# Advanced WebSDK settings

# Branding

We provide with possibility to have your own branding on WebSDK and email notifications like custom logos, texts, css and external links to your domain.

Check out basic settings at Branding and WebSDK setting tabs of the dashboard.

# External WebSDK links

By default, if you set sending emails from our side, a user will get a link to our WebSDK, located at api.sumsub.com the same goes for Continue on your phone WebSDK links and QR-codes. From Websdk settings at the dashboard you can provide us with Success redirect url that will change the link domain and generate a jwt (JSON Web Token) query parameter to verify the link itself.

To use that functionality correctly you'll have to initialize WebSDK on your side for a dynamic url with jwt query parameter and its confirmed value. JWT value contains externalUserId (userId) and clientId that defines particular applicant on our side, so you could send request and use correct accessToken.

Token is generated with HMACSHA256 algorithm and secret is used raw without any encoding to create JWT Signature.

# Custom link example

• Client applicant URL: https://your-project.io/kyc
• Secret key to sign the applicant link: 1
• externalUserId: userId_8
• clientId: sumsub

https://your-project.io/kyc?jwt=eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE2MjAwNTI1MjcsImV4cCI6MTYyMDY1NzMyNywic3ViIjoidXNlcklkXzgiLCJhdWQiOiJzdW1zdWIifQ.qCR-4VMfC_zOAN1hCtbjj9DJxmB6c0sEg7XD5Y8ZvvM

# JWT data payload example

{
  "iat": 1620052527, // Issued at (seconds since Unix epoch)
  "exp": 1620657327, // Valid until (seconds since Unix epoch)
  "sub": "userId_8",
  "aud": "sumsub"
}

# Email notifications for users

Sending email notifications to user's email is set up by Email notifications checkbox at the Applicant level settings.

To have branded email notifications it's required to provide with Icon, Logo, Email sender (Send customer emails from) and switch the Hide service logo on for Branding settings.

All email texts can be changed for each locale from the dashboard.

# Sending emails on your behalf

If you want to allow SumSub to send emails on behalf of your email domain, you must have both SPF and DKIM records configured on your DNS server.

# SPF

Create or edit an SPF record to reference SumSub.

• Edit your domain's DNS settings to add a TXT record.
• We recommend using the following SPF record:

v=spf1 include:_spf.sumsub.com ~all

• If you've already set up an SPF record for another purpose, you can simply add a reference to SumSub (include:_spf.sumsub.com)

To examine your record you can use these tools that will display your published record and inform you of the issues, if any:

• SuperTool
• Dmarcian

# DKIM

Edit your domain's DNS settings to add CNAME records.

• CNAME records should be as followed:

sumsub1._domainkey CNAME sumsub1._domainkey.sumsub.com.
sumsub2._domainkey CNAME sumsub2._domainkey.sumsub.com.

To examine your record you can use these tools that will display your published record and inform you of the issues, if any:

• SuperTool
• Dmarcian