Self-service flows¶
The Charmed Ory Kratos component of the Identity Platform is an identity and user management system that allows you to manage users locally rather than relying on third party identity providers.
Alongside tasks that system administrators can perform, it also allows users to carry out certain actions on their own. We will refer to those operations as self-service flows. This document will list them and explain their mechanisms.
Account recovery¶
Account recovery flow allows registered users to regain access to their account if they forgot their password. It can be initiated by clicking the “Reset password” link on the login screen.
If an SMTP server was configured, the user will receive an email containing a recovery link and code that need to be used in order to recover access to the account.
Password reset¶
Once logged in, users can change their passwords.
Profile and account management¶
Users can also add or reset other authentication methods:
(un)link a time-based one-time password (TOTP) authenticator app
generate backup codes as a fallback 2fa method
add a passwordless login method
link social sign in accounts.
Login Flow¶
The login flow is the primary entry point for users interacting with the Identity Platform. Understanding this flow is essential for troubleshooting how users authenticate before they can manage their profiles.
Find out more about the login flow: