Last updated

Personal space modules

Imagine your users needing to reset passwords, enable MFA, configure SSO, or manage API tokens—all tasks that typically require building and maintaining custom interfaces.

With Frontegg, you can embed the self-service portal into your application, allowing users to handle these tasks independently. Using the Frontegg Builder, you control which features are available, ensuring a tailored experience.

The self-service portal is divided into two spaces: personal Space for individual users and workspace for account-level features.

In the personal space users can:

  • Manage their user profile including editing details like their profile picture and name
  • Set their personal privacy & security policies like implementing MFA on their account, seeing which devices they're currently logged in on, and change their password
  • Create and manage personal API tokens

Prerequisites

Personal token module require being enabled from the Frontegg builder and relevant user permissions.

Profile module

The User Profile section in the personal space is where Frontegg users can enter and edit information about themselves.

Frontegg's user profile showcases multiple parameters like:

  • Email
  • Name
  • Phone number (does not impact authentication)
  • Address
  • Job title
  • Profile picture
  • Applications (for hosted self-service)

self-service

Privacy & security settings

The Privacy and Security section allows users to control various aspects of their own account's privacy and security.Users can change multiple settings such as SMS Login, Authenticator App, Security Key, and more.

Set and change password

A user can change their password by clicking the _edit _button on the right side of the table. A dialog appears where a user can change their password by following the requirements in the dialog.

self-service

Implement MFA verification

A user can configure multi-factor authentication for their account. MFA adds an extra layer of security to a user account by requiring more than one proof of identification to log in.

By default, a user is able to set MFA but it is optional, unless forced on the environment level. For a user to set MFA, they need go to their self-service find Privacy & Security.

The user can enable MFA for their own account by toggling the switch to on.

self-service

After choosing the second factor, the user will be provided with a recovery code that they need to save somehwere, for cases they'll lose their phone. Users can be unerolled from existing MFA devices also from the Frontegg dashboard, management section, or via API.

Personal tokens

Frontegg personal tokens are user-specific role-based API tokens generated and used by tenant users. As mentioned in the detailed Machine to Machine guide, the tokens can be either client credentials, or access tokens.

Personal tokens require being associated with a user and inherit the role of the user who has created them from self-service, or the user ID that was sent when a token is creaed via API.

self-service