Rock U - People - Passwordless Login

Transcribed Video Content

Nobody really misses their password. Passwordless login allows you and your people to log in using a one time code that goes to your phone and your email, which means it's much easier to sign in and there's much less password resetting. So let's talk about how to get it set up now. So now we're on the external login screen and right away we can see there's only what we call a database login, which is simply a username and password checking if you have the right username and password typed in here. But let's go to the block settings, And there's a couple important things for this login block. First of all, if you want to use passwordless login, you'll want to pick a secondary authentication type of passwordless authentication. Then you can also pick whether you want to show the internal database login, which is what you just saw. In some cases, you might not even need that, but we're gonna leave it as yes for now. Now there's another setting that says redirect to single external authentication provider. Now say you have an external authentication provider set up such as Google or Facebook, and that's something that people use to sign into your site. If you only had one set up and you had no internal database login set, and this was set to yes, then when someone went to log in, they would just immediately be redirected to that external authentication provider. Then we can also pick which one we want to be default. And this really just changes which login method is on the left and which is on the right. I'll show you an example. If we said the default was passwordless, we'll save here. And now you can see that we have sign in with account, which is the passwordless option on the left. And if we were to click here, sorry, I said the wrong thing. If you would pick sign in with the account, it will show the database login once you click in to sign in with account. But if you instead pick to sign in with email or phone, this is how we do the passwordless option. Now let's move on to some settings. If you go to admin tools, up to settings, and start typing in security, we'll click on security settings. There's a couple things up here that aren't really relevant, but go to authentication settings. Now this is very important. First of all, we by default have a thousand set as the throttle for passwordless sign in daily. That means with on one IP address, you can only sign in with passwordless sign in a thousand times in a day. And that just keeps bots from being able to do major attacks on your site with a passwordless sign in. Then the amount that your session lasts once you log in without you needing to log in again, your token will stay with you is a hundred and twenty minutes here. And you can also pick whether you want to disable passwordless sign in for specific protection profiles. And that can be important because if you want someone with an extreme protection profile, for example, to use a method that we know is even more secure, such as database login, then we can turn it off for their account. And if they had tried to do passwordless sign in, it wouldn't work for them. You can also pick the message for disabled passwordless sign in, and that's what shows up when someone has an extreme protection profile here. Then we can pick the template we wanna send out, the communication template for passwordless confirmation communications. I'll show you what that looks in a moment. Then you can also pick to reject authentication cookies issued before a date and time. And that's just to protect yourself if you're doing something testing and you say, we don't want anyone to be able to have authentication cookies before this time, you can do that. But we'll save and we're gonna go to admin tools, settings, system communications, and we'll search for passwordless login confirmation. Click here and there's multiple different mediums. First of all, you can see the really simple look for our email send, which says you have received a sign in attempt for a Rock Solid Church digital platform. Click the button below to confirm your sign in. This link will expire in, and that will just, tell you how long you have before that expiration happens. And it's just using, an attribute or sorry, not an attribute, just a lava merge field for link expiration. And they can click this button to complete their sign in, and there they go. They don't even need to worry about passwords. Then for SMS, if you have SMS enabled or even push notifications, if you have a Rock mobile app, you can send these verification codes. So in this case, can say your organization name verification code is, and then you get the verification code you need and you can log in without needing a password. Your people get a login that they won't forget and there's much less resets than you had before. So this is an easy win for everyone and it meets people where they are at.