Skip to main content
Elite flow presents an OwnID-hosted authentication experience in an SDK-managed WebView. Use it when OwnID should provide the primary authentication UI and your app should handle only the native handoff points.

Before you start

  • Complete the Core SDK setup for Android or iOS.
  • Complete Passkey setup.
  • Register only the providers used by your hosted experience, such as sessionCreate, passwordAuthenticate, or supported social sign-in providers. See Android providers or iOS providers.
  • Keep your app’s existing authentication, registration, and session paths available for native handoff, hosted errors, and user close.

How Elite flow works

The OwnID Web SDK runs the hosted experience in a WebView managed by the native SDK. WebBridge forwards the hosted page’s terminal events to your app, where you complete any registration or session work that remains app-owned. Elite flow reports two kinds of results:
  • Hosted events describe what happened in the authentication experience. Handle the business outcome in onNativeAction, onFinish, onError, or onClose.
  • Controller results describe how the native WebView run settled. Use whenSettled() for cleanup, cancellation, and SDK or WebBridge failures.

Start Elite flow

Configure the hosted event callbacks, start the flow, and retain the returned controller until it settles.

Handle hosted events

When present, ownIdData is an opaque OwnID authentication payload used to connect a native registration step to the hosted flow. Store it only with the matching login ID, send it unchanged with the registration request, and do not inspect or modify it.
Hosted callbacks are terminal. After a callback returns successfully, the SDK closes the WebView and the controller settles successfully.

Handle the controller result

A successful whenSettled() result does not mean authentication succeeded. Handle successful authentication in onFinish and app-owned registration in onNativeAction.
Treat Access Tokens, provider tokens, session payloads, ownIdData, and full hosted-event payloads as sensitive. Never log them.

Continue with the full guides

Android Elite flow guide

Complete event handling, controller behavior, providers, customization, and failures.

iOS Elite flow guide

Complete event handling, controller behavior, providers, customization, and failures.