Authentication Orchestration

🎯 Overview

Authentication Orchestration is the core process that manages user authentication flows in the Ditto ID Web Portal. The system intelligently determines the authentication path based on browser recognition status and orchestrates the multi-factor authentication process to ensure secure user verification.

---

🏗️ Core Concepts

🌐 Browser Recognition System

• Unrecognized Browser: Browser that hasn't been marked as "remembered" by the user
• Recognized Browser: Browser previously trusted through "Remember Me" option
• Recognition Trigger: User selecting "Remember Me" during authentication
• Duration: Browser remembered for configured period (default: 1 year)

🔒 Authentication Orchestration Logic

• Factor Determination: System analyzes user profile to determine available factors
• User Type Detection: Identifies Ditto ID mobile users vs. web-only users
• Flow Selection: Chooses appropriate authentication path based on user and browser status
• MFA Enforcement: Ensures multi-factor authentication completion before granting access

---

📊 Authentication Flow Types

---