--- source_url: "https://developer.transmitsecurity.com/guides/user/auth_overview" title: "Authentication & authorization overview" mirrored_at: 2026-08-04T01:31:42.858Z host: developer.transmitsecurity.com cited_in_42a: true mirror_canonical: "https://index.42a.ai/developer.transmitsecurity.com/guides/user/auth_overview" --- > **Original source:** https://developer.transmitsecurity.com/guides/user/auth_overview Build frictionless and secure authentication experiences for your users across all their devices and channels. - Use **journeys** to create identity experiences with easy-to-use graphical interface and Mosaic SDK. - Use an **OIDC-based approach** to authentication if you're interested in the classic OIDC integrations initiated from the browser, such as Mosaic's hosted login experience. - Use **backend-initiated approach** to implement integrations leveraging [Backend Authentication APIs](https://developer.transmitsecurity.com/openapi/user/backend-one-time-login.openapi). ## Biometric authentication Based on the [FIDO2 WebAuthn](https://fidoalliance.org/fido2-2/fido2-web-authentication-webauthn/) standard, biometric login is secure, consistent, and convenient for your customers. Launch fast with a fully hosted experience, or use our APIs/SDKs with your custom UI. On mobile devices, consider implementing authentication with device sensors, such as Face ID or fingerprint. Authentication method OIDC-based Backend-initiated Journey-based Log in with passkeys (WebAuthn) Not supported [Guides](https://developer.transmitsecurity.com/guides/webauthn/key_concepts) [Guide](https://developer.transmitsecurity.com/guides/orchestration/journeys/authenticate_passkeys) Log in with mobile biometrics Not supported [Guides](https://developer.transmitsecurity.com/guides/user/be_auth_biometrics_android) [Guide](https://developer.transmitsecurity.com/guides/orchestration/journeys/authenticate_mobile_biometrics) Log in with facial biometrics Not supported Not supported [Guide](https://developer.transmitsecurity.com/guides/user/auth_face) ## One-time login Log in users using a one-time code sent to their phone or email, or magic link sent to their email. This passwordless option allows users to log in to a device that doesn't support WebAuthn biometrics, or a device that doesn't belong to them. Authentication method OIDC-based Backend-initiated Journey-based Email magic link [Guide](https://developer.transmitsecurity.com/guides/user/auth_email_magic_link) [Guide](https://developer.transmitsecurity.com/guides/user/be_auth_email_magic_link) Not supported Email OTP [Guide](https://developer.transmitsecurity.com/guides/user/auth_email_otp) [Guide](https://developer.transmitsecurity.com/guides/user/be_auth_email_otp) [Guide](https://developer.transmitsecurity.com/guides/orchestration/journeys/authenticate_email_otp) SMS OTP [Guide](https://developer.transmitsecurity.com/guides/user/auth_sms_otp) [Guide](https://developer.transmitsecurity.com/guides/user/be_auth_sms_otp) [Guide](https://developer.transmitsecurity.com/guides/orchestration/journeys/authenticate_sms_otp) ## Time-based passcodes Log in users using time-based one-time passcodes (TOTP) generated by authenticator apps like Google Authenticator or Twilio Authy. Authentication method OIDC-based Backend-initiated Journey-based Log in with TOTP Not supported [Guide](https://developer.transmitsecurity.com/guides/user/be_auth_totp) [Guide](https://developer.transmitsecurity.com/guides/orchestration/journeys/authenticate_totp) ## Push notifications Log in users with push notifications sent to their trusted device. Authentication method OIDC-based Backend-initiated Journey-based Log in with push notifications Not supported Not supported [Guide](https://developer.transmitsecurity.com/guides/user/auth_web_to_mobile) Social login allows customers to quickly authenticate with their existing social media accounts. Add this into your app to provide a fast and easy way for your customers to sign up, and minimize friction at checkout. Authentication method OIDC-based Backend-initiated Journey-based Log in with Apple [Guide](https://developer.transmitsecurity.com/guides/user/auth_apple) [Guide](https://developer.transmitsecurity.com/guides/user/be_auth_apple) [Guide](https://developer.transmitsecurity.com/guides/orchestration/journeys/authenticate_apple_oidc) Log in with Google [Guide](https://developer.transmitsecurity.com/guides/user/auth_google) [Guide](https://developer.transmitsecurity.com/guides/user/be_auth_google) [Guide](https://developer.transmitsecurity.com/guides/orchestration/journeys/authenticate_google_oidc) Log in with Meta (Facebook) [Guide](https://developer.transmitsecurity.com/guides/user/auth_facebook) [Guide](https://developer.transmitsecurity.com/guides/user/be_auth_facebook) [Guide](https://developer.transmitsecurity.com/guides/orchestration/journeys/authenticate_meta_oidc) Log in with LINE [Guide](https://developer.transmitsecurity.com/guides/user/auth_line) Not supported Not supported Log in with Tiktok Not supported [Guide](https://developer.transmitsecurity.com/guides/user/be_auth_tiktok) Not supported ## Password login Password login allows you to authenticate users with a username and password, so you can smoothly migrate your customers from passwords to a passwordless solution. Authentication method OIDC-based Backend-initiated Journey-based Log in with passwords [Guide](https://developer.transmitsecurity.com/guides/user/auth_passwords) [Guide](https://developer.transmitsecurity.com/guides/user/be_auth_passwords) [Guide](https://developer.transmitsecurity.com/guides/orchestration/journeys/authenticate_password) ## PIN code Allow users to authenticate using a PIN they register within the app. This method leverages native device security and is supported through the Mobile SDK. Authentication method OIDC-based Backend-initiated Journey-based Log in with PIN code Not supported TBD [Guide](https://developer.transmitsecurity.com/guides/user/auth_pin)