# Advanced WebSDK settings
# Branding
We provide with possibility to have your own branding on WebSDK and email notifications like custom logos, texts, css and external links to your domain.
Check out basic settings at Branding tab of the dashboard.
# External WebSDK links
By default, if you set sending emails from our side, a user will get a link to our WebSDK, located at api.sumsub.com
the same goes for Continue on your phone WebSDK links and QR-codes.
From Branding settings at the dashboard you can provide us with Client applicant URL
that will change the link domain and generate a jwt
(JSON Web Token) query parameter to verify the link itself.
To use that functionality correctly you'll have to initialize WebSDK on your side for a dynamic url with jwt
query parameter and its confirmed value.
JWT value contains externalUserId
(userId) and clientId
that defines particular applicant on our side, so you could send request and use correct accessToken.
Token is generated with HMACSHA256
algorithm and secret is used raw without any encoding to create JWT Signature.
# Custom link example
- Client applicant URL:
https://your-project.io/kyc
- Secret key to sign the applicant link:
1
- externalUserId:
userId_8
- clientId:
sumsub
https://your-project.io/kyc?jwt=eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE2MjAwNTI1MjcsImV4cCI6MTYyMDY1NzMyNywic3ViIjoidXNlcklkXzgiLCJhdWQiOiJzdW1zdWIifQ.qCR-4VMfC_zOAN1hCtbjj9DJxmB6c0sEg7XD5Y8ZvvM
# JWT data payload example
{
"iat": 1620052527, // Issued at (seconds since Unix epoch)
"exp": 1620657327, // Valid until (seconds since Unix epoch)
"sub": "userId_8",
"aud": "sumsub"
}
# Email notifications for users
Sending email notifications to user's email is set up by Email notifications checkbox at the Applicant level settings.
To have branded email notifications it's required to provide with Icon, Logo and Email sender (Send customer emails from) for Branding settings.
All email texts can be changed for each locale from the dashboard.
# Sending emails on your behalf
When you want to allow SumSub to send emails on behalf of your email domain, you must have an SPF and DKIM(optionally) record on your DNS server.
# SPF
- Create or edit an SPF record to reference SumSub
- Edit your domain's DNS settings to add a TXT record. The steps vary depending on your domain registrar.
- We recommend using the following SPF record:
v=spf1 include:_spf.sumsub.com ~all
- If you've already set up an SPF record for another purpose, you can simply add a reference to SumSub (
include:_sumsub.com
)
To examine your record you can use these tools that will display your published record and inform you of the issues, if any:
Not setting up an SPF record will cause a blockage of our emails to your users and in that case email sending will be disabled automatically from our side.
# DKIM
- Edit your domain's DNS settings to add a TXT record named as
sumsub._domainKey
. The steps vary depending on your domain registrar. - The DKIM record should be as followed:
v=DKIM1; k=rsa;
p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup2GVDOIk8to8PJnSWpLx1BKeJbKZeR1FFnT8PxhboHpbeV6lGVonJzVe1hLk5ns5MIGAbDuON9S3MC8J4R48iuttitN0Dq6QVvgnoE3LYdi6DfKRBkColUFzJI5C8ljeVRxbqE19puLGzHI26l8Gpcu9SpoTDEdVCo4ZmntrWurIkDJTKibGwYu0Ef3oDVDkCYHXsTrPnMwJTcHxA0E/CUp2njiazIyfcQ0+WNQ+MtnkQ0fAXu26rqyoWPFTVxxSB7AAxZz+XOuBfO9tIhlIWcPFbcwlsHWiAh2VxFz009sfGoMpci3aXgUVvXYONRic1HdgIrb/K2+QyE+rd/mBwIDAQAB
- If you already have a DKIM record with another selector, you still can create an additional one with
sumsub
selector
To examine your record you can use these tools that will display your published record and inform you of the issues, if any:
DMARC permits Identifier Alignment, based on the result of a DKIM authentication. If your DMARC policy contains adkim tag 's' - strict mode - the DKIM domain and the Header From domain must exactly match. So your must set up our DKIM selector for your domain