Configure My Account Application¶

The My Account application can be configured by modifying the deployment.toml file (stored in the <IS_HOME>/repository/conf directory).

[myaccount]
app_base_name = "myaccount"
client_id = "MY_ACCOUNT"
login_callback_path = "/login"
logout_callback_path = "/login"

route_paths.home = "/overview"
route_paths.login = "/login"
route_paths.logout = "/logout"

product_version.configs.versionOverride = ""
authenticator_app_configs.enabled = true

ui.announcements = []
ui.app_copyright = "WSO2 Identity Server"
ui.app_title = "My Account | WSO2 Identity Server"
ui.app_name = "My Account"
ui.app_logo_path = "/assets/images/logo.svg"
ui.product_name = "Identity Server"
theme = "default"

applications.enabled = true
applications.disabled_features = []
applications.scopes.create = []
applications.scopes.read = []
applications.scopes.update = []
applications.scopes.delete = []

operations.enabled = true
operations.disabled_features = []
operations.scopes.create = []
operations.scopes.read = ["internal_humantask_view"]
operations.scopes.update = []
operations.scopes.delete = []

overview.enabled = true
overview.disabled_features = []
overview.scopes.create = []
overview.scopes.read = []
overview.scopes.update = []
overview.scopes.delete = []

personal_info.enabled = true
personal_info.disabled_features = ["profileInfo.mobileVerification"]
personal_info.scopes.create = []
personal_info.scopes.read = []
personal_info.scopes.update = []
personal_info.scopes.delete = []

security.enabled = true
security.disabled_features = []
security.scopes.create = []
security.scopes.read = []
security.scopes.update = []
security.scopes.delete = []

session.params.userIdleTimeOut = 600.0
session.params.userIdleWarningTimeOut = 580.0
session.params.sessionRefreshTimeOut = 300.0
session.params.checkSessionInterval = 3.0

[system_applications]
read_only_apps = []

Configure basic settings¶

The following basic settings can be configured.

Customize My Account¶

The My Account application can be customized to be consistent with the branding of the business. The following attributes can be modified to brand the My Account application.

Change the theme of the application¶

Custom themes can be applied to the My Account application.

Configure session information¶

Parameters such as how often the state of the session should be checked, how long a user should be allowed to remain idle etc., can be configured using the following attributes.

Disable using authenticator app as an authentication factor¶

WSO2 Identity Server allows multi-factor authentication via SMS, Security Key/Biometrics (FIDO), and authenticator applications.

Enable and disable application features¶

My Account has several features and those features, in turn, have several sub features. These features can be configured by applying configurations in the following format.

<feature>.enabled = true
<feature>.disabled_features = []
<feature>.scopes.create = []
<feature>.scopes.read = []
<feature>.scopes.update = []
<feature>.scopes.delete = []

• The <feature>.disabled_features parameter is used to disable sub features belonging to a feature.
• The <feature>.enabled parameter can be used to toggle the feature as a whole. For instance, by setting the <feature>.enabled parameter of the overview feature, you can disable the overview feature as a whole.

• The <feature>.scopes parameter is used to specify the scopes that a user should be allowed in order to access the concerned feature. The <feature>.scopes parameter has the following sub-attributes and each sub-attribute takes an array of scopes.

  <feature>.scopes.create = []
  <feature>.scopes.read = []
  <feature>.scopes.update = []
  <feature>.scopes.delete = []

  If you want a user to have a certain scope(s) to be able to create an application, then you can specify that/those scope(s) within the application.scopes.create array of the application feature.

The features¶

These are the five features in My Account.

1. Overview
2. Personal Info
3. Security
4. Applications
5. Operations

1. Overview¶

The overview feature can be configured as follows:

[myaccount]
overview.enabled = true
overview.disabled_features = []
overview.scopes.create = []
overview.scopes.read = []
overview.scopes.update = []
overview.scopes.delete = []

The overview feature has the following sub-features that can be disabled using the overview.disabled_features parameter:

2. Personal Info¶

The Personal Info feature can be configured as follows:

[myaccount]
personal_info.enabled = true
personal_info.disabled_features = ["profileInfo.mobileVerification"]
personal_info.scopes.create = []
personal_info.scopes.read = []
personal_info.scopes.update = []
personal_info.scopes.delete = []

The Personal Info feature has the following sub-features that can be disabled using the personal_info.disabled_features parameter:

3. Security¶

The security feature can be configured as follows:

[myaccount]
security.enabled = true
security.disabled_features = []
security.scopes.create = []
security.scopes.read = []
security.scopes.update = []
security.scopes.delete = []

The Security feature has the following sub-features that can be disabled using the security.disabled_features parameter:

For example, do the following to disable the Active Sessions section.

4. Applications¶

The applications feature can be configured as follows:

[myaccount]
applications.enabled = true
applications.disabled_features = []
applications.scopes.create = []
applications.scopes.read = []
applications.scopes.update = []
applications.scopes.delete = []

The applications feature does not have a sub-feature.

5. Operations¶

The operations feature can be configured as follows

[myaccount]
operations.enabled = true
operations.disabled_features = []
operations.scopes.create = []
operations.scopes.read = ["internal_humantask_view"]
operations.scopes.update = []
operations.scopes.delete = []

The operations feature has no sub-features.