Explore Sample Application Functionalities

User allowed features after authentication

After successful authentication, a user logs in to the Java Angular Sample app and see demo functionalities as a menu in the top-right corner of the page.
These functionalities are included as part of the sample app to demonstrate, how a a client application can integrate CyberArk Identity authentication and authorization services in their application features/tasks or activities like updating user profile or even the crucial items like transferring funds.

Some of these use cases added in the sample app are discussed below.

TOTP Registration

TOTP mode of authentication is also provided as part of the CyberArk Identity product. The usage of this time - based one time password to authorize user is demonstrated in sample app to showcase how clients can use it to authenticate and authorize users to their application or platform using CyberArk Identity.

TOTP registration is also configurable from the admin portal provided by CyberArk at the time of availing the services.

  • On clicking the TOTP Register tab at the top, the app navigates the user to TOTP Registration page.
14181418
  • At this page, the steps to register for receiving the OTP along with a QR code and a verification code input field can be seen.
14191419

TOTP Registration

  • Following the steps mentioned in the page a user first needs to install any 3rd party authenticator app like Google authenticator/ Microsoft authenticator and scan the QR code available on ample app page.

  • Upon scanning the QR code, a one time password will be displayed on the authenticator as shown below

12921292
  • Enter this OTP in the Code input box and click on Verify to proceed.
14201420
  • Upon successful authorization, a message at the top displaying the successful user registration.

Fund Transfer

A client can integrate the CyberArk Identity in their applications to authenticate and authorize users at the crucial activities like transferring funds and similar functionalities. This use case demonstrates the Fund Transfer functionality.

  • On clicking the Fund Transfer tab, user navigates to a page where an input field is provided for some amount to be entered.
14151415
  • After entering the amount, click on Transfer button. It initiates the process which uses CyberArk Identity platform to authorize the user.
14181418
  • The user enters the password or responds to the various challenges corresponding to the user account and proceed by clicking Next.

  • After successful authorization, the process of fund transfer is marked completed and the Fund Transfer screen displaying the success can be seen.

14171417

📘

Note:

The value of amount entered on this page is only for demonstration purpose and no actual transaction takes place in the database. This part is integrated in sample app to showcase how CyberArk Identity can be used to provide authorization mechanisms for crucial activities like Fund Transfer at client end.

Updating User Profile

This page contains the current user account details and provide an option to update the profile information. The profile information includes username, email address, display name and mobile number. User is allowed to edit the details and use the Update button to submit the details.

Updating the user profile invokes /user/UpdateProfile endpoint, which updates the cloud user properties and the local database user properties to the latest updated values, depending upon the scenario in use.

Example:

14161416
POST /user/UpdateProfile

{
  DisplayName: "USER",
  MFA: false,
  Mail: "[email protected]",
  MobileNumber: "9876543210",
  Name: "user" 
}

Post successful update, a message gets displayed on the same screen as shown in below image.

14211421

The response of this API call can be seen below:

{
  "success":true,
  "Result":null,
  "Message":null,
  "MessageID":null,
  "Exception":null,
  "ErrorID":null,
  "ErrorCode":null,
  "IsSoftError":false,
  "InnerExceptions":null,
  "UserName":"[email protected]"
}

Logging Out

At the end, you can click on Logout button which invokes the /security/logout Endpoint to log the user out, passing the authentication token that was acquired after successful authentication in the response header.

14191419
POST /Security/logout

The success field in the response indicates whether the request was successful or not.

{
    "success": true,
    "Result": null,
    "Message": null,
    "MessageID": null,
    "Exception": null,
    "ErrorID": null,
    "ErrorCode": null,
    "InnerExceptions": null
}

These demonstrates the current use cases and capabilities of sample app.