In the WebSDK settings section, you can configure additional settings for your WebSDK integration to enhance its security and customize link redirection. For security, restrict WebSDK initialization to trusted domains and specify which domains are allowed. A secret key can also be configured to sign JWTs (JSON Web Tokens), ensuring safe data exchange. Additionally, you can provide your custom redirect URL, sending applicants to a domain of your choice.

Configure WebSDK settings

To configure the settings:

1. In the Dashboard, open Dev space, and go to the WebSDK settings page.
2. In the Domains to host WebSDK section, specify trusted domains where you allow WebSDK initialization. You can provide multiple domains by clicking Add domain and creating a new field for each domain.
3. Create your own secret key that will be used to sign JWT (JSON Web Token) every time Sumsub generates it. This ensures that the token is authentic and its data has not been altered.
4. [Optionally] In the Post-verification redirect URL field, set a custom URL to which applicants will be redirected after successful verification. This URL may lead to your website or any page that informs applicants about the completion of verification. When used with JWT signing, we will append a signed JWT query parameter to this URL to securely confirm the verification result.
5. Check the Use redirect URL for SDK link generation box to replace the default domain in SDK links with the custom redirect URL specified above. The SDK links will use this URL, including those sent via email, shared between KYC and KYB applicants, and links used to continue verification on mobile devices. This setting doesn’t affect internal links in the Dashboard.
6. Test and save your changes.

🚧

Attention

• Complete the steps described in this article before using this feature, to properly configure redirection links.
• Note that the Post-verification redirect URL functionality is supported only in the Web SDK, while the Use redirect URL for SDK link generation setting is compatible with both the Mobile and Web SDKs.