Skip to main content

Identifier first authentication

Identifier first authentication first requests the user's identifier such as an email or username before prompting for a password or other authentication methods.

This guide explains how to enable and use identifier first authentication in Ory Network and self-hosted Ory Kratos.

Ory Network​

To enable it:

    1. Log in to the Ory Console.
    1. Select your project.
    1. Navigate to Branding → Theming in the Ory Console.
    1. Enable "Enable Account Experience 2.0 (preview)".
    1. Navigate to Branding → UI URLs in the Ory Console
    1. Click "Apply new UI URLs".
    1. Test the flow in your application by navigating to the login page.

To revert, follow the same steps, disable "New Account Experience", and click "Reset to Account Experience".

Self-hosted Ory Kratos​

For Ory Enterprise License and Ory Apache 2.0 License users, set the following configuration in your kratos.yaml config file:

kratos-config.yaml
selfservice:
  flows:
    login:
      style: identifier_first

To disable this feature, set style to unified.