0:0:0.0 --> 0:0:2.530
Ping Ping Lau
They have 40 feet, has not enough time.
0:0:2.780 --> 0:0:8.290
Ping Ping Lau
Bring forward to the other sessions and will be.
0:0:8.270 --> 0:0:11.510
Hanna Chai
OK, so we are recording now.
0:0:12.430 --> 0:0:14.60
Hanna Chai
Today I have two tickets.
0:0:14.70 --> 0:0:27.460
Hanna Chai
One is related to Samuel support, another one is about the user lock and then this is how I configured the Samuel as IDP in R0.
0:0:28.50 --> 0:0:41.460
Hanna Chai
First we need to create a regular web application and then in the application we need to setting for the allow callback URL and also allowed lockout URL.
0:0:42.840 --> 0:0:49.700
Hanna Chai
After that, in the tenant setting, we need to also add in the allock lockout URL.
0:0:51.170 --> 0:0:56.480
Hanna Chai
So after that, uh, come back to the application?
0:0:57.510 --> 0:1:3.600
Hanna Chai
Umm, we need to turn on the talker on summer web app.
0:1:4.560 --> 0:1:5.330
Hanna Chai
Uh.
0:1:5.340 --> 0:1:14.740
Hanna Chai
And then, uh, where we turn on right it there is a pop up box show here and then it's.
0:1:17.140 --> 0:1:55.790
Hanna Chai
We can download the meta data from here and then we need to click on the enable button where we Scroll down to the bottom of the pop up box and then I will show how this is where I put the metadata and then I will configure it in my application and I have my application started now so I will show a I would demo how the summer is working and I have a scammer tracer here.
0:1:56.660 --> 0:2:3.270
Hanna Chai
So when we Click to click here for log in right.
0:2:4.500 --> 0:2:10.780
Hanna Chai
Ah OK, so it will redirect me to this page.
0:2:12.80 --> 0:2:13.980
Hanna Chai
Ah, and then.
0:2:24.630 --> 0:2:30.920
Hanna Chai
So this is the attribute that I get from Samuel from the Samuel Tracer.
0:2:30.930 --> 0:2:34.900
Hanna Chai
You can see a ohh yeah.
0:2:36.540 --> 0:2:40.150
Hanna Chai
Uh, calling the Samuel you RL here.
0:2:40.580 --> 0:2:44.680
Hanna Chai
And then I this is how the summer works.
0:2:49.520 --> 0:2:51.150
Hanna Chai
That's all for this.
0:2:51.320 --> 0:2:52.330
Hanna Chai
Is there any question?
0:2:53.870 --> 0:2:54.920
Duraid Wadie
I had just cooked one Hanna.
0:2:54.930 --> 0:3:0.280
Duraid Wadie
So you're not using really the Auth0 SDK for that app, or are you?
0:3:2.20 --> 0:3:8.0
Hanna Chai
Auth0 SDK and I'm not using the SDK.
0:3:10.500 --> 0:3:11.460
Duraid Wadie
It's just the.
0:3:10.380 --> 0:3:13.540
Hanna Chai
This one is a just a Samuel application.
0:3:14.90 --> 0:3:14.640
Duraid Wadie
Perfect.
0:3:14.690 --> 0:3:16.980
Duraid Wadie
But it's a standard Samuel packaging.
0:3:16.990 --> 0:3:19.650
Duraid Wadie
They know the libraries that use and not the Auth0 one, right?
0:3:20.210 --> 0:3:21.10
Hanna Chai
Yes, correct.
0:3:21.260 --> 0:3:22.70
Duraid Wadie
Yeah. Perfect.
0:3:23.60 --> 0:3:23.870
Duraid Wadie
Yeah. That.
0:3:23.880 --> 0:3:24.830
Duraid Wadie
That's perfect.
0:3:25.50 --> 0:3:25.470
Duraid Wadie
Thank you.
0:3:27.740 --> 0:3:38.330
Duraid Wadie
And you don't need to change, so it's for fully sampled from all the way from the you know from the app to Auth0 from Auth0 to federate to the identity, right?
0:3:39.920 --> 0:3:40.240
Hanna Chai
Yeah.
0:3:41.10 --> 0:3:41.190
Duraid Wadie
Yeah.
0:3:40.250 --> 0:3:46.710
Hanna Chai
For the federation part, I have been tested on that, yet we have another ticket to test on that.
0:3:47.410 --> 0:3:47.860
Duraid Wadie
OK.
0:3:48.0 --> 0:3:48.260
Duraid Wadie
Yeah.
0:3:48.270 --> 0:3:48.650
Duraid Wadie
Thank you.
0:3:50.160 --> 0:3:55.540
Hanna Chai
OK, so now I will go to my second ticket user lockout.
0:3:56.90 --> 0:4:2.400
Hanna Chai
So the user lockout are configurable under the force production.
0:4:3.670 --> 0:4:4.490
Hanna Chai
Ohh.
0:4:7.210 --> 0:4:14.510
Hanna Chai
OK, so in here you can we can enable or disable the book first part protection here.
0:4:15.700 --> 0:4:27.140
Hanna Chai
So when we go into the frost threshold, we can choose either the default one or we want to customize the default one.
0:4:27.300 --> 0:4:45.270
Hanna Chai
We have limit of 10 maximum attempts means that user can try a log in fail for 10 times and then we can choose the custom one so that we can configure the limit between one and 100.
0:4:47.930 --> 0:4:50.540
Hanna Chai
And we can see the block setting.
0:4:50.550 --> 0:4:52.230
Hanna Chai
Here we have a.
0:4:54.100 --> 0:5:7.70
Hanna Chai
We can choose uh talker on to block attempts from suspicious IP address and then this account locked out when we enable it, right it?
0:5:7.140 --> 0:5:23.620
Hanna Chai
Regardless, any IP, if the user are login failed for 10 times or our configurable number right, it will umm umm block the user from login.
0:5:26.780 --> 0:5:27.820
Hanna Chai
And then this.
0:5:27.880 --> 0:5:32.140
Hanna Chai
Uh adder, not notification talker.
0:5:32.950 --> 0:5:38.680
Hanna Chai
Whether we want the user to receive the email notification or not.
0:5:39.190 --> 0:5:49.920
Hanna Chai
So when we turn on this ohh the when the user account is blocked you will get the email at like this so.
0:5:53.180 --> 0:5:57.390
Hanna Chai
How we do the user lock and lock right?
0:5:57.700 --> 0:6:20.740
Hanna Chai
We have five method here, one is we click on the unlock unblock button here and then when we click on it it will redirect us to this page then the the user is unlocked already and then second method is we change the password.
0:6:23.270 --> 0:6:50.910
Hanna Chai
Uh, this is the error message I got when I get block and then when I click on forgot password and reset to new password right and then my account automatically is being unlocked that that way is a as administrator to unblock for us and the 4th way is a.
0:6:52.950 --> 0:7:0.350
Hanna Chai
When the administrator update the force threshold here ohm.
0:7:2.750 --> 0:7:5.140
Hanna Chai
Maybe he update.
0:7:5.410 --> 0:7:20.780
Hanna Chai
Uh, the number from 11:50 and then I my account is being unlocked and then the 5th way here is ohh we wait for 30 days from the last few log in.
0:7:23.190 --> 0:7:23.620
Hanna Chai
Umm.
0:7:23.670 --> 0:7:26.40
Hanna Chai
Then there is one issue.
0:7:26.50 --> 0:7:32.710
Hanna Chai
Here is uh, the lockup duration, 30 days here is not configurable.
0:7:33.980 --> 0:7:47.620
Hanna Chai
This is the only issue on this and then I also have found out a how to how do we want to come to?
0:7:49.380 --> 0:7:52.720
Hanna Chai
To change the email message.
0:7:55.100 --> 0:8:5.270
Hanna Chai
So we can go to our branding and then choose email template and then find our template for block account email.
0:8:5.690 --> 0:8:33.570
Hanna Chai
So we can configure our center and then the subject of the email and what's the redirect tool URL and then, uh, how long does the URL lifetime is and the default one is ohh 5 days and then I will message can be configured in the HTML tablet.
0:8:35.520 --> 0:8:35.920
Hanna Chai
And then.
0:8:37.880 --> 0:8:40.840
Hanna Chai
This is the error message customization.
0:8:43.520 --> 0:8:56.990
Hanna Chai
So we can configure also under branding here and then custom text we will find the user block message and then we can modify from here and then this is the.
0:8:57.330 --> 0:8:59.960
Hanna Chai
And error message will show.
0:9:2.750 --> 0:9:4.380
Hanna Chai
So that's all for this.
0:9:4.430 --> 0:9:5.220
Hanna Chai
Any question?
0:9:6.890 --> 0:9:8.640
Duraid Wadie
Yeah, I have a few questions.
0:9:8.650 --> 0:9:9.620
Duraid Wadie
I'm thank you for that.
0:9:10.310 --> 0:9:12.80
Duraid Wadie
Does this user lockout?
0:9:12.170 --> 0:9:21.210
Duraid Wadie
Is it comfortable ad you know or we really call it a customer level or is that completely at that full tenant level?
0:9:24.860 --> 0:9:26.740
Hanna Chai
This one is under tenant level.
0:9:28.60 --> 0:9:28.670
Duraid Wadie
OK.
0:9:29.40 --> 0:9:29.310
Hanna Chai
Umm.
0:9:28.680 --> 0:9:33.180
Duraid Wadie
And I guess you guys haven't tried the organization unit yet, right?
0:9:33.420 --> 0:9:34.530
Hanna Chai
Yeah, I haven't tried.
0:9:35.450 --> 0:9:36.100
Duraid Wadie
Yeah.
0:9:36.110 --> 0:9:41.910
Duraid Wadie
I mean the same thing when you're gonna get to the, you know, password complexity and all of that, it'll be good if you check it.
0:9:41.920 --> 0:9:44.530
Duraid Wadie
If it's possible to do this at the organization level.
0:9:45.900 --> 0:9:47.30
Hanna Chai
Hmm, OK.
0:9:47.540 --> 0:9:48.210
Duraid Wadie
Yeah.
0:9:48.260 --> 0:9:49.30
Duraid Wadie
Thank you for that.
0:9:49.820 --> 0:9:51.70
Duraid Wadie
Do you know is there is an option?
0:9:51.80 --> 0:10:0.480
Duraid Wadie
Let's say I can keep on the wrong password, but instead of actually lock it out, actually we call them delay logging in.
0:10:0.750 --> 0:10:6.320
Duraid Wadie
Let's say you won't be able to turn another password for another minute, then another 5 minutes, then another 10 minute.
0:10:6.330 --> 0:10:7.780
Duraid Wadie
Did you see any option like that?
0:10:8.30 --> 0:10:8.370
Duraid Wadie
Or not.
0:10:9.160 --> 0:10:9.470
Duraid Wadie
No.
0:10:9.480 --> 0:10:9.950
Duraid Wadie
OK.
0:10:10.40 --> 0:10:10.220
Duraid Wadie
Yeah.
0:10:8.50 --> 0:10:11.470
Hanna Chai
No, no, no such thing in Auth0, yeah.
0:10:11.770 --> 0:10:12.780
Duraid Wadie
Yeah, that's perfect.
0:10:12.790 --> 0:10:13.290
Duraid Wadie
Thank you for that.
