# Advanced WebSDK settings

# Branding

With Sumsub, you don't need to worry about losing your brand identity. Our service allows you to customize your WebSDK and email notifications with your own branding elements such as logos, text, and external links that point to your domain.

Check out basic settings at Branding and WebSDK setting on the dashboard.

# External WebSDK links

When you send emails from our platform, users will receive a link to our WebSDK, located at api.sumsub.com The same applies for Continue on your phone WebSDK links and QR-codes. Through the WebSDK settings on the dashboard, you can provide a Success redirect url that will change the link domain and generate a jwt (JSON Web Token) query parameter to verify the link itself.

To use this functionality properly, you need to initialize WebSDK on your side for a dynamic url with jwt query parameter and its confirmed value. The JWT value contains externalUserId (userId) and clientId which defines a particular applicant on our platform. This will allow you to send requests and use the correct accessToken.

Token is generated with HMACSHA256 algorithm and it is used raw without any encoding to create JWT Signature.

# Custom link example

• Client applicant URL: https://your-project.io/kyc
• Secret key to sign the applicant link: 1
• externalUserId: userId_8
• clientId: sumsub

https://your-project.io/kyc?jwt=eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE2MjAwNTI1MjcsImV4cCI6MTYyMDY1NzMyNywic3ViIjoidXNlcklkXzgiLCJhdWQiOiJzdW1zdWIifQ.qCR-4VMfC_zOAN1hCtbjj9DJxmB6c0sEg7XD5Y8ZvvM

# JWT data payload example

{
  "iat": 1620052527, // Issued at (seconds since Unix epoch)
  "exp": 1620657327, // Valid until (seconds since Unix epoch)
  "sub": "userId_8",
  "aud": "sumsub"
}

# Email notifications for users

If you want to send email notifications to your users, make sure to enable the Email notifications checkbox on the Applicant level settings.

To customize the email notifications with your brand, you'll need to provide an Icon, Logo, Email sender (custom email address). Additionally, you can Hide service logo by adjusting the Branding settings.

All email texts can be customized for each locale from the dashboard.

# Sending emails on your behalf

To ensure that SumSub can send emails from your email domain, It's important to have SPF and DKIM records set up on your DNS server.

# SPF

Create or edit an SPF record to reference SumSub.

• Add a TXT record to your domain's DNS settings.
• We recommend using the following SPF record to ensure that it is set up correctly:

v=spf1 include:_spf.sumsub.com ~all

• If you've already set up an SPF record for another purpose, you can simply add a reference to SumSub (include:_spf.sumsub.com)

To check your record and identify any issues, you can use these tools:

• SuperTool
• Dmarcian

# DKIM

Edit your domain's DNS settings to add CNAME records.

• CNAME records should be as followed:

sumsub1._domainkey CNAME sumsub1._domainkey.sumsub.com.
sumsub2._domainkey CNAME sumsub2._domainkey.sumsub.com.

To check your record and identify any issues, you can use these tools:

• SuperTool
• Dmarcian