Mechanism for Identity Authentication and Invoke Privilege Authorization - Xoxoday Product FAQs

All API authentication uses OAuth 2.0 bearer tokens issued over HTTPS. Token issuance, validation, refresh, and revocation follow standard OAuth 2.0 flows. JWT-based tokens include tenant scope claims to enforce tenant-level authorization for every API call.

All API authentication uses OAuth 2.0 bearer tokens issued over HTTPS. Token issuance, validation, refresh, and revocation follow standard OAuth 2.0 flows. JWT-based tokens include tenant scope claims to enforce tenant-level authorization for every API call. Learn more: Xoxoday Loyalife Help Centre

Are Loyalife integrations encrypted with HTTPS and OAuth?

Yes. Xoxoday Loyalife secures all external integrations end-to-end with TLS 1.2+, signed API keys, and OAuth or SSO/SAML authentication.

Does Xoxoday Loyalife offer native secure login and MFA?

Xoxoday Loyalife supports native secure login and built-in multi-factor authentication (MFA) to safeguard enterprise access.