0:10:13.960 --> 0:10:14.400
Hanna Chai
OK.
0:10:14.470 --> 0:10:15.120
Hanna Chai
Thank you.
0:10:15.130 --> 0:10:16.950
Hanna Chai
Then I passed to Ping Ping.
0:10:18.950 --> 0:10:20.470
Ping Ping Lau
He can I share my screen.
0:10:23.70 --> 0:10:24.230
Ping Ping Lau
You can see my screen right?
0:10:25.630 --> 0:10:25.960
Duraid Wadie
Yet.
0:10:25.420 --> 0:10:32.230
Ping Ping Lau
So uh, the first one, I will go to will be on the change log integration for all zero.
0:10:32.420 --> 0:11:3.950
Ping Ping Lau
So before I go to include details a a few points that I would like to highlight here is off 0 already have built-in integration with Amazon Event page where we can actually configure to stream the locks of that be for all the events that's happening and then stream it to event bridge and then off 0 strip configure at the tenant level so it applies to all activities happening on that tenants and the Lambda and Amazon Lambda.
0:11:3.960 --> 0:11:12.730
Ping Ping Lau
Also we can see that it's already have built-in integration with event Bridge for off 0 itself later on in the screen you can see that we don't have to like bigger.
0:11:12.740 --> 0:11:20.630
Ping Ping Lau
Mainly we can just select that the partner is also zero and for Lambda also is integrated with event bridge.
0:11:20.630 --> 0:11:32.610
Ping Ping Lau
We can configure to say the trigger the Lambda when something received from the bridge and also since this is tidy, uh tidy coupled, right?
0:11:32.620 --> 0:11:47.890
Ping Ping Lau
So if if they say we have set up the the screen or event bridge, if it delete the screen in off 0 then it will also automatically delete the the the resources in event Amazon Event Bridge asset.
0:11:47.940 --> 0:11:53.900
Ping Ping Lau
Additional things that we put in like Lambda those will be will not get deleted.
0:11:55.720 --> 0:12:4.670
Ping Ping Lau
So apart from integrating with event bridge or 10H also support multiple integration with other external tools.
0:12:4.680 --> 0:12:11.820
Ping Ping Lau
But then I have only tested with a event page because I think it's already meeting our purpose here.
0:12:12.920 --> 0:12:21.790
Ping Ping Lau
So, uh, with all these features that we have, this will be what I post and then so make it work with the change in integration.
0:12:22.200 --> 0:12:23.990
Ping Ping Lau
So what?
0:12:24.220 --> 0:12:37.910
Ping Ping Lau
In this what I've done is assuming that platform services will be populating those tenant ID and product instance ID into a Dynamo DB during the for that registration.
0:12:38.440 --> 0:13:1.160
Ping Ping Lau
Then on Auth0 we configure the monitoring so that it's been the locks to AWS Event bridge and when event which I received the data it triggers the number of functions and the Lambda functions will be writing to the NSK where change of service will be consuming from the NSK.
0:13:3.120 --> 0:13:22.210
Ping Ping Lau
So, uh, these are a few configuration I think I don't have to go through into details, but I'm just to show that it's already a the integrated service that we can select and then we also allowed to choose what type of events that we want to stream over.
0:13:23.280 --> 0:13:29.130
Ping Ping Lau
Uh, they are quite a long list of events that we can capture in the Auth0.
0:13:29.180 --> 0:13:33.130
Ping Ping Lau
So yeah, the good news is we can also catch a lot out.
0:13:33.420 --> 0:13:42.810
Ping Ping Lau
So I think we can capture that nearly when we are doing coordinator and then these are mostly on the user login out activities.
0:13:42.860 --> 0:13:52.850
Ping Ping Lau
And also we have options on a management API where we are using it quite a lot in other tickets to achieve some customizations.
0:13:54.70 --> 0:13:57.870
Ping Ping Lau
Uh, I haven't able to repeat.
0:13:58.40 --> 0:14:2.830
Ping Ping Lau
I mean to to test all the events because some I don't know how to make it trigger.
0:14:3.220 --> 0:14:5.150
Ping Ping Lau
Yeah, but you can see here it's quite a long list.
0:14:7.680 --> 0:14:10.850
Ping Ping Lau
And then, uh, on Amazon configurations.
0:14:10.910 --> 0:14:11.490
Ping Ping Lau
Uh.
0:14:12.120 --> 0:14:35.360
Ping Ping Lau
When we configure the the the stream to event bridge from Auth0, they view straight away to see people get this appear in Ms Son and then what we can do is but you will be in the pending status but we will have to associate it with the event bus then the the streaming will be running.
0:14:37.480 --> 0:14:37.960
Ping Ping Lau
Umm.
0:14:39.860 --> 0:14:49.130
Ping Ping Lau
And then, yeah, this this is a simple simple under functions that I used to so that it listens to the events in the event bridge.
0:14:49.180 --> 0:14:52.850
Ping Ping Lau
And then here it's writing to the NSK.
0:14:55.650 --> 0:15:13.960
Ping Ping Lau
Uh, so just want to show here that when we come to to complete the whole configuration, we also need the rules in Amazon and we can see here is we we can straight away select of zero from the partner instead of like configuring those rules manually.
0:15:14.750 --> 0:15:21.670
Ping Ping Lau
So all these are already integrated integrated, so I will just do a quick demo.
0:15:21.880 --> 0:15:31.510
Ping Ping Lau
Uh, this is the Kafka UI for the MSK, but I have a because we have lots of topics here.
0:15:31.520 --> 0:15:35.370
Ping Ping Lau
I I and it's used by other tester for other testing purpose.
0:15:35.620 --> 0:15:38.890
Ping Ping Lau
So I have created this topics to do this testing.
0:15:40.130 --> 0:15:44.480
Ping Ping Lau
Let me just clear out everything first.
0:15:44.490 --> 0:15:46.60
Ping Ping Lau
So that it's easier for us to see.
0:15:47.140 --> 0:16:0.940
Ping Ping Lau
And then, uh, and we use this, this is application and deploy into KS and it will be pointing to the Office 0 for authentications.
0:16:5.660 --> 0:16:10.170
Ping Ping Lau
For these other test using uh Federated login in Asia.
0:16:12.730 --> 0:16:17.180
Ping Ping Lau
Ah yeah, so this this for the next tickets to discuss.
0:16:17.190 --> 0:16:28.70
Ping Ping Lau
But OK, so after successfully log in then we should expect to see the those events be published to uh.
0:16:28.620 --> 0:16:31.620
Ping Ping Lau
In this case you will take over, yeah, so.
0:16:33.780 --> 0:16:36.570
Ping Ping Lau
Yeah, we can see these events is a Federated thing.
0:16:37.600 --> 0:16:50.780
Ping Ping Lau
And if we check against in Auth0, we can see that these are the few uh events accepting, so we should be getting here.
0:16:53.40 --> 0:16:58.940
Ping Ping Lau
Yeah, cheap will be I haven't configured to to stream all the events that is happening here.
0:17:1.160 --> 0:17:1.590
Ping Ping Lau
Yeah.
0:17:1.600 --> 0:17:6.600
Ping Ping Lau
So, uh, this is how we can do the change of integration.
0:17:8.560 --> 0:17:10.550
Ping Ping Lau
Uh, any any questions about this?
0:17:12.360 --> 0:17:17.110
Duraid Wadie
I think I think I'm just wondering why did you write it as See?
0:17:18.200 --> 0:17:20.820
Ping Ping Lau
Oh, because we had.
0:17:21.440 --> 0:17:27.400
Ping Ping Lau
We have a longer development, so it's a required additional development.
0:17:28.930 --> 0:17:29.460
Duraid Wadie
OK.
0:17:29.340 --> 0:17:30.20
Ping Ping Lau
So yeah.
0:17:29.530 --> 0:17:31.340
Duraid Wadie
But really it's just a Lambda.
0:17:31.350 --> 0:17:32.610
Duraid Wadie
You need to do that set.
0:17:34.160 --> 0:17:37.340
Ping Ping Lau
Fall clothing wise, yes and that.
0:17:46.170 --> 0:17:46.660
Ping Ping Lau
E.
0:17:36.650 --> 0:17:51.170
Duraid Wadie
Yeah, I wouldn't write this as I see I think big thing is to to yeah, because they've actually done all of the hook into the event bridge creation and we can relate the Lambda just taking it from there and just pushing it to the queue, right.
0:17:52.30 --> 0:17:52.350
Ping Ping Lau
I guess.
0:17:53.450 --> 0:17:53.920
Duraid Wadie
Yeah.
0:17:53.930 --> 0:17:54.140
Duraid Wadie
Yeah.
0:17:54.150 --> 0:17:54.520
Duraid Wadie
OK.
0:17:54.370 --> 0:17:54.780
Ping Ping Lau
Yeah.
0:17:54.680 --> 0:17:55.380
Duraid Wadie
But perfect.
0:17:55.390 --> 0:17:55.600
Duraid Wadie
Yeah.
0:17:54.820 --> 0:17:57.270
Ping Ping Lau
Ohh yeah umm, but what one?
0:17:55.610 --> 0:17:59.0
Duraid Wadie
So and there'll be some charge right on on this.
0:17:59.10 --> 0:17:59.620
Duraid Wadie
But I don't think so.
0:17:59.630 --> 0:18:2.540
Duraid Wadie
There will be nothing really, like maybe 50.
0:18:2.550 --> 0:18:6.940
Duraid Wadie
Whatever is dollars a month what?
0:18:4.220 --> 0:18:7.380
Ping Ping Lau
Yeah, they're regarding the pricing, right?
0:18:8.530 --> 0:18:11.960
Ping Ping Lau
Uh, are you saying this that?
0:18:12.450 --> 0:18:13.620
Duraid Wadie
No, but I don't think so.
0:18:13.630 --> 0:18:14.760
Duraid Wadie
The expensive is it at all?
0:18:15.860 --> 0:18:16.350
Ping Ping Lau
Yeah.
0:18:16.360 --> 0:18:20.690
Ping Ping Lau
And I I just realized that I think I have done this calculation wrongly.
0:18:20.700 --> 0:18:28.60
Ping Ping Lau
It's a should be times 30 and this is one day, but anyway it's still I think it's still very cheap.
0:18:32.290 --> 0:18:32.880
Duraid Wadie
Yeah, yeah.
0:18:36.790 --> 0:18:37.740
Duraid Wadie
You per day.
0:18:28.220 --> 0:18:38.420
Ping Ping Lau
Probably it's below 1000 per month for 2,000,000 user and with the assumption said, yeah, we're talking five times, but they yeah.
0:18:37.750 --> 0:18:38.880
Duraid Wadie
Yeah, yeah.
0:18:38.890 --> 0:18:45.850
Duraid Wadie
I mean tabanus with the logs that are not cheap thing to deal with because even if you need to deal with it with key clock, right?
0:18:45.860 --> 0:18:46.940
Duraid Wadie
It's the similar problem.
0:18:46.950 --> 0:18:47.120
Duraid Wadie
What?
0:18:47.130 --> 0:18:49.470
Duraid Wadie
You gonna put all of the slogan in the RDS cluster?
0:18:49.480 --> 0:18:50.710
Duraid Wadie
Is gonna get polluted.
0:18:50.720 --> 0:18:51.670
Duraid Wadie
It's similar way really.
