Authentication Gateway
  • 13 May 2024
  • 1 Minute to read
  • Contributors
  • Dark
    Light

Authentication Gateway

  • Dark
    Light

Article summary

Bento's authentication framework offers merchants a selection of providers to authenticate customers on their e-commerce platforms.

Why support different authentication providers

Allowing merchants to choose from various authentication providers is crucial for a versatile e-commerce platform. This flexibility is especially important because changing authentication providers typically involves significant customer friction. For instance, when switching providers, customers often need to reset their passwords due to the encrypted nature of the original passwords, which cannot be transferred due to their one-way encryption keys. This process can adversely affect customer retention.

Therefore, the authentication component is frequently utilised within the Bring Your Own Platform feature, allowing for a smoother transition and integration.

Principles

The Authentication Gateway is built on the following fundamental principles:

  • Seamless integration with other Bento services - Regardless of the chosen authentication provider, all downstream Bento services can function without disruption.

  • Zero access to customers' login credentials - If you opt for an external authentication provider, Bento will not have access to your customers' login credentials, maintaining a clear separation of security concerns.

Providers

The following providers are currently supported for the Product Gateway.

Provider

Description

Link

Bento Box

A straightforward headless username/password authentication system.

OAuth 2.0

Supports systems that adhere to OAuth 2 standards, like Google and Okta.

Shopify

Allows Shopify powered stores to utilise Shopify's authentication tokens for interacting with Bento Box.

Learn more

What if my provider is not supported?

We recognise that many companies have developed unique authentication systems tailored to their specific needs, which may not conform to open standard specifications. If your current system isn't supported, please discuss with your Bento representative about how we can assist. This may involve developing a bespoke integration for your needs.

Alternatively, if you are considering migrating away from a proprietary authentication system, Bento is well-equipped to assist with the transition to industry-standard platforms. We would be eager to support you in this migration to enhance your platform’s compatibility and security.


Was this article helpful?