Authentication and Security with Ionic
It’s almost impossible to overstate the importance of mobile app security. Every enterprise app needs it in order to protect sensitive data and safeguard users.
And yet despite the need for solid security, keeping up with security requirements can feel like a distraction. Best practices are constantly changing, and there are always new security patches and fixes that need to be maintained. One tiny misstep can have serious consequences for your users. It’s yet one more thing taking focus and time away from your core business. This guide is here to help.
Before you can even identify the best security solutions for your mobile app, you first need to understand what we at Ionic call the security trifecta.
What is the Security Trifecta?#
There are three areas where your app can protect your users’ data from being compromised. We call them the mobile app security trifecta:
Single Sign-on (SSO): The one set of credentials that allows your user access to multiple systems or resources.
Biometric Authentication: A process that relies on unique biological characteristics to verify individuals, including like Face ID, Touch ID, and fingerprint scans.
Data Storage: Where and how you store data in your app, including small bits of data like session tokens to larger amounts like product catalogs.
Modern Authentication with Ionic Auth Connect#
Auth Connect makes it easy to integrate with popular auth providers and custom solutions, all from a simple, easy-to-use solution.
Prevent unauthorized access to usernames, passwords, and sensitive company data, by using the latest security best practices and platform requirements.
Integrate your Ionic apps with any OAuth or OpenID Connect-based auth provider or custom solution — all from a single, easy to use connector.
Deliver excellent protection without being a mobile security expert. Auth Connect is easy to install and manage, so you can get back to focusing on your app.
Auth Connect supports any service that is OIDC 2.0 compliant:
Secure Mobile Biometrics with Identity Vault#
Protect your users with the most secure mobile biometric authentication available. Boost your security to new or existing Ionic apps in minutes.
Bring the latest in biometric authentication to all of your Ionic apps, including native fingerprint identification and facial recognition for a secure, intuitive user experience across the board.
Always-on Session Management safeguards data even when not using your app, with background screen protection for sensitive data and apps, and automatic logout based on inactivity time.
Identity Vault is a completely modular, easy to consume user service that extends your app logic to handle everything you need for secure token storage and session management.
Works seamlessly with Auth Connect to easily integrate with popular backend authentication providers, including Active Directory, Okta, Auth0, custom REST APIs, and others.
Identity Vault provides a safe, private, and encrypted method of storing authentication tokens and other sensitive data, protecting them with advanced methods like fingerprint and facial ID.
Secure Storage powers local device encryption#
Deliver secure, reliable, data-driven mobile experiences that work anywhere, anytime — even when they’re offline.
Secure Storage is a powerful local database that makes it easy to encrypt, store, access, and manage data online and offline, across all platforms, with built-in security and blazing-fast performance.
Local storage that works and performs great with or without a network connection, protected by military-grade data at-rest encryption.
Ready to deploy on the devices and platforms your users care about. Secure Storage works across iOS, Android, and the web, all from the same codebase.
Built on an industry-leading SQL database engine, designed to outperform traditional file-system storage techniques.
With transaction protection, your users can be sure that their transactions completed successfully, or not at all, in the event of an unexpected crash or power failure.