0:18:52.290 --> 0:18:53.320
Ping Ping Lau
He yeah.
0:18:52.640 --> 0:18:59.570
Duraid Wadie
It's still not cheap thing and that's why all all auth providers here, they give you a A.
0:18:59.580 --> 0:19:4.130
Duraid Wadie
You know what we call it as like a month period of logs and that's it.
0:19:4.700 --> 0:19:4.980
Ping Ping Lau
Umm.
0:19:4.420 --> 0:19:6.0
Duraid Wadie
After that they just dispose all of them.
0:19:7.410 --> 0:19:7.880
Ping Ping Lau
OK.
0:19:8.500 --> 0:19:8.720
Duraid Wadie
Yeah.
0:19:7.990 --> 0:19:12.920
Ping Ping Lau
And the good thing about this is is happens in almost at near real time.
0:19:23.390 --> 0:19:23.780
Duraid Wadie
Umm.
0:19:13.270 --> 0:19:27.170
Ping Ping Lau
It's not like we go to two periodically, so I I think can see the stuff like when I log in, then within a few seconds, sometimes it's lesser than seconds, then it will, it will appear in the kapka.
0:19:28.260 --> 0:19:32.520
Duraid Wadie
Yeah, but does auth 0 would actually delete the logs after 30 days?
0:19:32.530 --> 0:19:33.320
Duraid Wadie
They're all logs.
0:19:34.140 --> 0:19:35.310
Ping Ping Lau
I'm not sure about that.
0:19:35.320 --> 0:19:38.0
Ping Ping Lau
I think it's written somewhere here, but I didn't explore that.
0:19:38.640 --> 0:19:46.330
Duraid Wadie
Yeah, but I'm to be honest with the most of provider won't leave keep these logs for a long time, so that's why it's it's.
0:19:46.400 --> 0:19:48.510
Duraid Wadie
Yeah, we need to implement this ready day one.
0:19:48.720 --> 0:19:51.80
Duraid Wadie
I would say take all of the user events.
0:19:51.90 --> 0:19:51.690
Duraid Wadie
You know that.
0:19:54.170 --> 0:19:54.350
Ping Ping Lau
Yeah.
0:19:51.700 --> 0:19:57.160
Duraid Wadie
You you showed all the user events and actually log them straight away to the change log.
0:20:0.440 --> 0:20:1.720
Ping Ping Lau
Ohh OK this Lisa.
0:20:1.770 --> 0:20:3.320
Duraid Wadie
MFA is not the back end here.
0:20:3.330 --> 0:20:5.620
Duraid Wadie
All the user you know event 1st.
0:20:6.70 --> 0:20:9.760
Ping Ping Lau
Umm, yeah, OK and I.
0:20:9.10 --> 0:20:11.900
Duraid Wadie
Because reality after 30 days, you won't see these logs anymore.
0:20:18.440 --> 0:20:18.940
Ping Ping Lau
He.
0:20:11.910 --> 0:20:19.970
Duraid Wadie
Probably I don't know, but that's my assumption because agile does a IBM one login and does it, all of them do it after a certain period of time, they delete them.
0:20:21.430 --> 0:20:21.720
Ping Ping Lau
Yeah.
0:20:21.730 --> 0:20:22.420
Ping Ping Lau
Yeah, sure.
0:20:23.250 --> 0:20:23.560
Ping Ping Lau
Yeah.
0:20:23.570 --> 0:20:30.400
Ping Ping Lau
I I think with this Terry integrated also we don't have to worry about scaling up on the other side.
0:20:29.900 --> 0:20:30.940
Duraid Wadie
I know, yeah.
0:20:30.670 --> 0:20:31.370
Ping Ping Lau
Yeah.
0:20:31.520 --> 0:20:34.40
Ping Ping Lau
So they they didn't explore other methods.
0:20:34.50 --> 0:20:35.670
Ping Ping Lau
I think this is good enough.
0:20:35.640 --> 0:20:35.990
Duraid Wadie
This.
0:20:36.400 --> 0:20:37.250
Duraid Wadie
That's perfect.
0:20:37.260 --> 0:20:37.460
Duraid Wadie
Better.
0:20:37.470 --> 0:20:38.730
Duraid Wadie
So that's exactly what we need.
0:20:38.740 --> 0:20:43.750
Duraid Wadie
I mean, this is really how remember when we talk about let's say cross clouds eventing.
0:20:43.760 --> 0:20:44.650
Duraid Wadie
That's how they do them.
0:20:44.660 --> 0:20:45.920
Duraid Wadie
They do them with event projects.
0:20:46.490 --> 0:20:47.50
Ping Ping Lau
Yeah, yeah.
0:20:49.460 --> 0:20:50.50
Ping Ping Lau
Umm.
0:20:50.730 --> 0:20:56.170
Ping Ping Lau
So yeah, I think for changelog not much issue that we can see.
0:20:56.880 --> 0:21:16.170
Ping Ping Lau
Uh, then I'll move on to the next one will be 266, which is a physical sent that she needs us now that it can pop up, but I will go through this full of 0 for this ticket.
0:21:16.180 --> 0:21:26.50
Ping Ping Lau
We want to see whether we are able to bring up the consent page as what we see in keycloak and for Office 0 it actually have a consent page but we cannot customize it.
0:21:26.530 --> 0:21:28.960
Ping Ping Lau
There is a big influence in Page to say it aloud.
0:21:29.90 --> 0:21:41.150
Ping Ping Lau
The application to access, but it's not like a allowing a giving a consent for the to to and and showing the privacy for that I don't see.
0:21:41.160 --> 0:21:45.680
Ping Ping Lau
We can customize it, but I think Hanna is working on the other ticket about a screen customizations.
0:21:46.270 --> 0:21:49.200
Ping Ping Lau
If you can make it work, then we don't have to go through this.
0:21:49.270 --> 0:21:53.670
Ping Ping Lau
But if he can't, then this is still a work, a way that we can achieve it.
0:21:54.810 --> 0:21:55.260
Ping Ping Lau
So for.
0:21:55.70 --> 0:21:58.710
Duraid Wadie
I mean, I think Ping Ping, if we can't customize it, right?
0:21:59.330 --> 0:22:8.340
Duraid Wadie
If it's sort of sponse of enough, you know that page I we can just change a color to make it look like a theme, and we can put our hyperlinks in it.
0:22:9.340 --> 0:22:10.20
Duraid Wadie
That's good enough.
0:22:10.720 --> 0:22:11.130
Ping Ping Lau
Yeah.
0:22:11.180 --> 0:22:19.450
Ping Ping Lau
So I'm not sure whether it can be done because customization screen, I don't see it can customize a consent page.
0:22:19.500 --> 0:22:25.490
Ping Ping Lau
You can customize log in can customize MFA, but nearby Lee hardly Hanna to find out was.
0:22:27.890 --> 0:22:29.660
Ping Ping Lau
Yeah, but for for this ticket, right?
0:22:29.790 --> 0:22:37.210
Ping Ping Lau
What I have tested is to host the consent page in the, let's say external.
0:22:37.220 --> 0:22:38.240
Ping Ping Lau
Let's type for this case.
0:22:38.250 --> 0:22:45.650
Ping Ping Lau
I'm using a S bucket to host static page and comparing to the one that we did with a cognito right.
0:22:45.660 --> 0:23:5.220
Ping Ping Lau
This is a lot more simpler because we don't involve any other services that do like API course because the, uh actions in off 0 is good enough for us to let us uh passed to ascetic page and every direct act by passing in the state.
0:23:6.160 --> 0:23:7.180
Ping Ping Lau
So uh.
0:23:10.500 --> 0:23:12.680
Ping Ping Lau
So maybe I can just show here.
0:23:13.780 --> 0:23:16.910
Ping Ping Lau
Ohh what I mean here in.
0:23:19.0 --> 0:23:28.850
Ping Ping Lau
Uh, this is the sample static page that we are doing and then when user click on allow consent like it just redirect back to to off 0.
0:23:29.80 --> 0:23:36.890
Ping Ping Lau
But very important thing here is because to pass that the state we get from Auth0, otherwise it won't be able to complete the process.
0:23:38.190 --> 0:24:6.680
Ping Ping Lau
So I think this is a somehow help us to make sure that the whatever they were doing is protected then is it someone cannot simply call this link and then make the consent accepted without going through the proper process then uh, this is the bucket configuration and in office Herrero in this case we are using the actions.
0:24:7.80 --> 0:24:9.680
Ping Ping Lau
So I was there before actions.
0:24:9.690 --> 0:24:13.10
Ping Ping Lau
They are using flow and they're using Blues and.
0:24:14.120 --> 0:24:22.120
Ping Ping Lau
And I think, but from what I read is going to end of life very soon and they recommend to use action instead.
0:24:22.400 --> 0:24:29.930
Ping Ping Lau
So for this case what we do is we create a a coleslaw in a log in actions.
0:24:30.420 --> 0:24:36.120
Ping Ping Lau
So when user to log in then it trigger a set of code.
0:24:36.980 --> 0:24:43.630
Ping Ping Lau
So then in this code what it does is, uh, just check we are using the user meta meta data.
0:24:43.680 --> 0:24:46.410
Ping Ping Lau
So we add a additional flag there.
0:24:46.460 --> 0:24:54.590
Ping Ping Lau
So if the flag is not true, then it just redirect to the external page by passing in the the state.
0:24:56.370 --> 0:25:0.580
Ping Ping Lau
Then when they come back from the external page then we update the consent.
0:25:0.590 --> 0:25:6.240
Ping Ping Lau
So it's something very simple talking payment then.
0:25:6.250 --> 0:25:14.120
Ping Ping Lau
Uh, yeah, we just attach the action to the log in flow.
0:25:16.440 --> 0:25:20.690
Ping Ping Lau
So uh, that's not I I use it. The Council.
0:25:20.700 --> 0:25:20.950
Ping Ping Lau
I just.
0:25:22.740 --> 0:25:26.940
Ping Ping Lau
OK, go through only playing so umm.
0:25:46.490 --> 0:25:50.30
Ping Ping Lau
So we are able to achieve what we got in keycloak.
0:25:53.610 --> 0:25:55.160
Ping Ping Lau
This offer the closing pitch.
0:25:57.400 --> 0:25:57.870
Ping Ping Lau
Any.
0:25:57.500 --> 0:25:57.950
Duraid Wadie
Perfect.
0:25:57.960 --> 0:25:59.790
Duraid Wadie
So yeah, big big.
0:26:6.890 --> 0:26:9.600
Ping Ping Lau
I think this is quite good enough, yeah.
0:25:59.800 --> 0:26:12.210
Duraid Wadie
So I mean, is that not good enough already or you guys think it's, I mean the yeah, that's what I'm saying is just tossing a static page somewhere.
0:26:14.70 --> 0:26:14.290
Ping Ping Lau
Yeah.
0:26:14.450 --> 0:26:20.500
Duraid Wadie
I'm just wondering, you know, those links that you showed that they those links come from, let's say our website, right?
0:26:22.590 --> 0:26:23.100
Ping Ping Lau
Which Lee?
0:26:24.410 --> 0:26:24.560
Ping Ping Lau
The.
0:26:24.150 --> 0:26:25.520
Duraid Wadie
On the constant page itself.
