Frequently asked questions

Before you start#

Do I have to migrate my users?#

No. Shield checks each password against your own MySQL database or LDAP directory at sign-in. Your users, and their password hashes, stay where they are.

Does VERISCO store my users' passwords?#

No. It reads the hash from your directory to check a password and does not copy it.

Can VERISCO change my data?#

In read-only mode, which is the default, it cannot. It needs SELECT on your users table and nothing else. See Access mode.

My application is on a private network. Can I still use Shield?#

Yes. That is what connector mode is for. An agent in your network dials out, and nothing of yours has to be reachable from the internet.

Which languages are supported?#

In gateway and connector mode, all of them: your application reads one header and verifies a signature. A ready-made middleware exists for Node. See Framework support.

Is there a free trial?#

A 30-day Pilot with every feature starts when your tenant is approved, unless your account is set up as payment before activation.

Integrating#

Does my application need to talk to the sign-in provider?#

Not in gateway or connector mode. VERISCO performs the whole exchange and hands your application a signed identity. In SDK mode your application is the sign-in client.

Can I keep my own login page?#

While you are in pass-through, yes, and it keeps working. After you go live, sign-in happens on your VERISCO page, which carries your branding. Remove or seal the old one.

Can I keep my own sessions?#

For authentication, VERISCO's session is the one that matters. You can still keep application sessions for things that are not authentication: a cart, preferences, a draft.

How does my application get the user's role?#

From the role column you mapped. It arrives as user.roles in the signed identity. See Roles.

What happens to my site while I integrate?#

Nothing. A published tenant is in pass-through: nobody is blocked until you go live, and going back takes seconds.

Running it#

What happens if VERISCO is down?#

In gateway and connector mode your application is reached through VERISCO, so it is unreachable too. In SDK mode your application keeps working on the last state it received.

How fast does ending a session take effect?#

Within 5 seconds in gateway and connector mode, and within 30 seconds in SDK mode.

Does going over my included users block anyone?#

No. Extra active users are billed. Nobody is refused at sign-in for that reason.

Can I prove nobody changed my configuration?#

Yes. Export the audit log and check its hash chain yourself, with a program that does not depend on VERISCO.

Can I record less about my staff?#

Yes. Data and privacy lowers what is written, per kind of data, and can show people by pseudonym.

Who can change the plan or the database connection?#

Only an owner. See Team and roles.