Build a Sign-in Flow
By the end of this guide you will have a working username and password sign-in flow assigned to your application.
Prerequisites
- ThunderID is running. See Get Started.
- You have created an application. See Register an Application.
Open the Flow Designer
- Sign in to the ThunderID Console at https://localhost:8090/console.
- Go to Flows and click + Create New Flow.
- Select Sign-in as the flow type and click Continue.
- Choose the Basic template (username and password authentication) and click Continue.
- Enter a unique flow name, for example
My Sign In, then click Create.
The canvas opens with the Basic template already wired.
The Basic template is a complete, working username and password sign-in flow. If that's all you need, skip to Assign the flow to your application.
Review the Canvas
The Basic template has four nodes:
| Node | What it does |
|---|---|
| Sign In (View) | Renders the sign-in form with username and password fields |
| Identifier + Password (Executor) | Validates the submitted credentials against the user store |
| Authorization (Executor) | Checks whether the authenticated user is authorized to access the application |
| Auth Assertion Generator (Executor) | Issues the authentication assertion on success |
Each node connects to the next via its green (success) output. The final executor connects to END.
Every executor also has a red (failure) output. In the Basic template the failure path from Identifier + Password loops back to the Sign In view so users can retry. Don't leave failure paths unconnected, an unconnected failure path stops the flow with an error.
Save the Flow
Click Save in the top-right corner. ThunderID saves the flow and assigns it a version number.
Assign the Flow to Your Application
A flow only activates once assigned to an application.
- In the Console, go to Applications and open the application you created in the Quickstart.
- Open the Flows tab.
- Under Authentication Flow, select the flow you just saved from the dropdown.
- Click Save.
ThunderID will now run this flow whenever a user signs in to your application.
What's Next
Your sign-in flow is live. The next step is connecting your app so it can redirect users through this flow.