0:26:26.90 --> 0:26:26.710
Ping Ping Lau
Oh, yeah, yeah.
0:26:26.760 --> 0:26:28.550
Ping Ping Lau
Yes, on the continuation.
0:26:27.520 --> 0:26:32.430
Duraid Wadie
Yeah, you know that that tick box when you ticket and you consent, right?
0:26:32.900 --> 0:26:33.100
Ping Ping Lau
Umm.
0:26:37.270 --> 0:26:37.480
Ping Ping Lau
No.
0:26:33.440 --> 0:26:38.410
Duraid Wadie
Does that actually do anything to our user service so you won't see this again?
0:26:39.980 --> 0:26:45.130
Ping Ping Lau
Uh, when you say user service, I assume you're talking about like the platform user service.
0:26:45.670 --> 0:26:45.920
Duraid Wadie
Yeah.
0:26:46.930 --> 0:26:51.700
Ping Ping Lau
And now for this game reason we don't interact with any outside so services.
0:26:52.170 --> 0:26:54.740
Ping Ping Lau
So everything is handled within of 0 itself.
0:26:55.780 --> 0:26:56.250
Duraid Wadie
Yeah.
0:26:56.260 --> 0:27:3.220
Duraid Wadie
So I mean, you know when they're gonna take that box, so next time they shouldn't be seeing that consent page again, that makes sense.
0:27:3.590 --> 0:27:3.820
Ping Ping Lau
Yeah.
0:27:3.830 --> 0:27:5.260
Ping Ping Lau
Yeah, they they won't see it again.
0:27:5.850 --> 0:27:9.400
Ping Ping Lau
So this now when I log in you see it pop up right?
0:27:10.250 --> 0:27:10.470
Duraid Wadie
Yeah.
0:27:9.630 --> 0:27:13.510
Ping Ping Lau
Or let me just pick it can let me.
0:27:13.170 --> 0:27:14.760
Duraid Wadie
So maybe I didn't get this actually.
0:27:14.770 --> 0:27:15.840
Duraid Wadie
How did you do that then?
0:27:15.910 --> 0:27:16.580
Duraid Wadie
If yeah.
0:27:19.160 --> 0:27:28.600
Ping Ping Lau
So this is the user that I use for testing and I'm using the meta data so.
0:27:28.930 --> 0:27:29.520
Duraid Wadie
Ah, OK.
0:27:29.530 --> 0:27:30.10
Duraid Wadie
OK, sorry.
0:27:30.20 --> 0:27:30.170
Duraid Wadie
Yeah.
0:27:30.180 --> 0:27:30.560
Duraid Wadie
Yeah, that's.
0:27:30.570 --> 0:27:31.500
Duraid Wadie
That makes sense now, OK.
0:27:31.890 --> 0:27:32.80
Ping Ping Lau
Yeah.
0:27:33.440 --> 0:27:34.760
Duraid Wadie
Yeah, yeah, that makes sense.
0:27:33.500 --> 0:27:39.460
Ping Ping Lau
So if they say uh, they have given the consensus, then the meta data.
0:27:39.500 --> 0:27:42.820
Ping Ping Lau
Ohh yeah, I haven't test logged in using this so I will do it now.
0:27:52.580 --> 0:27:52.870
Ping Ping Lau
Yeah.
0:27:52.880 --> 0:27:59.810
Ping Ping Lau
So now that the meta data is empty right beside the empty or forced in this, this screen will pop up.
0:28:0.640 --> 0:28:5.230
Ping Ping Lau
So when we asset then it will pass back to the.
0:28:7.640 --> 0:28:11.690
Ping Ping Lau
Auth0 actions then if we finish it now.
0:28:20.500 --> 0:28:23.140
Ping Ping Lau
So we will get this consent given to true.
0:28:24.230 --> 0:28:24.660
Duraid Wadie
Yeah.
0:28:24.110 --> 0:28:25.260
Ping Ping Lau
So now if I.
0:28:24.670 --> 0:28:27.640
Duraid Wadie
So why am I asking this questions right?
0:28:27.650 --> 0:28:36.530
Duraid Wadie
Because the legal teams usually change the terms and conditions and they wanna see the constant page actually appears again.
0:28:37.780 --> 0:28:45.200
Ping Ping Lau
Also, I think if that happens then what we can do is using the management API and update to this to force again.
0:28:45.890 --> 0:28:46.870
Duraid Wadie
Yeah, yeah.
0:28:46.680 --> 0:28:47.30
Ping Ping Lau
Yeah.
0:28:47.40 --> 0:28:48.460
Ping Ping Lau
Then it will show up again.
0:28:49.530 --> 0:28:49.920
Duraid Wadie
Yeah.
0:28:50.270 --> 0:28:50.740
Duraid Wadie
Yeah.
0:28:58.650 --> 0:28:59.20
Ping Ping Lau
Yeah. OK.
0:28:50.750 --> 0:29:0.600
Duraid Wadie
So I think you can add this part of the work that needs to happen in the platform level because that's something definitely happens differently.
0:29:1.480 --> 0:29:1.760
Ping Ping Lau
Umm.
0:29:0.610 --> 0:29:9.300
Duraid Wadie
So you because at the moment it's when you upload the new thing and the and the consensus was actually can trigger this automatically.
0:29:10.810 --> 0:29:10.970
Ping Ping Lau
Yeah.
0:29:13.190 --> 0:29:14.370
Ping Ping Lau
OK, I will add that in.
0:29:15.480 --> 0:29:15.900
Duraid Wadie
Thank you.
0:29:15.470 --> 0:29:31.500
Ping Ping Lau
So uh, he the solutions will be, yeah, we we can call the management API to update the users better data and we have been using it in other actions for the customizations that we can go through later on.
0:29:32.850 --> 0:29:33.780
Duraid Wadie
And it doesn't matter.
0:29:33.790 --> 0:29:37.870
Duraid Wadie
Ping Ping If that user is a basic user or a Federated user, right?
0:29:39.650 --> 0:29:42.240
Ping Ping Lau
Yeah, they they the user also we can show.
0:29:43.530 --> 0:29:43.830
Duraid Wadie
OK.
0:29:43.370 --> 0:29:50.330
Ping Ping Lau
So is that as long as we attach it in the block in those log in this?
0:29:51.690 --> 0:29:51.870
Duraid Wadie
Yeah.
0:29:57.870 --> 0:30:4.790
Ping Ping Lau
You can still have time, so the next one will be UH-267 from 6-7.
0:30:4.850 --> 0:30:6.660
Ping Ping Lau
This is the customizable usage.
0:30:6.670 --> 0:30:9.900
Ping Ping Lau
I need this one have quite a lot to go through.
0:30:9.950 --> 0:30:12.340
Ping Ping Lau
I will go slower because I think otherwise.
0:30:12.440 --> 0:30:13.800
Ping Ping Lau
You can get lost very easily.
0:30:14.850 --> 0:30:18.430
Ping Ping Lau
Ah, soak for these sections.
0:30:18.440 --> 0:30:20.990
Ping Ping Lau
I first I will cover three parts.
0:30:21.90 --> 0:30:22.590
Ping Ping Lau
One is a point.
0:30:22.600 --> 0:30:43.780
Ping Ping Lau
The user creation and then we can compare between Auth0 and keycloak the behavior and then after that we can see what are the customizations that we can do so that we can achieve what we got in keycloak and then after user is created when user first logged in this is what had the single style about the consent page.
0:30:43.910 --> 0:30:53.610
Ping Ping Lau
But apart from consent page, also in key code that you will allow us to do a reset password evil actually force us to do a reset password and.
0:30:56.90 --> 0:31:1.820
Ping Ping Lau
In in KEYCLOAK HBP do validate there isn't.
0:31:1.890 --> 0:31:4.220
Ping Ping Lau
There are some mandatory attributes as required.
0:31:4.450 --> 0:31:7.960
Ping Ping Lau
So for example, I things like tenant ID, user ID.
0:31:8.10 --> 0:31:12.150
Ping Ping Lau
So if those attributes are missing like I say, yeah, we have an external.
0:31:14.90 --> 0:31:17.290
Ping Ping Lau
External user and those attributes are missing in keycloak.
0:31:17.670 --> 0:31:19.610
Ping Ping Lau
Then we should fill the log in.
0:31:21.270 --> 0:31:28.340
Ping Ping Lau
So for user creation, uh, I make a comparison here.
0:31:28.630 --> 0:31:31.640
Ping Ping Lau
When we create a user in key clock.
0:31:33.280 --> 0:31:35.910
Ping Ping Lau
In Auth0 we will receive email.
0:31:36.60 --> 0:31:37.590
Ping Ping Lau
Same goes for keycloak.
0:31:37.600 --> 0:31:40.290
Ping Ping Lau
We will receive and welcome email.
0:31:40.500 --> 0:31:48.930
Ping Ping Lau
So you can see here for people like we are getting a welcome to Ideagen Home and then ask a reset password and then have some conditional info here.
0:31:49.560 --> 0:32:0.470
Ping Ping Lau
But for Office 0 is so it also sent out an email, but then you will ask us to verify the Accounts instead of asking to reset password.
0:32:3.20 --> 0:32:14.310
Ping Ping Lau
Then if let's say we click on this then it will it will still go to this email where we find and pitch and and that's it for Auth0.
0:32:14.780 --> 0:32:38.100
Ping Ping Lau
But for keycloak, yeah, from this if you click on reset password then next it will go to this screen to say perform the following actions and they will be click on proceed and it will go to the update password page and after we updated the password Now we get this password has been reset is going to your application to log in.
0:32:40.690 --> 0:32:56.700
Ping Ping Lau
So the customizations that we can do in a of 0 is first we can disable the verify email which it looks like this because ask for ask us to verify your accounts.
0:32:57.280 --> 0:33:2.780
Ping Ping Lau
So what we can do here is there is an option to.
0:33:5.150 --> 0:33:6.830
Ping Ping Lau
The Sable they were invite again.
0:33:9.20 --> 0:33:21.90
Ping Ping Lau
So this is a step to do it, and then the next thing is we want to show we want to send an email to the user but customize the email content.
0:33:21.100 --> 0:33:27.900
Ping Ping Lau
So they ask the user to do a reset password, so we can do that by using a.
0:33:30.680 --> 0:33:45.750
Ping Ping Lau
Actions and then attach it to the post user registration flow so that be sent out a reset email password and a example will be the the the action could will be like this so.
0:33:48.540 --> 0:33:54.900
Ping Ping Lau
That means whenever user already stored then this is the management API that I mentioned the sound.
0:33:55.700 --> 0:34:39.620
Ping Ping Lau
Ohh what we can do is we call the API so that it trigger an email asking the user to to reset password and this this is the end point is a fixed endpoint in of zero then after that we attach it to the post user registration flow so that when user is registered then we create we create a we send it yeah we trigger this actions and then the next thing is uh we need to customize the email because default are the off 0 email it always looks something like this so we want to have something.
0:34:39.700 --> 0:34:40.0
Ping Ping Lau
Like this?
0:34:42.770 --> 0:35:2.550
Ping Ping Lau
So, uh, we can also customize the email and before we are able to use before we are able to customize the email, we can we have to use our custom email provider and the good thing here is they have supported quite a number of email provider including send grid.
0:35:3.360 --> 0:35:11.830
Ping Ping Lau
But there is a note here to say that if we want to use if our email provider is running behind firewall, we have to do all this white listing.
