# Advanced WebSDK settings

# Branding

We provide with possibility to have your own branding on WebSDK and email notifications like custom logos, texts, css and external links to your domain.

Check out basic settings at the Branding tab of production and test environments dashboard.

By default, if you set sending emails from our side, a user will get a link to our WebSDK, located at api.sumsub.com the same goes for Continue on your phone WebSDK links and QR-codes. From Branding settings at the dashboard you can provide us with Client applicant URL that will change the link domain and generate a jwt (JSON Web Token) query parameter to verify the link itself.

To use that functionality correctly you'll have to initialize WebSDK on your side for a dynamic url with jwt query parameter and its confirmed value. JWT value contains externalUserId (userId) and clientId that defines particular applicant on our side, so you could send request and use correct accessToken.

Token is generated with HMACSHA256 algorithm and secret is used raw without any encoding to create JWT Signature.

  • Client applicant URL: https://your-project.io/kyc
  • Secret key to sign the applicant link: 1
  • externalUserId: userId_8
  • clientId: sumsub
https://your-project.io/kyc?jwt=eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE2MjAwNTI1MjcsImV4cCI6MTYyMDY1NzMyNywic3ViIjoidXNlcklkXzgiLCJhdWQiOiJzdW1zdWIifQ.qCR-4VMfC_zOAN1hCtbjj9DJxmB6c0sEg7XD5Y8ZvvM

# JWT data payload example

# Email notifications for users

Sending email notifications to user's email is set up by Email notifications checkbox at the Applicant level settings.

To have branded email notifications it's required to provide with Icon, Logo and Email sender (Send customer emails from) for Branding settings.

All email texts can be changed for each locale from the dashboard: production and test.

# Sending emails on your behalf

When you want to allow SumSub to send emails on behalf of your email domain, you must have an SPF and DKIM(optionally) record on your DNS server.

# SPF

  • Create or edit an SPF record to reference SumSub
  • Edit your domain's DNS settings to add a TXT record. The steps vary depending on your domain registrar.
  • We recommend using the following SPF record:
v=spf1 include:_spf.sumsub.com ~all
  • If you've already set up an SPF record for another purpose, you can simply add a reference to SumSub (include:_sumsub.com)

To examine your record you can use these tools that will display your published record and inform you of the issues, if any:

Not setting up an SPF record will cause a blockage of our emails to your users and in that case email sending will be disabled automatically from our side.

# DKIM

  • Edit your domain's DNS settings to add a TXT record named as sumsub._domainKey. The steps vary depending on your domain registrar.
  • The DKIM record should be as followed:
v=DKIM1; k=rsa;
p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup2GVDOIk8to8PJnSWpLx1BKeJbKZeR1FFnT8PxhboHpbeV6lGVonJzVe1hLk5ns5MIGAbDuON9S3MC8J4R48iuttitN0Dq6QVvgnoE3LYdi6DfKRBkColUFzJI5C8ljeVRxbqE19puLGzHI26l8Gpcu9SpoTDEdVCo4ZmntrWurIkDJTKibGwYu0Ef3oDVDkCYHXsTrPnMwJTcHxA0E/CUp2njiazIyfcQ0+WNQ+MtnkQ0fAXu26rqyoWPFTVxxSB7AAxZz+XOuBfO9tIhlIWcPFbcwlsHWiAh2VxFz009sfGoMpci3aXgUVvXYONRic1HdgIrb/K2+QyE+rd/mBwIDAQAB
  • If you already have a DKIM record with another selector, you still can create an additional one with sumsub selector

To examine your record you can use these tools that will display your published record and inform you of the issues, if any:

DMARC permits Identifier Alignment, based on the result of a DKIM authentication. If your DMARC policy contains adkim tag 's' - strict mode - the DKIM domain and the Header From domain must exactly match. So your must set up our DKIM selector for your domain

Last Updated: 8/25/2021, 4:33:11 PM