Skip to content
GitHub

Overview

To configure Guardian for your application, you need to set up tenant-specific configurations. Start with the basic mandatory configurations, then add flow-specific configurations based on the authentication methods you want to enable.

  1. Start with Basic/Mandatory Configurations - Required for all authentication flows
  2. Add Flow-Specific Configurations - Only configure what you need for your specific authentication methods

Use this table to quickly identify which configurations you need for each authentication flow:

Authentication FlowRequired Configurations
All FlowsTenant, Client, Token, User
Any Flow with responseType: "code"+ Auth Code
Passwordless (SMS-OTP)+ OTP, SMS
Passwordless (Email-OTP)+ OTP, Email
Google Login+ Google
Facebook Login+ Facebook
External OIDC Provider+ OIDC Provider
Guardian as OIDC Provider+ OIDC
Username/PasswordNo additional configs (uses basic configs only)
Contact Verification+ Contact Verify + (SMS or Email)
Guest Login+ Guest
Admin Logout+ Admin

These are required for all authentication flows:

Configure these only when using the corresponding authentication methods:

Auth Code:

Passwordless (OTP):

Social Login:

Other:

  1. Start with Tenant Configuration to create your tenant
  2. Configure Client, Token, and User settings
  3. Add flow-specific configurations based on your authentication requirements