Gift Card Redemption Authentication

Gift Card Redemption - Account Recovery - Main Flow

The Gift Card Redemption - Account Recovery - Main Flow lets users recover a lost account using the Gift Card Redemption - Account Recovery - Email - Subflow.

Purpose

The Gift Card Redemption - Account Recovery - Main Flow lets users recover a lost account by invoking the Gift Card Redemption - Account Recovery - Email - Subflow, then directs the user to the Gift Card Redemption - SignOn - Subflow.

Structure

This flow is divided into sections using teleport nodes:

Flow Configuration

Uses function nodes to set variables, then progresses to the Call For Account Recovery Sub-Flow And Offer Sign On Page section.

Call For Account Recovery Sub-Flow And Offer Sign On Page

A function node confirms that account recovery is enabled, then a second function node checks whether the user can skip email recovery code verification.

If the user can skip email recovery code verification, the flow progresses to the Reset Password, Enable Account And Send User To SignOn Page section.

If the user can’t skip email recovery code verification, a hidden HTML node activates relevant CSS files. The flow then invokes the Gift Card Redemption - Account Recovery - Email - Subflow, followed by the Gift Card Redemption - SignOn - Subflow. A PingOne node creates a session for the user and a confirmation page is displayed. The flow then progresses to the Return Success section.

Reset Password, Enable Account And Send User To SignOn Page

Uses a PingOne node to find the user. A function node sets the number of validation attempts to zero, then presents the user with an HTTP password reset form.

If the user submits a new password, function nodes validate the new password and verify that the password and confirmed password match. A function node then increments the number of validation attempts. If the maximum number of validation attempts hasn’t been met, PingOne nodes enable the user and set the new password.

If the new password setting fails, a PingOne node disables the user. Function nodes prepare an error message, which is then presented to the user.

If the new password setting succeeds, a PingOne notification node notifies the user of the new password and a success message is presented to the user. If the user clicks Sign On, the Gift Card Redemption - SignOn - Subflow is invoked. When the subflow completes, a PingOne authentication node creates a session, and a success message is displayed.

Return Success

Sends a success JSON response, indicating that the flow completed successfully.

Return Error

Sends an error JSON response, indicating that the flow completed unsuccessfully.

Input schema

This flow has the following inputs.

Input name Required Description

flowParameters

No

An object containing parameters from the parent flow.

canUserSkipRecoveryCodeVerification

No

Determines whether the user can reset their password without verifying their email with a recovery code. This value is only used if email verification is not required to reset the password.

p1UserId

No

The PingOne ID of the user.

Output schema

This flow has no outputs.

Variables and parameters

This flow uses the following variable or parameter values:

Variable name Parameter name Description

ciam_logoStyle

None

The HTML style to use for your company logo.

This value is only used when the flow is launched with a redirect.

ciam_resendOtpLimit

None

The maximum number of times a user can resend a one-time passcode (OTP).

ciam_recoveryLimit

None

The maximum number of times a user can attempt to recover an account.

ciam_logoUrl

None

The URL for your company logo.

This value is only used when the flow is launched with a redirect.

ciam_companyName

None

Displays the name of your company.

This value is only used when the flow is launched with a redirect.

ciam_accountRecoveryEnabled

None

Indicates whether account recovery is enabled.

p1RiskPolicyIdAuthZ

None

The PingOne risk policy ID to use for authorization.

p1RiskPolicyIdAuthn

None

The PingOne risk policy ID to use for authentication.

p1RiskPolicyIdReg

None

The PingOne risk policy ID to use for registration.

p1RiskPolicyIdAR

None

The PingOne risk policy ID to use for account recovery.

p1MFAPolicyId

None

The ID of the PingOne MFA policy to use in the flow.

flowCompanyLogo

None

The URL for your company logo.

p1AgreementId

None

The ID of the agreement to present to users.