0:35:12.60 --> 0:35:15.210
Ping Ping Lau
But when I do the testing I I don't have to request.
0:35:15.600 --> 0:35:18.310
Ping Ping Lau
Whitelisting, probably inside.
0:35:18.320 --> 0:35:22.220
Ping Ping Lau
We don't be allowed puppy access or I don't know this.
0:35:22.400 --> 0:35:24.150
Ping Ping Lau
For me, this IP code is really wide.
0:35:24.160 --> 0:35:25.830
Ping Ping Lau
Instead then?
0:35:25.840 --> 0:35:26.240
Ping Ping Lau
Uh.
0:35:26.840 --> 0:35:39.940
Ping Ping Lau
Just configure the API key for SANGRID and then after that we can go to the branding and customize the change password tablet so.
0:35:42.30 --> 0:35:50.340
Ping Ping Lau
What I wanted to show here is because the reset password right, we want to send when the user is first logged in.
0:35:50.630 --> 0:36:2.940
Ping Ping Lau
But we want to display a welcome message, but user can also click on the reset password in the login from the login page and uh for Auth0.
0:36:2.950 --> 0:36:5.640
Ping Ping Lau
It doesn't have two different templates.
0:36:5.650 --> 0:36:16.660
Ping Ping Lau
It's using the same templates for that, but the good thing here is again, we can make use of the meta data and then we can do some checking here to decide what to display under different conditions.
0:36:17.90 --> 0:36:21.180
Ping Ping Lau
So for example, we store A is password reset flag.
0:36:22.200 --> 0:36:30.250
Ping Ping Lau
So if he, if he's already reset, then we say this is a a password change request.
0:36:30.700 --> 0:36:41.850
Ping Ping Lau
But if it is not yet set and this is first time to, it's a welcome even then we would say welcome email, but we can still show the reset password, right?
0:36:46.420 --> 0:36:46.690
Ping Ping Lau
Yeah.
0:36:46.700 --> 0:36:49.900
Ping Ping Lau
So after we customize the email right, we can actually get something like this.
0:36:55.800 --> 0:37:5.530
Ping Ping Lau
And if user click on the reset password from the login page after they have logged in before then the email will show like this.
0:37:7.980 --> 0:37:12.430
Ping Ping Lau
I think I pause it for a while for the user create in.
0:37:12.440 --> 0:37:13.650
Ping Ping Lau
Any questions about this?
0:37:13.660 --> 0:37:15.670
Ping Ping Lau
Or do you want to go to a table for this?
0:37:19.940 --> 0:37:23.350
Duraid Wadie
I think from what I've seen Ping Ping here it's it's.
0:37:23.360 --> 0:37:26.430
Duraid Wadie
This is for all of the suggests for the basic user creation, right?
0:37:27.900 --> 0:37:29.360
Ping Ping Lau
Yes, for basic user creation.
0:37:30.460 --> 0:37:30.620
Duraid Wadie
Yeah.
0:37:31.330 --> 0:37:36.540
Duraid Wadie
And I think you really mimic the exact similar way to kick clock from what I've seen so far.
0:37:38.670 --> 0:37:41.100
Ping Ping Lau
Yeah, for for this one. It works.
0:37:42.110 --> 0:37:43.990
Ping Ping Lau
Yeah, we can do whatever keycloak can do.
0:37:45.70 --> 0:37:46.860
Duraid Wadie
Yeah, yeah, yeah.
0:37:46.870 --> 0:37:48.80
Duraid Wadie
I don't have any other questions.
0:37:48.90 --> 0:37:49.410
Duraid Wadie
I think that's it looks really good.
0:37:51.740 --> 0:37:55.430
Ping Ping Lau
OK, then the the second one will be on first login.
0:37:55.880 --> 0:37:58.731
Ping Ping Lau
So first login i.e.
0:38:0.160 --> 0:38:1.410
Ping Ping Lau
Let me just go through.
0:38:1.420 --> 0:38:2.810
Ping Ping Lau
I think they might.
0:38:2.820 --> 0:38:4.390
Ping Ping Lau
I just play played it again.
0:38:4.400 --> 0:38:5.990
Ping Ping Lau
This is just about 30 seconds.
0:38:6.560 --> 0:38:12.610
Ping Ping Lau
So for keycloak I when we first log in then it will ask for the consent.
0:38:21.180 --> 0:38:23.540
Ping Ping Lau
Then you will pop up a password reset page.
0:38:29.370 --> 0:38:32.330
Ping Ping Lau
So after that, yeah, this is how it will be ended.
0:38:32.340 --> 0:38:38.680
Ping Ping Lau
Then we should be good to go through the login again and then compare to Office 0.
0:38:40.260 --> 0:38:41.450
Ping Ping Lau
This is the default behavior.
0:38:57.950 --> 0:39:5.620
Ping Ping Lau
Though this is the transient page and needs us now default it will pop up something like this and then it won't ask to reset.
0:39:5.660 --> 0:39:8.880
Ping Ping Lau
So you just go in to the applications directly.
0:39:10.40 --> 0:39:11.200
Ping Ping Lau
So uh.
0:39:13.420 --> 0:39:14.770
Ping Ping Lau
Policies kick out.
0:39:14.780 --> 0:39:29.90
Ping Ping Lau
We show the terms that the consent page and Auth0 also have the consent page, but is is the different purpose is to allow the applications and then for kicker we have the he said password but obviously we don't have a reset password.
0:39:29.840 --> 0:39:42.70
Ping Ping Lau
So for this to handle the consent of, we have seen it is now in the consent page but to for the reset password, right?
0:39:42.780 --> 0:39:43.610
Ping Ping Lau
Yeah, big, big.
0:39:43.780 --> 0:39:45.400
Ping Ping Lau
We have two solutions here.
0:39:46.390 --> 0:39:48.940
Ping Ping Lau
Uh one is we uh.
0:39:48.950 --> 0:39:57.160
Ping Ping Lau
Sorry for before that we are able to actually disable the default of 0 consent page that we see this now.
0:39:57.570 --> 0:40:17.810
Ping Ping Lau
So they also allow us to do this, and this is the step that we can do, but I I will highlight here is it only have it only can be done for what they call a first party client which means all the all the applications and the sister from the management console.
0:40:18.230 --> 0:40:22.840
Ping Ping Lau
But for example, if you see we're running from local hole side then we cannot be.
0:40:22.890 --> 0:40:28.230
Ping Ping Lau
We can't hide the consent page, but I think yeah, there is OK for the local host.
0:40:30.710 --> 0:40:35.400
Ping Ping Lau
So for reset password there are two options that can think of.
0:40:35.790 --> 0:40:54.670
Ping Ping Lau
One is a relate use of uh sending the reset password email when a user login for the for the first time and this is the I the click here and then we we attach it to this.
0:40:54.890 --> 0:40:56.80
Ping Ping Lau
So I want to show.
0:40:56.130 --> 0:41:1.650
Ping Ping Lau
I think we go through the process because we might need some decision over here to go for which options.
0:41:2.770 --> 0:41:5.630
Ping Ping Lau
Let me configure this first.
0:41:8.190 --> 0:41:8.580
Ping Ping Lau
In.
0:41:12.990 --> 0:41:14.930
Ping Ping Lau
So reset password.
0:41:30.150 --> 0:41:30.680
Ping Ping Lau
I will.
0:41:33.110 --> 0:41:33.410
Ping Ping Lau
I would.
0:41:35.40 --> 0:41:36.140
Ping Ping Lau
Peanut pound.
0:41:56.740 --> 0:42:1.470
Ping Ping Lau
So when a user is created then we will get.
0:42:3.390 --> 0:42:5.840
Ping Ping Lau
Please welcome email and then.
0:42:7.960 --> 0:42:9.710
Ping Ping Lau
We do a reset password from here.
0:42:16.240 --> 0:42:19.550
Ping Ping Lau
So the good thing about this option is we.
0:42:21.530 --> 0:42:28.700
Ping Ping Lau
We uh, we are using back the change password screen and give all the behavior that we have.
0:42:29.130 --> 0:42:34.300
Ping Ping Lau
So for example, let's say I'm changing password like then we will be getting all this.
0:42:34.660 --> 0:42:36.320
Ping Ping Lau
Uh notes here.
0:42:39.750 --> 0:42:42.250
Ping Ping Lau
And then I can do a reset password here but.
0:42:44.580 --> 0:42:53.190
Ping Ping Lau
The issue here is we won't see the reset password screen appear in the login floor as we saw in keycloak.
0:42:53.710 --> 0:43:0.680
Ping Ping Lau
So let's say a if I don't do a reset password right, then I go back to the application.
0:43:18.30 --> 0:43:26.130
Ping Ping Lau
So the flow is even pop up the consent page after that because the user the reset password not yet happened.
0:43:26.140 --> 0:43:29.900
Ping Ping Lau
So it will deny the access and direct it.
0:43:33.360 --> 0:43:34.300
Duraid Wadie
Yeah, yeah.
0:43:29.910 --> 0:43:37.670
Ping Ping Lau
This is what I mentioned that they in the off 0 call it go back to the yeah error page, yeah.
0:43:37.530 --> 0:43:43.380
Duraid Wadie
Yeah, yeah, I think this is for me very nice error page we can create and throw it there.
0:43:43.550 --> 0:43:44.980
Duraid Wadie
It's very valid to Venezuela.
0:43:44.990 --> 0:43:46.780
Duraid Wadie
It doesn't even need to go to the application.
0:43:46.790 --> 0:43:48.300
Duraid Wadie
The user needs to reset the password.
0:43:48.310 --> 0:43:51.280
Duraid Wadie
We already told them to do so that we send an email to do that.
0:43:51.950 --> 0:43:53.240
Duraid Wadie
We're gonna tell them, OK?
0:43:53.250 --> 0:43:54.270
Duraid Wadie
Go reset your password.
0:43:54.280 --> 0:43:55.240
Duraid Wadie
They have sent you an email.
0:43:55.250 --> 0:43:56.340
Duraid Wadie
Go reset your password.
0:43:56.420 --> 0:43:57.230
Duraid Wadie
Is that really simple?
0:43:57.240 --> 0:43:59.490
Duraid Wadie
But once they've done this, they can log in and find, right?
0:44:0.720 --> 0:44:2.950
Ping Ping Lau
Yes, I see a tennis.
0:44:1.750 --> 0:44:3.880
Duraid Wadie
Yeah, I mean, that's what else can we do, right?
0:44:3.890 --> 0:44:5.400
Duraid Wadie
I mean what you already.
0:44:9.260 --> 0:44:9.430
Duraid Wadie
And.
0:44:7.450 --> 0:44:13.520
Ping Ping Lau
I do have another solution though it's I think we just want to pick up for discussions and we try.
0:44:13.570 --> 0:44:20.160
Ping Ping Lau
We try Straker, the the the experience is not as in keycloak because key code.
0:44:20.170 --> 0:44:26.220
Ping Ping Lau
It will bring up the reset password page where user can straight away a key in after the same page.
0:44:28.350 --> 0:44:32.140
Ping Ping Lau
So, uh, let me go through that that option.
0:44:35.30 --> 0:44:36.930
Ping Ping Lau
So I have to delete myself again.
0:44:47.890 --> 0:44:50.20
Ping Ping Lau
Then oops.
