Skip to main content

Audience Member Authentication

Allegro handles sign-in for your audience so they never need to create or remember a password. Members authenticate with magic links (a one-click email login), one-time codes (a six-digit code emailed to them), or social login through providers like Google, Apple, and Facebook.

The goal is frictionless access — your audience gets in quickly, and you don't have to worry about password resets or credential management.

How It Works​

When a member signs in, Allegro creates a secure session for their device. That session keeps them authenticated as they interact with your content. No passwords are stored, and sessions are managed entirely by Allegro on your behalf.

Magic links let members sign in with just their email address.

  1. The member enters their email
  2. Allegro sends an email containing a one-click login link
  3. The member clicks the link and is immediately signed in
  4. A secure session is created for their device

If the link expires before the member clicks it, they can request a new one.

tip

Magic links are the simplest way to authenticate your audience. There is nothing to configure — they work out of the box for every tenant.

One-Time Codes​

One-time codes are the same idea as magic links, but the member types a code instead of clicking a link.

  1. The member enters their email
  2. Allegro emails them a six-digit code
  3. The member types the code back into the sign-in form
  4. Once the code is verified, a secure session is created for their device

The key difference is that the code is entered on the same device that requested it, so sign-in finishes right away without switching to an email app or waiting for a link to open. This is often a smoother experience on phones and in embedded contexts, and it works well when opening a link would break the flow (for example, inside an in-app browser).

Like magic links, one-time codes require no configuration and are available for every tenant. A few behaviors are worth knowing when you support members:

BehaviorDetail
Code lifetimeEach code is valid for 30 minutes.
Requesting a resendRequesting a new code invalidates the previous one — only the most recent code works.
Rate limitingA member can request at most three codes per minute for the same email.
Incorrect attemptsToo many wrong entries locks the code, and the member must request a fresh one.

Social Login​

Social login lets members sign in with an account they already have, such as Google or Apple. The entire flow happens inside a secure popup window, so credentials are never exposed to your site.

  1. The member clicks a social login button (e.g. "Sign in with Google")
  2. A popup opens where they complete sign-in with the provider
  3. Once approved, the popup closes and the member is authenticated

Implementation​

You can use the Allegro Web SDK to implement authentication yourself or simply drop in our pre-built login form component. For technical integration details, see the Developer Documentation.

Web Components​

The <allegro-login-form> component provides a ready-made login form that handles magic links, one-time codes, and social login. Drop it into your page and it works — no custom code required.