When you send emails from our platform, your applicants will receive a link to our WebSDK. In the WebSDK settings, you can provide a redirect URL that will change the link domain and generate a jwt (JSON Web Token) query parameter to verify the link.

To use this functionality, you need to initialize the WebSDK for a dynamic URL with a jwt query parameter and its confirmed value. The JWT value contains externalUserId (userId) and clientId which defines a particular applicant on our platform. This will allow you to send requests and use the correct accessToken.

The token is generated with the HMACSHA256 algorithm and it is used raw without any encoding to create a JWT signature.

Custom link example:

• Client applicant URL: <https://your-project.io/kyc>
• Secret key to sign the applicant link: 1
• externalUserId: userId_8
• clientId: sumsub

https://your-project.io/kyc?jwt=eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE2MjAwNTI1MjcsImV4cCI6MTYyMDY1NzMyNywic3ViIjoidXNlcklkXzgiLCJhdWQiOiJzdW1zdWIifQ.qCR-4VMfC_zOAN1hCtbjj9DJxmB6c0sEg7XD5Y8ZvvM

JWT data payload example:

{
  "iat": 1620052527, // Issued at (seconds since Unix epoch)
  "exp": 1620657327, // Valid until (seconds since Unix epoch)
  "sub": "userId_8",
  "aud": "sumsub"
}

Email notifications

To customize email notifications with your brand, you will need to provide an icon, logo, and email sender (custom email address). For more information, see Branding.

All email texts can be customized as well for each locale from the Dashboard.

📘

Note

• To send email notifications to your applicants, enable this functionality in the verification level settings by selecting the necessary notification types.
• To ensure that Sumsub can send emails from your email domain, It is important to have SPF and DKIM records set up on your DNS server.

SPF

Create or edit an SPF record to reference Sumsub and add a TXT record to your domain DNS settings.

We recommend using the following SPF record to ensure that it is set up correctly: v=spf1 include:_spf.sumsub.com ~all

If you have already set up an SPF record for another purpose, you can simply add a reference to Sumsub: include:_spf.sumsub.com.

❗️

Warning

Not setting up an SPF record will result in Sumsub emails being blocked to your users. Therefore, email sending will be disabled automatically.

DKIM

Edit your domain DNS settings to add CNAME records. The CNAME records should be as follows:

sumsub1._domainkey CNAME sumsub1._domainkey.sumsub.com.
sumsub2._domainkey CNAME sumsub2._domainkey.sumsub.com.

👍

Tip

To check your SPF and DKIM records and identify any issues, use SuperTool and Dmarcian.