Onboarding overview

Prerequisites

1. Activate IDaaS.

2. Ensure you have created an app in IDaaS.

Authentication process

This example uses phone number authentication. Your app client must integrate the client SDK. The authentication process is as follows:

1. The app client requests an authorized access_token from your app server.

2. Your app server uses an AccessKey ID and AccessKey Secret to call the FetchAccessToken operation of the server-side SDK. The app server then returns the retrieved access_token to the app client.

3. The app client calls the phone number authentication SDK operation with the access_token and receives the authentication result.

Onboarding process

• Get an Alibaba Cloud Access Key and grant permissions to the RAM user.

• Integrate the client SDK into your app client. For more information, see Client-side onboarding.

• Connect your app server to the IDaaS service. For more information, see Server-side onboarding.

Get an Alibaba Cloud Access Key

For enhanced security, we recommend using an AccessKey created for a RAM user in Resource Access Management (RAM). This practice limits the permission scope and reduces the risk of over-privileged access.

Method 1: If you already have a RAM user, see Create an AccessKey.

On the RAM user details page, in the User AccessKey section, click Create AccessKey.

Method 2: Create a new RAM user and generate an AccessKey at the same time.

On the Create User page in the RAM console, enter a Logon Name and Display Name. In the Access Mode section, select programmatic access to generate an AccessKey ID and AccessKey Secret, and then click OK.

Grant permissions to a RAM user

In the RAM console, select the RAM user you created and click "Add Permissions".

In the system policy list, search for and select DoraemonServiceInvoke, and then click OK.