Pre-Authentication: Magic Link
Passwordless authentication via secure email links
Overview
Magic Link authentication provides a passwordless login experience. Users enter their email address, receive a secure one-time link, and clicking the link authenticates them automatically.
Passwordless
One-time use
Time-limited
How It Works
1
User Requests Link
User enters their email address on the login page
2
Link Sent
JOSSO generates a secure token and sends a magic link via email
3
User Clicks Link
User clicks the link and is automatically authenticated
Configuration
Pre-Authentication Scheme:
Name: magic-link
Type: Email Magic Link
Settings:
Token Expiration: 15 minutes
Single Use: true
Email Configuration:
SMTP Server: smtp.example.com
From Address: noreply@example.com
Subject: Your Login Link
Template:
Link Text: Click here to sign in
Expiration Warning: This link expires in 15 minutes