0:45:9.80 --> 0:45:9.880
Ping Ping Lau
Uh.
0:45:13.980 --> 0:45:14.460
Ping Ping Lau
Shouldn't.
0:45:34.460 --> 0:45:38.900
Ping Ping Lau
Umm, so people a pitch.
0:45:39.50 --> 0:45:45.410
Ping Ping Lau
The other one that bring up the login each so I will remove uh.
0:45:45.420 --> 0:45:50.700
Ping Ping Lau
Sorry, reset password page so it June.
0:45:58.180 --> 0:45:58.660
Ping Ping Lau
The the.
0:46:47.240 --> 0:46:48.570
Ping Ping Lau
OK, so uh.
0:46:50.700 --> 0:46:52.970
Ping Ping Lau
The other options that we have to like this.
0:47:32.190 --> 0:47:33.960
Ping Ping Lau
Thank the concept.
0:47:42.980 --> 0:47:44.290
Ping Ping Lau
Sorry, let me to get again.
0:47:45.260 --> 0:47:46.870
Ping Ping Lau
Don't know it's positive in.
0:48:23.920 --> 0:48:35.470
Ping Ping Lau
OK, so uh, it will bring up the consent page and then after that I'll what we can do is actually redirect it to A and another reset password page that we host outside.
0:48:36.200 --> 0:48:45.550
Ping Ping Lau
But the the drawback here is we we cannot reuse the reset password page from off 0 so we won't get that the behavior.
0:48:45.590 --> 0:48:48.250
Ping Ping Lau
And if you want to get back, you know exactly the same locks.
0:48:48.260 --> 0:48:49.100
Ping Ping Lau
Then we got training.
0:48:50.670 --> 0:48:56.890
Ping Ping Lau
Click this so that it looks exactly the same like the reset password page from Office 0.
0:48:58.70 --> 0:49:0.330
Duraid Wadie
But Ping Ping for that Lisa password.
0:49:1.800 --> 0:49:3.710
Duraid Wadie
How is it actually so you?
0:49:3.780 --> 0:49:5.280
Duraid Wadie
Is that something you're hosting yourself?
0:49:7.160 --> 0:49:9.580
Ping Ping Lau
Yeah, it's hosted in for this case.
0:49:10.290 --> 0:49:15.200
Duraid Wadie
By, but what about the behavior of let's say the password complexity and all of that?
0:49:15.210 --> 0:49:16.90
Duraid Wadie
Where is that coming from?
0:49:16.640 --> 0:49:16.960
Ping Ping Lau
Yeah.
0:49:16.970 --> 0:49:17.210
Ping Ping Lau
Yeah.
0:49:17.220 --> 0:49:20.500
Ping Ping Lau
So those are the things that we go to hand. Uh.
0:49:19.770 --> 0:49:20.540
Duraid Wadie
Ohh no.
0:49:20.550 --> 0:49:22.10
Duraid Wadie
Yeah, I wouldn't wanna do that thing.
0:49:22.560 --> 0:49:22.760
Ping Ping Lau
Yeah.
0:49:26.410 --> 0:49:27.320
Duraid Wadie
Another MVP.
0:49:27.330 --> 0:49:28.510
Duraid Wadie
Another day, yeah.
0:49:26.270 --> 0:49:34.720
Ping Ping Lau
So OK then in that case, they will just go for the first options.
0:49:34.730 --> 0:49:37.740
Ping Ping Lau
Then that means uh, just say that.
0:49:36.450 --> 0:49:39.660
Duraid Wadie
For now, yeah, we can just just got out of it.
0:49:40.170 --> 0:49:42.800
Duraid Wadie
I mean, we need to review it with the with the UX guys.
0:49:42.810 --> 0:49:44.230
Duraid Wadie
That and this is the the thing.
0:49:44.240 --> 0:49:47.690
Duraid Wadie
That's how is it gonna be commands with?
0:49:47.700 --> 0:49:53.960
Duraid Wadie
Yeah, we don't wanna be invested so much time to customize and a lot of UI and hosting ourselves just to actually mimic the same behavior.
0:49:54.540 --> 0:49:54.870
Ping Ping Lau
Yeah.
0:49:54.880 --> 0:49:55.270
Ping Ping Lau
Yeah.
0:49:55.880 --> 0:49:56.590
Ping Ping Lau
OK.
0:49:57.260 --> 0:50:0.650
Ping Ping Lau
And then and the the I I don't know why it can't.
0:50:0.660 --> 0:50:4.970
Ping Ping Lau
We can know actually direct back to their and reset password page.
0:50:4.980 --> 0:50:6.940
Ping Ping Lau
It don't allow us to do that.
0:50:7.260 --> 0:50:10.460
Ping Ping Lau
We will see error in the in their logs too.
0:50:12.740 --> 0:50:12.990
Duraid Wadie
Yeah.
0:50:15.790 --> 0:50:16.80
Duraid Wadie
Yeah.
0:50:16.90 --> 0:50:25.400
Duraid Wadie
I mean the most important part really is we send the email, we put a really nice page when it says OK, go a really reset your password, maybe just a link on that page.
0:50:25.460 --> 0:50:37.870
Duraid Wadie
Venezuela, you to go back, you know, on the error page to to the same login page because they can click for get on password right and they get trigger another email right for reset password.
0:50:38.550 --> 0:50:38.720
Ping Ping Lau
Yes.
0:50:39.550 --> 0:50:42.620
Duraid Wadie
Yeah, the should be fine to be honest with you.
0:50:43.920 --> 0:50:44.200
Ping Ping Lau
OK.
0:50:45.310 --> 0:50:56.550
Ping Ping Lau
So the last part will be on ohh validating the mandatory attributes in user meta data so.
0:51:0.530 --> 0:51:1.990
Ping Ping Lau
Let me just use.
0:51:4.300 --> 0:51:5.690
Ping Ping Lau
Each one of them.
0:51:5.700 --> 0:51:6.50
Ping Ping Lau
Which one?
0:51:6.60 --> 0:51:10.500
Ping Ping Lau
I don't let me complete this sign so that I can use this account.
0:51:17.70 --> 0:51:19.780
Ping Ping Lau
So for now we can see this user right?
0:51:19.870 --> 0:51:22.100
Ping Ping Lau
It doesn't have the tenant ID and.
0:51:29.790 --> 0:51:31.630
Ping Ping Lau
And the user ID.
0:51:34.40 --> 0:51:36.20
Ping Ping Lau
In method in the metadata.
0:51:36.70 --> 0:51:49.990
Ping Ping Lau
So in Keycloak we will have to check for a few attributes, otherwise we will reject it because we can't bring back to the tenant with those information are missing like so.
0:51:52.170 --> 0:51:58.50
Ping Ping Lau
If we attach what what we can do is again we can attach those actions into the flow.
0:52:2.430 --> 0:52:10.100
Ping Ping Lau
So they say after you said have done this then it with the checking underminded the tributes.
0:52:12.460 --> 0:52:15.350
Ping Ping Lau
So everything and not my first.
0:52:23.930 --> 0:52:28.630
Ping Ping Lau
So if those HP are missing, then again when you log in you will we will deny the the login.
0:52:31.420 --> 0:52:31.800
Duraid Wadie
Perfect.
0:52:35.570 --> 0:52:39.180
Ping Ping Lau
And if you had that that then you will be able to log in successfully.
0:52:41.490 --> 0:52:41.830
Ping Ping Lau
It's just.
0:53:10.870 --> 0:53:16.610
Ping Ping Lau
So that you may say this user already have the tributes and then we will do everything again.
0:53:26.730 --> 0:53:26.970
Ping Ping Lau
Yeah.
0:53:26.980 --> 0:53:27.860
Ping Ping Lau
So we can it.
0:53:30.560 --> 0:53:31.10
Duraid Wadie
Perfect.
0:53:30.170 --> 0:53:31.440
Ping Ping Lau
So discover.
0:53:31.20 --> 0:53:34.360
Duraid Wadie
But all of these validation big thing is all over internal to Auth0.
0:53:34.370 --> 0:53:35.820
Duraid Wadie
There's no external calls, right?
0:53:36.230 --> 0:53:37.480
Ping Ping Lau
Yeah, no external cost.
0:53:38.20 --> 0:53:38.490
Duraid Wadie
Yeah, yeah.
0:53:40.830 --> 0:53:43.390
Ping Ping Lau
So it's all internal.
0:53:46.110 --> 0:53:53.800
Ping Ping Lau
There is one part is still internal, so the when we do a reset password right no, this one not not very anymore.
0:53:53.810 --> 0:54:0.610
Ping Ping Lau
Because, uh, if you leave out the reset password you AI, then we don't have to use a management thinking I.
0:54:0.940 --> 0:54:5.510
Ping Ping Lau
So whenever we need the management API, I think the concern, yeah, the consent.
0:54:5.520 --> 0:54:23.330
Ping Ping Lau
Let me show you that Click shield the consent because we will update the user attributes like So what what we do here is unless you that when Siang kitties OK with me can just do this.
0:54:25.780 --> 0:54:32.990
Ping Ping Lau
There is some actions that we do required to use and banishment API and in order for that to work.
0:54:33.0 --> 0:54:36.780
Ping Ping Lau
If you quired to pass in the so uh.
0:54:40.510 --> 0:54:49.220
Ping Ping Lau
Yeah, I think it's so this is a management API and we need we need a token to pass in the otherwise it cannot be authorized.
0:54:49.590 --> 0:54:56.10
Ping Ping Lau
So in order to get this token what I have try here is to use a plank with intial application.
0:54:57.120 --> 0:55:3.210
Ping Ping Lau
Yeah, and this is too for so that we get the token.
0:55:7.500 --> 0:55:12.240
Ping Ping Lau
Retreat the token using the client presidential application.
0:55:15.840 --> 0:55:16.170
Duraid Wadie
Yeah.
0:55:16.180 --> 0:55:16.760
Duraid Wadie
Yeah, that's fine.
0:55:16.770 --> 0:55:18.470
Duraid Wadie
That's really for the management API, right?
0:55:18.970 --> 0:55:20.430
Ping Ping Lau
Yeah, there's nothing like it.
0:55:19.890 --> 0:55:22.350
Duraid Wadie
Yeah, that's that's fine, to be honest with you.
0:55:23.80 --> 0:55:24.580
Duraid Wadie
So your experience?
0:55:24.590 --> 0:55:28.660
Duraid Wadie
Big thing you've seen, I would say Auth0 to Octa.
0:55:28.850 --> 0:55:31.900
Duraid Wadie
Sorry to Cognito to kick clock.
0:55:32.310 --> 0:55:34.460
Duraid Wadie
Which one was the easiest one for you to deal with?
0:55:35.190 --> 0:55:36.870
Ping Ping Lau
Ohh, I'd say like oh, you.
0:55:37.430 --> 0:55:40.30
Duraid Wadie
But the yeah.
0:55:38.400 --> 0:55:41.880
Ping Ping Lau
Yeah, I think it's a.
0:55:42.220 --> 0:55:43.610
Ping Ping Lau
It's very flexible actually.
0:55:46.90 --> 0:55:46.340
Duraid Wadie
Umm.
0:55:43.620 --> 0:55:57.430
Ping Ping Lau
If you want to do a lot of customizations and then everything we can do within within Auth0 itself, but except the change shot where in the channel is still very good because it's integrated with even which right?
