screen | ||
|
|
||
| Check out [Manage the authentication experience](/authenticate/custom-configurations/authentication-experience/). | ||
|
|
||
| ## Custom pages | ||
|
|
||
| Control what users see at the start of, or throughout the hosted authentication flow. | ||
|
|
||
| - **Your own branding** — [Set global brand defaults](/design/brand/global-brand-defaults/) (logo, favicon, colors, etc.) for your business or [set branding per organization](/design/brand/apply-branding-for-an-organization/) | ||
| - **Your own sign-up and sign-in screens** — Host the first screen in your product, then hand off to Kinde for verification and MFA. See [Custom sign-up and sign-in pages](/authenticate/custom-configurations/custom-authentication-pages/). | ||
| - **Custom UI on Kinde-hosted pages** — Bring your own HTML, CSS, and JavaScript to Kinde’s hosted pages (requires a custom domain). See [Customize designs with code](/design/customize-with-code/customize-with-css-html/). | ||
|
|
||
| These change the presentation of the flow. Secure verification steps still run in Kinde. | ||
|
|
||
| <Aside> | ||
| Brand defaults and organization branding update in Kinde immediately, with no application redeploy. Custom UI on Kinde-hosted pages also applies without redeploying your app — you sync the design to Kinde. Your own sign-up and sign-in screens, hosted in your product, require deploying that product. | ||
| </Aside> | ||
|
|
||
| ## Workflows | ||
|
|
||
| [Workflows](/workflows/about-workflows/) run your TypeScript or JavaScript in Kinde when specific events fire — for example after authentication, before MFA, or when tokens are generated. | ||
|
|
||
| Use a workflow when you need to: | ||
|
|
||
| - [Customize tokens](/workflows/workflow-tutorials/customize-token-with-workflow/) (access or ID token claims) beyond built-in options | ||
| - Call an external system during the auth or token flow (e.g., custom spam filter, fraud detection, etc.) | ||
| - Add validation or business logic at a supported trigger (e.g., [custom password validation](/workflows/workflow-tutorials/custom-password-validation-check/), etc.) | ||
|
|
||
| <Aside> | ||
| Workflow code lives in your repo and syncs to Kinde. Updating a workflow does not require redeploying your application; you sync and deploy the workflow in Kinde. | ||
| </Aside> | ||
|
|
||
| Workflows cannot bypass Kinde’s built-in verification (such as email OTP). Those steps always run as part of the auth flow. | ||
|
|
||
| ## Choose an approach | ||
|
|
||
| - **Change behavior with toggles and settings** → [Custom configurations](/authenticate/custom-configurations/authentication-experience/) | ||
| - **Change how the flow looks or where it starts** → [Set brand defaults](/design/brand/global-brand-defaults/), [Custom pages](/authenticate/custom-configurations/custom-authentication-pages/) or [custom UI](/design/customize-with-code/customize-with-css-html/) | ||
| - **Run custom logic during auth or token generation** → [Workflows](/workflows/about-workflows/) | ||
|
|
||
| For available sign-in methods (email, social, enterprise, and more), see [About Kinde authentication](/authenticate/about-auth/about-authentication/) and [Ways to authenticate](/authenticate/about-auth/authentication-methods/). | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.