Configuration: Allowed Registration Factors

🎯 Purpose

Determines which authentication factors users can register and set up during the account activation process. This configuration shapes the initial user onboarding experience and defines available security options.

---

📍 Configuration Location

• Module: Auth Server
• Configuration Name: allowed.reg.factors
• Access Path: Module Config Management → Auth Server → allowed.reg.factors

---

📊 Available Configuration Parameters

---

🔧 Parameter Details

🌐 rememberMe (Registration)

• Function: Controls browser remembering option during activation
• When Enabled: "Remember Me" checkbox appears on activation screens
• User Impact: Users can immediately trust their browser after activation
• Security Consideration: Balances convenience vs. security for new users
• Workflow: Checkbox available alongside password and factor setup

📲 smsOtp (Registration)

• Function: Enables SMS OTP as registration option during activation
• When Enabled: SMS appears as second factor choice during setup
• User Process: Users can register mobile number and verify via SMS
• Alternative: Works alongside emailOtp as second factor option
• Requirement: SMS service must be properly configured

📧 emailOtp (Registration)

• Function: Enables Email OTP as registration option during activation
• When Enabled: Email appears as second factor choice during setup
• User Process: Users can register email address and verify via email
• Alternative: Works alongside smsOtp as second factor option
• Requirement: Email service must be properly configured

🔒 password (Registration)

• Function: Controls password creation option during activation
• When Enabled: Users can set up password-based authentication
• When Disabled: Passwordless activation flow enforced
• Impact: Affects both web and mobile app authentication options
• Security: Provides traditional authentication factor option

❓ securityQA (Registration)

• Function: Enables security question and answer setup
• When Enabled: Users prompted to create security questions during activation
• Purpose: Provides account recovery method through knowledge-based authentication
• User Experience: Additional step in activation process
• Recovery Use: Questions used during account recovery IDV process

---

📋 Registration Flow Impact Matrix

---

🔄 Registration Process Flow

Standard Activation Flow (Most Options Enabled)

1. Password Setup: User creates password (if password = true)
2. Browser Option: User chooses to remember browser (if rememberMe = true)
3. Second Factor Selection: User chooses between SMS or Email (based on enabled options)
4. Factor Registration: User completes chosen second factor setup
5. Security Questions: User creates Q&A pairs (if securityQA = true)
6. Completion: User redirected to configured endpoint

Minimal Configuration Flow

1. Ditto ID Mobile Only: User activates with mobile app factors only
2. No Web Factors: Skip password, SMS, and email setup
3. Mobile Dependencies: User must have Ditto ID mobile app
4. Limited Recovery: Fewer account recovery options available

---

🎯 Configuration Scenarios and Use Cases

🏢 Enterprise Security Scenario

🌐 Consumer-Friendly Scenario

📱 Mobile-First Scenario

---