Advanced Authentication
Generate customized account connection and reconnection links from the Dashboard.
Use Advanced Authentication to generate a Hosted Auth link without writing code. You can configure a manual connection, test provider options, or share a link with an account owner and return them to your application afterward.
Open Accounts → Link Account → Advanced Authentication. For a basic connection, choose Quick Authentication instead. To generate links from your backend, see Hosted Authentication.
Configure the link
Move through the form using its next and back actions. For a new connection:
- Select the providers the link should offer. Use a preset or select individual providers.
- Choose the link lifetime, return URL, and optional state. The return URL controls where the account owner goes after authentication; state lets your callback identify the flow.
- Select a custom authentication domain if one is enabled for this application.
- Review each provider's options.
- Review the global configuration and generate the link.
Keep the generated link private and share it only with its intended recipient. A link has an expiration time; generate a new one if it expires before authentication completes.
Configure providers
Only options relevant to the selected providers are displayed.
| Provider | Options |
|---|---|
| Google and Outlook | Use the application's OAuth permission configuration or select a custom subset for this link. |
| Choose authentication methods and products; optionally let the account owner select products in Hosted Auth. | |
| Choose Credentials, Cookies, or UniLogin authentication methods. | |
| Choose QR Code or Pairing Code authentication methods. | |
| IMAP | Enable Initial Sync when advanced search is needed. |
| Providers with proxy support | Configure a custom proxy or available automatic proxy options. |
Select at least one authentication method where a choice is offered. LinkedIn product choices must match the provider's supported combinations and the account owner's subscriptions; see Link LinkedIn accounts.
OAuth permissions
Application configuration uses the permissions defined in Configuration → OAuth. Custom configuration requests only the selected permissions for this link. Choose at least one available permission; the selection must stay within the application's configured permissions.
This selection controls provider authorization. It is separate from informational Hosted Auth consent scopes and Scopes that isolate accounts.
Proxy configuration
Where offered, configure a custom proxy's protocol, host, port, and optional credentials. For automatic protection, choose a country or an IP from which to infer the country, and review whether another country may be used as fallback.
The automatic country options apply only to providers using automatic protection. A custom proxy takes precedence over automatic proxy settings. See Proxies for the complete lookup order and behavior when a country is unavailable.
Configure global options
| Option | Effect |
|---|---|
| Scope | Assigns the newly connected account permanently to the selected active Scope. Available for new connections. |
| Login Hint | Prefills an identity field such as an email, username, or phone number where supported. It is a hint, not proof of identity. |
| Allow User Proxy Override | Lets the account owner provide a proxy in Hosted Auth; that choice takes precedence over the configured proxy. |
| Allow User Country Override | Lets the account owner choose an automatic proxy country. It has no effect when a custom proxy is used for that provider. |
| Wait Initial Sync | Keeps Hosted Auth on a synchronization screen before redirection for providers with Initial Sync support. |
Only active Scopes in the application can be selected. Verify the destination Scope before generating a link because an account's assignment cannot later be changed.
Waiting for Initial Sync does not prevent an account owner from closing the browser before it finishes. Use the Initial Sync webhooks when your application must reliably track completion.
Generate and use the link
Click Generate Link after completing the required selections. Copy the resulting link for the account owner, or open it to complete authentication yourself. Use Generate Another to return to the form for another link.
After the flow completes, the owner is redirected to the URL you supplied. When returning to your own application, handle successful and failed callbacks as described in Hosted Authentication.
Reconnect with custom settings
Open an existing account's actions menu and choose Re-authenticate, or choose Advanced Authentication from its reconnection action. The form loads the account's current configuration.
- The target account and provider are fixed. Authenticate with the same provider identity.
- The existing Scope cannot be changed.
- For LinkedIn, keep the current products or select a custom final configuration. Reconnection restarts every configured product.
- For Google and Outlook, review the final OAuth permission selection when changing account permissions.
- Review proxy settings, especially when the account is disconnected and its automatic proxy settings cannot be changed directly from the detail page.
Generate the reconnection link and have the account owner complete it. The existing account ID is preserved. See Connection Status for deciding when reconnection is the appropriate recovery action.
Updated about 13 hours ago