# Advanced WebSDK settings

# Branding

We provide with possibility to have your own branding on WebSDK and email notifications like custom logos, texts, css and external links to your domain.

Check out basic settings at the Branding tab of production and test environments dashboard.

# External WebSDK links

By default, if you set sending emails from our side, a user will get a link to our WebSDK, located at api.sumsub.com the same goes for Continue on your phone WebSDK links and QR-codes. From Branding settings at the dashboard you can provide us with Client applicant URL that will change the link domain and generate a jwt (JSON Web Token) query parameter to verify the link itself.

To use that functionality correctly you'll have to initialize WebSDK on your side for a dynamic url with jwt query parameter and its confirmed value. JWT value contains externalUserId (userId) and clientId that defines particular applicant on our side, so you could send request and use correct accessToken.

Token is generated with HMACSHA256 algorithm and secret is used raw without any encoding to create JWT Signature.

# Custom link example

• Client applicant URL: https://your-project.io/kyc
• Secret key to sign the applicant link: 1
• externalUserId: userId_8
• clientId: sumsub

https://your-project.io/kyc?jwt=eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE2MjAwNTI1MjcsImV4cCI6MTYyMDY1NzMyNywic3ViIjoidXNlcklkXzgiLCJhdWQiOiJzdW1zdWIifQ.qCR-4VMfC_zOAN1hCtbjj9DJxmB6c0sEg7XD5Y8ZvvM

# JWT data payload example

{
  "iat": 1620052527, // Issued at (seconds since Unix epoch)
  "exp": 1620657327, // Valid until (seconds since Unix epoch)
  "sub": "userId_8",
  "aud": "sumsub"
}

# Email notifications for users

Sending email notifications to user's email is set up by Email notifications checkbox at the Applicant level settings.

To have branded email notifications it's required to provide with Icon, Logo and Email sender (Send customer emails from) for Branding settings.

All email texts can be changed for each locale from the dashboard: production and test.

# Sending emails on your behalf

When you want to allow SumSub to send emails on behalf of your email domain, you must have an SPF and DKIM(optionally) record on your DNS server.

# SPF

• Create or edit an SPF record to reference SumSub
• Edit your domain's DNS settings to add a TXT record. The steps vary depending on your domain registrar.
• We recommend using the following SPF record:

v=spf1 include:_spf.sumsub.com ~all

• If you've already set up an SPF record for another purpose, you can simply add a reference to SumSub (include:_sumsub.com)

To examine your record you can use these tools that will display your published record and inform you of the issues, if any:

• SuperTool
• Dmarcian

# DKIM

• Edit your domain's DNS settings to add a TXT record named as sumsub._domainKey. The steps vary depending on your domain registrar.
• The DKIM record should be as followed:

v=DKIM1; k=rsa;
p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup2GVDOIk8to8PJnSWpLx1BKeJbKZeR1FFnT8PxhboHpbeV6lGVonJzVe1hLk5ns5MIGAbDuON9S3MC8J4R48iuttitN0Dq6QVvgnoE3LYdi6DfKRBkColUFzJI5C8ljeVRxbqE19puLGzHI26l8Gpcu9SpoTDEdVCo4ZmntrWurIkDJTKibGwYu0Ef3oDVDkCYHXsTrPnMwJTcHxA0E/CUp2njiazIyfcQ0+WNQ+MtnkQ0fAXu26rqyoWPFTVxxSB7AAxZz+XOuBfO9tIhlIWcPFbcwlsHWiAh2VxFz009sfGoMpci3aXgUVvXYONRic1HdgIrb/K2+QyE+rd/mBwIDAQAB

• If you already have a DKIM record with another selector, you still can create an additional one with sumsub selector

To examine your record you can use these tools that will display your published record and inform you of the issues, if any:

• SuperTool
• Dmarcian