This webinar presentation introduces Ionic Auth Connect, a new tool that makes authentication easy in Ionic apps. It discusses common authentication mistakes like insecure token storage. Auth Connect handles authentication flows securely using native system components. It provides a single API that works across authentication providers. The presentation demonstrates Auth Connect integrating with Auth0 and Azure authentication and discusses secure session token storage with Identity Vault. Attendees are invited to ask questions.

1. Auth Connect
Single Sign-on Made Easy
June 2019

2. Housekeeping Items
➔ This webinar is being recorded
➔ The presentation will be about 50 minutes
➔ All registrants will receive a link to the on-demand recording
following the event
➔ You can submit questions to the speakers during the live event
using the Q&A panel

3. Presenters
Nick Hyatt
Lead Product Manager
@NicholasPHyatt
Matt Netkow
Head of Developer Relations
@dotNetkow
matt.netkow@ionicframework.com

4. Agenda
Ionic Overview
Authentication Flow Primer
Common Authentication Mistakes
Introducing Ionic Auth Connect
Demo: Auth Connect
Bonus: Identity Vault
Q&A

5. Ionic Framework
Mobile-ready UI library that works
everywhere: any platform, any device,
any framework.
➔ Build for iOS, Android, Electron, PWAs, Web
➔ One codebase across all platforms
➔ Use basic web skills: HTML, JS, CSS
➔ Full access to Native APIs

6. Hybrid Architecture
HTML, CSS, JavaScript
Runs in a “browser” WebView
Wrapped in native app shell
Access device capabilities via plugins
- Cordova or Capacitor

7. App Authentication is… Complicated
Secure Storage Token RetrievalAuthentication “Handshake”User Login

8. Common Authentication Mistakes
1. Storing access tokens unencrypted on the device
2. Storing client secrets in the app’s source code
3. Implementing OAuth incorrectly
4. Using out-of-date, insecure community plugins
5. Using insecure InAppBrowser plugin for OAuth flows

9. Using InAppBrowser
1. Permits arbitrary JavaScript injection
a. Risk of stolen user data and passwords
2. OAuth in embedded browsers blocked by Google in
2017
3. Fine for loading external sites and static content

10. Ionic Auth Connect
The easiest way to integrate secure
authentication in your Ionic apps.
➔ Single API that works across providers
➔ Best-in-class security practices
➔ Cordova and Capacitor support
➔ Built and supported by Ionic

11. App Authentication is… Complicated
Secure Storage Token RetrievalAuthentication “Handshake”User Login

12. Ionic Auth Connect Makes It Easy
Secure Storage Token RetrievalAuth Connect APIUser Login

13. Auth Connect Benefits
➔ Reduce risk of data theft
➔ Save time and focus on your business
➔ Freedom to use with any auth provider
➔ Long-term peace of mind
Protect your Ionic apps and user data.

14. Key Features
1. Complete OAuth Support (Login, logout, and token refresh)
2. Uses native System Components to enforce compliance & user safety
3. Multiple OS version support
4. Shared cookie storage

15. Demo!
Ionic App + Auth0 and Azure auth

16. Session Token Storage?

17. Session Token Storage?

18. Identity Vault

19. Recap
Secure Storage
via Identity Vault
Token RetrievalSecure
Authentication via
Auth Connect
User Login

20. Q&A
sales@ionicframework.com
Nick Hyatt
Lead Product Manager
@NicholasPHyatt
Matt Netkow
Head of Developer Relations
@dotNetkow
matt.netkow@ionicframework.com