Credential store

The identity and access (IDAAS) core includes a credential store for storing credential information for users. The credential information includes all the authentication related attributes, such as the universal unique identifier (UUID), primary email, and password (hashed) that are linked to the user account, such as Google ID, SafeNet Trusted Access (STA) ID, Apple ID, and so on.

Other user information is stored in the identity store.

The primary email is included as a credential because it can be used as an identifier during login, and forgotten passwords can be reset using a link that is sent to the primary email address. A primary phone number is a credential because it can be used to send a login code.

You can choose which identifier that you want your users to enter on the login screen. Email address is the most common identifier used for this purpose.

Credentials can be managed by the users (self-service) or with a server-to-server process.