0:55:58.40 --> 0:56:2.290
Ping Ping Lau
So yeah, and even the consent page.
0:56:2.300 --> 0:56:8.540
Ping Ping Lau
Also, we don't have to pass in a lot of authentication things cross two different systems.
0:56:9.850 --> 0:56:10.320
Duraid Wadie
Yeah.
0:56:10.370 --> 0:56:10.900
Duraid Wadie
Yeah.
0:56:11.210 --> 0:56:12.450
Duraid Wadie
But you know when he's showing me?
0:56:12.460 --> 0:56:15.180
Duraid Wadie
You can't drag stuff and drop them into the floors.
0:56:21.90 --> 0:56:21.510
Ping Ping Lau
OK.
0:56:15.190 --> 0:56:23.220
Duraid Wadie
They user flows and my days when I was doing the Auth0 was actually all of us was through code that times when now it's over drag and drop.
0:56:23.640 --> 0:56:23.810
Ping Ping Lau
Yeah.
0:56:23.730 --> 0:56:25.180
Duraid Wadie
So I was really laughing with you.
0:56:25.190 --> 0:56:26.460
Duraid Wadie
But just drag and drop, I said.
0:56:26.470 --> 0:56:28.700
Duraid Wadie
Ohh man, I used to actually write all of this back then.
0:56:30.130 --> 0:56:30.850
Ping Ping Lau
OK.
0:56:31.550 --> 0:56:31.940
Ping Ping Lau
Yeah.
0:56:31.950 --> 0:56:33.500
Ping Ping Lau
Yeah, it's very easy to do.
0:56:33.610 --> 0:56:46.50
Ping Ping Lau
And yellow, even during the evaluations also make a lot a lot more faster because it can really achieve many things we don't have to like, buy a lots of alarms.
0:56:47.440 --> 0:56:50.610
Duraid Wadie
Yeah, yeah, yeah, it's it's really the the simplified platform.
0:56:50.620 --> 0:56:59.630
Duraid Wadie
I mean Octa, which is was really well, number one identity back then in the time really Okta is actually more flexible than Auth0.
0:56:59.820 --> 0:57:4.500
Duraid Wadie
The flexibility of Optus is way bigger than Auth0 than often realized.
0:57:4.510 --> 0:57:10.370
Duraid Wadie
They start losing massive business to identity through zero, so they both Auth0 but actually retired Octa.
0:57:10.920 --> 0:57:11.320
Ping Ping Lau
Ohh.
0:57:10.440 --> 0:57:13.810
Duraid Wadie
So they're not even use an Octa anymore of us.
0:57:13.820 --> 0:57:20.590
Duraid Wadie
That's how we, uh it's it's quite a very fascinating story, really, between these two, a big identities came together.
0:57:25.200 --> 0:57:26.940
Ping Ping Lau
Yeah, I think, uh.
0:57:29.10 --> 0:57:32.490
Ping Ping Lau
He's already 6, almost 111 hours.
0:57:32.690 --> 0:57:33.600
Ping Ping Lau
I still have 1 ticket.
0:57:33.610 --> 0:57:35.380
Ping Ping Lau
I think we can leave that to the next sessions.
0:57:38.350 --> 0:57:38.820
Ping Ping Lau
Make some.
0:57:38.190 --> 0:57:39.30
Duraid Wadie
Yeah, yeah, sure.
0:57:44.90 --> 0:57:44.720
Ping Ping Lau
Yeah, yeah.
0:57:39.40 --> 0:57:45.400
Duraid Wadie
No problem at all, but I think all this open ID, all of our stuff is supported by default, doesn't it? Yeah.
0:57:44.730 --> 0:57:58.180
Ping Ping Lau
I don't see any issues yet for now at least all the customization says where it seems like OK you done the the only one last, the only one left is the one that highlights doing on the screen customizations.
0:57:59.830 --> 0:58:0.300
Duraid Wadie
Yeah.
0:58:0.310 --> 0:58:3.900
Duraid Wadie
And the one you mentioned is about the user synchronization for the Federated right.
0:58:6.150 --> 0:58:9.310
Ping Ping Lau
And yes, ohh I'd I forgotten about the tickets.
0:58:9.910 --> 0:58:12.860
Ping Ping Lau
Yeah, I forgot to include into the email.
0:58:12.870 --> 0:58:13.170
Ping Ping Lau
Yeah.
0:58:13.180 --> 0:58:13.560
Ping Ping Lau
Yeah.
0:58:13.670 --> 0:58:21.70
Ping Ping Lau
So this time we we do it in the next one, next next the sessions or are you OK to continue now?
0:58:20.330 --> 0:58:21.220
Duraid Wadie
It's up to you.
0:58:21.950 --> 0:58:23.140
Duraid Wadie
I mean, I'm fine.
0:58:23.150 --> 0:58:29.950
Duraid Wadie
I don't have a meeting just yet, so I I can I can look at it if you want now because that's actually an important one to cover.
0:58:30.850 --> 0:58:33.20
Ping Ping Lau
Ohk, OK, how about the rest?
0:58:34.750 --> 0:58:35.100
SueAnn See
OK.
0:58:37.100 --> 0:58:37.320
Anthony Wong
OK.
0:58:36.730 --> 0:58:39.970
Ping Ping Lau
OK, then I just, yeah, I would just go through this funding.
0:58:40.490 --> 0:58:47.440
Ping Ping Lau
So for this is to yeah, the behavior for this, OK, you just go to this.
0:58:47.670 --> 0:58:51.960
Ping Ping Lau
The default behavior for 0 right is raising middle to into.
0:58:52.270 --> 0:58:56.150
Ping Ping Lau
That means for those Federated user it will just auto.
0:58:57.840 --> 0:59:9.480
Ping Ping Lau
Although create into the database after it's after user authenticated successfully in in the external queue and we cannot, we cannot create a user.
0:59:10.580 --> 0:59:11.610
Ping Ping Lau
Ohh, thought of it.
0:59:11.620 --> 0:59:14.430
Ping Ping Lau
Return in in of 0 manually.
0:59:14.720 --> 0:59:25.540
Ping Ping Lau
It doesn't allow us to do that so but example when we create a user like table they ask us which connection is it.
0:59:25.870 --> 0:59:39.350
Ping Ping Lau
So for the connections the photo Federated locked in there, the connection is really the price connection and we can see that it won't appear as an options when we create a user.
0:59:39.900 --> 0:59:47.280
Ping Ping Lau
So there is the behavior of the uh, they they did not eat so.
0:59:51.480 --> 0:59:54.730
Ping Ping Lau
So the test medications, if we can do a day, are two options.
0:59:54.740 --> 1:0:13.380
Ping Ping Lau
I started with the action using the action secret, but after I completed this I found out that there are limitation on the secret because the number of the the length that you can store is up to 2000 plus which means that we can only let store probably like 50 emails maybe.
1:0:13.440 --> 1:0:14.650
Ping Ping Lau
So I don't think this is a.
1:0:14.940 --> 1:0:15.330
Ping Ping Lau
This is a.
1:0:18.400 --> 1:0:22.90
Ping Ping Lau
Solutions is acceptable, so I will just go to the another one.
1:0:22.140 --> 1:0:33.960
Ping Ping Lau
She's using the off 0 database connections, So what we can do here is they just put the type when here the the behavior is like.
1:0:35.880 --> 1:0:44.230
Ping Ping Lau
Umm, what I proposed to do like is when again perform user provision a user it registered the external user.
1:0:44.920 --> 1:0:46.250
Ping Ping Lau
But take a look at this box.
1:0:46.260 --> 1:0:48.50
Ping Ping Lau
Is everything within the Office 0?
1:0:48.100 --> 1:0:56.10
Ping Ping Lau
So what we can do is we can add those external user into a database in of you.
1:0:56.100 --> 1:0:57.990
Ping Ping Lau
So we show what I'm here.
1:1:2.890 --> 1:1:4.40
Ping Ping Lau
That's the database.
1:1:4.610 --> 1:1:10.120
Ping Ping Lau
So for example, we can actually create another database in Auth0 and I call it.
1:1:10.390 --> 1:1:12.500
Ping Ping Lau
This is the external user allowed base.
1:1:13.10 --> 1:1:16.850
Ping Ping Lau
So we can create those user into this database.
1:1:25.60 --> 1:1:26.230
Ping Ping Lau
So Python gives it to.
1:1:26.280 --> 1:1:31.450
Ping Ping Lau
To do that and then when user login like it it, it has to go through this process first.
1:1:31.460 --> 1:1:34.530
Ping Ping Lau
It's go to the go to the the end.
1:1:34.540 --> 1:1:42.750
Ping Ping Lau
After authenticated it come back then and I do notice that when login successful it actually goes to the sign up process.
1:1:43.280 --> 1:1:54.10
Ping Ping Lau
But the unfortunate thing is we cannot add a actions in the sign up for the Federated won't figure the actions it will trigger for internal user.
1:1:54.460 --> 1:2:7.670
Ping Ping Lau
So that's why we cannot add trigger here to say I check when user assigning up but instead what we can do is only when user log after successfully logged in then.
1:2:10.70 --> 1:2:10.510
Ping Ping Lau
We will.
1:2:12.920 --> 1:2:36.440
Ping Ping Lau
So for this the process here is after successfully logged in, the default behavior for all zero is able just insert a record into a default the the database that be teached to the applications and then it will come back to the post or in action where we can do a validation here to to check whether the log the email exists in this external user list.
1:2:36.820 --> 1:2:52.570
Ping Ping Lau
So if a exists, then we just the was it, if the login, if it doesn't exist we can we have to actually perform the delete user API call so that it delete the user from a from this database.
1:2:52.650 --> 1:3:0.690
Ping Ping Lau
Then we deny the log in, so this is something that, uh, the work around that I can find to control.
1:3:1.590 --> 1:3:5.600
Ping Ping Lau
Ohh which is the user list that we want to allow them to access.
1:3:9.860 --> 1:3:10.240
Duraid Wadie
Yeah.
1:3:10.250 --> 1:3:15.490
Duraid Wadie
And the guys looking for or maybe a maybe it will be another option, isn't it from both sale, yeah.
1:3:14.280 --> 1:3:22.200
Ping Ping Lau
Yet they they are saying that it's not release is in India met but don't know when.
1:3:23.570 --> 1:3:26.180
Duraid Wadie
Also, they said that something they doing in that road map for this.
1:3:27.250 --> 1:3:29.290
Ping Ping Lau
Yeah, they said they is is in the room.
1:3:30.910 --> 1:3:31.190
Duraid Wadie
OK.
1:3:32.700 --> 1:3:39.310
Duraid Wadie
So that's mean we need to live with post action login and write so the user has actually logged in, but we can validate it.
1:3:39.320 --> 1:3:44.130
Duraid Wadie
Then we can throw it out if we it doesn't exist in the internal database.
1:3:47.820 --> 1:3:48.100
Ping Ping Lau
Umm.
1:3:44.140 --> 1:3:50.250
Duraid Wadie
Do you know like the second time when the second time happens right we can say is this user validated right?
1:3:51.680 --> 1:3:54.760
Ping Ping Lau
Uh, he still have to check here.
1:3:55.110 --> 1:3:58.670
Ping Ping Lau
We still have to go through the login process and do the checking here.
