External Websites & Bridge v2 — Integration

Overview

Connect an external website to AccessGuard through the server-side bridge proxy and browser SDK using scoped HMAC v2 credentials and canonical customer-safe operations.

Capabilities

• Registration, login, token refresh, recovery, reset, logout, introspection, and email/phone verification

• Profile management, profile data, protected profile media, and profile upload operations

• Customer notification inbox counts, list, read, seen, delete, pin, and unpin

• Audience read operations and ContextResolver operations when explicitly granted

• Client credential administration with origins, operations/scopes, rate limits, request logging, rotation, replay protection, and status

1. 1

   Step 1

   Create a site credential in AccessGuard and define the allowed origin, operations, scopes, and rate limit.

   Back to top
2. 2

   Step 2

   Configure the server-side bridge proxy with the client ID, client secret, and AccessGuard Bridge endpoint.

   Back to top
3. 3

   Step 3

   Load the browser SDK or call the site proxy from the website application.

   Back to top
4. 4

   Step 4

   Run a signed health/authentication request and verify the Bridge request log and authorization state.

   Back to top

Limitations

• The client secret remains on the trusted server side of the external website integration.

• Bridge authority is limited to the credential, workspace, operation, scope, origin, rate, and request-signature policy configured for that client.

FAQs

Pricing