Skip to content

Flow extensions

A flow extension lets you call your own external service from within a flow. This allows you to inject custom business logic, such as validation, enrichment, or risk evaluation, into a user journey without building it into the flow itself.

Note

Flow extensions are currently supported only in the Self Registration flow.

How it works

A flow extension follows a simple request-response cycle:

  1. A user reaches the step in the flow where the extension is placed.
  2. WSO2 Identity Server sends a request to your endpoint, exposing the attributes you have marked as readable (for example, the user's email address and the application ID).
  3. Your service runs its logic and responds with the attributes you have marked as writable.
  4. WSO2 Identity Server writes the returned values back into the flow as user attributes (claims) and continues to the next step.

Because the logic runs entirely in your own service, you control the data sources and business rules without embedding them into the flow itself.

What's next