Skip to main content
By default, a user’s login identifier (loginId) is also the channel that the user can verify. For example, the login identifier might be the user’s email address or phone number. Some accounts have additional verified channels that differ from their login identifier. For example:
  • The login identifier is an email address, and the account also has one or more verified phone numbers.
  • The login identifier is a username, and the account also has verified email addresses or phone numbers.
Returning these channels allows OwnID to offer the user an appropriate verification challenge, such as a one-time passcode (OTP) sent by SMS.

​
Return additional channels

Extend the response from your /getOwnIdDataByLoginId server-side endpoint with either or both of these optional fields:
  • emails: An array of verified email addresses associated with the account.
  • phones: An array of verified phone numbers associated with the account.
Only return channels that your system has already verified. Email addresses must use a valid addr-spec format, and phone numbers must use the international E.164 format, including the leading + and country code.
OwnID uses the returned email addresses and phone numbers only to orchestrate verification challenges. OwnID never persists these values.

​
Configure delivery providers

Returning additional channels makes them available for orchestration, but OwnID also needs a provider to deliver the corresponding challenge. Configure an email provider for email OTP challenges, an SMS provider for SMS OTP challenges, or both.