1:4:0.390 --> 1:4:1.490
Duraid Wadie
Even the second time.
1:4:0.610 --> 1:4:1.560
Ping Ping Lau
Unless we.
1:4:2.110 --> 1:4:2.350
Ping Ping Lau
Yeah.
1:4:2.360 --> 1:4:3.160
Ping Ping Lau
Yeah, unless.
1:4:3.290 --> 1:4:3.620
Ping Ping Lau
Yeah.
1:4:3.630 --> 1:4:7.650
Ping Ping Lau
Unless we store something in the meta data, then we can skip checking.
1:4:6.410 --> 1:4:7.730
Duraid Wadie
Yeah, yeah, yeah.
1:4:7.660 --> 1:4:8.440
Ping Ping Lau
Yeah, yeah, yeah.
1:4:8.450 --> 1:4:9.410
Ping Ping Lau
They they will will also.
1:4:8.690 --> 1:4:17.620
Duraid Wadie
The one thing is it's once you've done the check the first time you stole some attributes, then what happens when the platform delete it?
1:4:17.950 --> 1:4:23.700
Duraid Wadie
That user give delete the attribute as well, so that's the work probably needs to happen is that.
1:4:24.200 --> 1:4:24.650
Ping Ping Lau
Yeah, yeah.
1:4:25.490 --> 1:4:29.640
Ping Ping Lau
If you keep it in the attributes, then we go to clear up from two places.
1:4:27.870 --> 1:4:31.210
Duraid Wadie
Yeah. Yeah, yeah.
1:4:32.490 --> 1:4:34.660
Duraid Wadie
Yeah, because we don't know really.
1:4:34.670 --> 1:4:40.800
Duraid Wadie
I mean the the be good to ask Matt, I think Ping Ping is tell them we doing this for federations.
1:4:40.810 --> 1:4:43.400
Duraid Wadie
You know, we're gonna check this every single post logging in.
1:4:44.260 --> 1:4:45.540
Duraid Wadie
What really is that?
1:4:45.550 --> 1:5:0.340
Duraid Wadie
You know the performance of the platform when we're gonna reach the thousand 100,000 users logging and like that way this is any you know what we call it, degradations on the the performance of that about Pennant or is it OK to do that?
1:5:0.350 --> 1:5:2.430
Duraid Wadie
Then it doesn't matter, you can just keep checking it.
1:5:5.230 --> 1:5:5.890
Ping Ping Lau
Yeah, yeah.
1:5:12.650 --> 1:5:13.110
Duraid Wadie
Does it?
1:5:5.900 --> 1:5:19.930
Ping Ping Lau
Can't ask him, but what I notice is I think it seems a bit it is become a bit slower, but we we can still skip a bit of internal user can still do the checking with internal user then escape this checking.
1:5:21.340 --> 1:5:22.410
Duraid Wadie
Yeah, yeah.
1:5:22.420 --> 1:5:34.940
Duraid Wadie
I think the first time we can check it a second time where you N.O.R.E it we just store something and hey, they're not, I mean quite similar to cognito, isn't it the some of the stuff in here and there?
1:5:35.620 --> 1:5:36.70
Ping Ping Lau
Yes.
1:5:36.80 --> 1:5:41.120
Ping Ping Lau
The good thing about this is we don't have to go to other service to do the checking.
1:5:39.770 --> 1:5:41.720
Duraid Wadie
Yeah, not into their Debasis.
1:5:42.90 --> 1:5:43.930
Ping Ping Lau
Now we can still use that database.
1:5:41.850 --> 1:5:44.390
Duraid Wadie
Yeah, yeah, yeah.
1:5:44.580 --> 1:5:50.200
Duraid Wadie
So from your point of view, really the development of all zero could probably be faster than cognito, right?
1:6:2.270 --> 1:6:2.550
Duraid Wadie
Yeah.
1:5:52.220 --> 1:6:3.940
Ping Ping Lau
In development for this off service itself, I think you Lester, but for the platform, for PR, I think that much different because it's still got to go through all these provisioning of cannon.
1:6:4.720 --> 1:6:5.460
Duraid Wadie
Some of the work.
1:6:8.300 --> 1:6:8.640
Duraid Wadie
Yeah.
1:6:8.650 --> 1:6:8.950
Duraid Wadie
OK.
1:6:8.960 --> 1:6:9.360
Duraid Wadie
Thank you.
1:6:12.730 --> 1:6:23.360
Ping Ping Lau
Uh, one thing to highlight though, for this one right, it needs to show this is is the external user, but we still have to put in the password.
1:6:24.430 --> 1:6:35.900
Ping Ping Lau
They say uh, I just want to temporary store it for for the external checking, so I will store it in this external user allowed inside, but you can see here this is mandatory.
1:6:35.970 --> 1:6:38.900
Ping Ping Lau
So we still have to put in the password, but even never been used.
1:6:40.220 --> 1:6:40.510
Duraid Wadie
Yeah.
1:6:40.520 --> 1:6:41.970
Duraid Wadie
Yeah. Yeah, that's fine.
1:6:41.980 --> 1:6:43.150
Duraid Wadie
Uh, do they?
1:6:43.160 --> 1:6:48.460
Duraid Wadie
Actually, maybe the question as well you ask, do they have limitation into this databases they created?
1:6:49.840 --> 1:6:51.980
Ping Ping Lau
Number of databases or number of users.
1:6:52.60 --> 1:6:57.10
Duraid Wadie
Not not the number of databases because I don't think they're gonna be created in a database per customer, right?
1:6:59.860 --> 1:7:0.60
Ping Ping Lau
Yeah.
1:6:57.20 --> 1:7:4.690
Duraid Wadie
It's one database I guess for all of them or that would be, that's why we need to understand, you know, that these people will understand their solution.
1:7:4.700 --> 1:7:5.220
Duraid Wadie
Architect.
1:7:5.230 --> 1:7:5.490
Duraid Wadie
Really.
1:7:11.510 --> 1:7:12.100
Ping Ping Lau
There is.
1:7:5.500 --> 1:7:12.820
Duraid Wadie
What the limitations on the number of users within one database that we would try and what we tried to do, probably we can, yeah.
1:7:12.170 --> 1:7:13.600
Ping Ping Lau
There is no limitations.
1:7:14.210 --> 1:7:24.180
Ping Ping Lau
I don't search and the the the the response is there is no limitation on number of users and there was nothing this one.
1:7:25.930 --> 1:7:26.540
Duraid Wadie
OK, perfect.
1:7:25.920 --> 1:7:29.570
Ping Ping Lau
So they said for enterprise customer, no, no limits.
1:7:34.60 --> 1:7:34.320
Duraid Wadie
Yeah.
1:7:35.750 --> 1:7:36.220
Duraid Wadie
OK.
1:7:35.930 --> 1:7:36.780
Ping Ping Lau
But with that we have.
1:7:36.270 --> 1:7:38.150
Duraid Wadie
I mean I I I it'll be.
1:7:38.220 --> 1:7:38.580
Duraid Wadie
Yeah.
1:7:38.590 --> 1:7:41.490
Duraid Wadie
I mean when when I see there's no limits like, yeah.
1:7:43.850 --> 1:7:44.930
Ping Ping Lau
You don't mean is it?
1:7:47.800 --> 1:7:49.100
Duraid Wadie
But as well as I'm at somewhere.
1:7:51.390 --> 1:8:5.760
Ping Ping Lau
But I think of all of zero when we are creating those database that we can we can actually create different database storing you know like one database for one tenant which I think probably.
1:8:4.850 --> 1:8:7.460
Duraid Wadie
Well, the question is really is is I.
1:8:12.0 --> 1:8:12.410
Ping Ping Lau
But there is.
1:8:7.500 --> 1:8:14.410
Duraid Wadie
You know, I'd like to validate this by their senior architect because that's exactly how it happens with Azure B.
1:8:14.420 --> 1:8:15.180
Duraid Wadie
To see, they said.
1:8:15.190 --> 1:8:17.670
Duraid Wadie
There's no limits. Yeah.
1:8:16.530 --> 1:8:20.260
Ping Ping Lau
Ah, OK, OK. Yeah.
1:8:19.990 --> 1:8:20.360
Duraid Wadie
Yeah.
1:8:20.270 --> 1:8:20.570
Ping Ping Lau
Yeah, sure.
1:8:20.370 --> 1:8:30.900
Duraid Wadie
So it's really it's, it's this is, I mean it's not I want you know like I can phrase that question really I I can send it to my to actually make sure we validate it with his senior artifact as well.
1:8:30.910 --> 1:8:31.920
Duraid Wadie
I'll let me.
1:8:31.930 --> 1:8:33.380
Duraid Wadie
I'll I'll send that email to them.
1:8:34.800 --> 1:8:35.360
Ping Ping Lau
Yeah. OK.
1:8:40.580 --> 1:8:42.330
Ping Ping Lau
It's so I think it's sunny.
1:8:42.380 --> 1:8:44.670
Ping Ping Lau
Yeah, we don't have to go through the dinner.
1:8:45.420 --> 1:8:49.300
Ping Ping Lau
Yeah, I I teach you also the sample code that we can do.
1:8:51.810 --> 1:8:52.680
Duraid Wadie
That's that's fine.
1:8:52.690 --> 1:8:53.120
Duraid Wadie
Thank you.
1:8:56.750 --> 1:8:57.120
Ping Ping Lau
OK.
1:8:57.130 --> 1:9:5.390
Ping Ping Lau
And the open ID stuff I think will David together with other open ID related to guests in the surfaces sessions.
1:9:9.530 --> 1:9:11.160
Ping Ping Lau
Any other questions from anyone?
1:9:14.780 --> 1:9:15.600
Duraid Wadie
No, I'm fine.
1:9:15.610 --> 1:9:16.320
Duraid Wadie
Thank you for that.
1:9:16.330 --> 1:9:18.200
Duraid Wadie
Thank you for all the work, Hanna, and thank me.
1:9:19.360 --> 1:9:22.640
Ping Ping Lau
He thinking, think of the time.
1:9:22.650 --> 1:9:23.610
Ping Ping Lau
Thank you, everyone.
1:9:23.260 --> 1:9:23.870
Hanna Chai
Thank you.
1:9:23.620 --> 1:9:24.290
Ping Ping Lau
Bye.
1:9:24.60 --> 1:9:24.560
Keith Low
And thank you.
1:9:24.170 --> 1:9:24.600
Anthony Wong
Thank you.
1:9:24.610 --> 1:9:24.800
Anthony Wong
Bye bye.
1:9:24.280 --> 1:9:24.900
SueAnn See
Thank you.
1:9:24.580 --> 1:9:25.320
Duraid Wadie
Thank you everyone.
1:9:25.160 --> 1:9:25.390
SueAnn See
My.
1:9:25.330 --> 1:9:25.950
Duraid Wadie
Thank you.
1:9:26.120 --> 1:9:26.440
Duraid Wadie
Thank you.
1:9:26.450 --> 1:9:26.630
Duraid Wadie
Bye bye.


comment1: Allow admin to reset consent whenever legal document change
comment2: This feels too manual. Is there some way for us to detect a consent update since the user agreed? I can’t imagine an admin touching 100s of tenants.

Extract from the transcript above and answer the above 2 questions how when legal document change, Auth0 can detect it automatically.