Skip to main content
Application settings (also known as app settings, or system settings) are configuration points across that can be modified to customize your Storefront Gateway instance. The app settings define how your Storefront Gateway service operates/functions and how the Storefront Gateway Process APIs respond when called by your application(s). App settings are organized under different categories so that you can tailor user journeys and apply the defined settings to all end users across all processes. A Storefront Gateway admin user accesses the Admin console to manage the application settings that are grouped into the following categories:
  • Password: Settings to define the password complexity and expiration time to implement a security policy for end users when signing in.
    • Password complexity rules
    • Banned password list
  • Tokens: Settings to define the token types and formats used by the Storefront Gateway Processes and action tokens.
    • How Tokens Work (Short/Long Form Tokens)
    • Configure Token Types/URLs
  • PIN and Passcode: Settings to customize PIN and passcode characteristics pertaining to the user’s sign in process.
    • Minimum PIN and Passcode lengths.
    • Passcode formats that include the maximum consecutive numbers that can be used and the minimum unique characters required in a passcode.
  • Social Connections: Settings to enable and configure the integration with supported social identity providers.
    • Onboard and authenticate with social provider platforms Apple, Facebook, Google, LinkedIn, Microsoft.
  • Authentication Identifiers: Settings to define rules for authentication identifiers (authN IDs) that the Storefront Gateway service accepts and processes.
    • Number of aliases, valid email/mobile patterns and obfuscation rules.
    • Whether a user can authenticate into a service while their email address or mobile number is still pending verification. Note: As a best practice, it’s recommended to require new end users to verify their email address or mobile number when they onboard. However, some exceptions are made to allow new users to sign up, authenticate immediately into a service, and to verify their contact channel at a later date. For example, your organization grants partial access to a service right away, and inform to those users what a fully verified profile will get. This can drastically improve user engagement and retention chances by streamlining immediate access to services for your prospective customers.
    • Email domain block-list defines a set of email domains that are prohibited or blocked from being used by a user.
  • Lockout: Settings to control basic security requirements to prevent unauthorized access by a user.
    • Duration of the user lockout.
    • The maximum number of times sign-in attempts before lockout occurs.
  • Multi-Factor Authentication (MFA): Settings to enable users to configure accounts with MFA.
  • Recaptcha: Setting to enable and setup the reCAPTCHA protocol for end user security.
  • Settings: Advanced settings for runtime configuration, time zones and Allowed Origins (Cross-Origin Resource Sharing)
Parent topic:Introduction to Storefront Gateway Admin