OptionalidentityOptionalmaxExpiration of the authentication in nanoseconds
OptionalallowIf present, indicates whether or not the Identity Provider should allow the user to authenticate and/or register using a temporary key/PIN identity. Authenticating dapps may want to prevent users from using Temporary keys/PIN identities because Temporary keys/PIN identities are less secure than Passkeys (webauthn credentials) and because Temporary keys/PIN identities generally only live in a browser database (which may get cleared by the browser/OS).
OptionalderivationOrigin for Identity Provider to use while generating the delegated identity. For II, the derivation origin must authorize this origin by setting a record at <derivation-origin>/.well-known/ii-alternative-origins.
OptionalwindowAuth Window feature config string
OptionalonCallback once login has completed
OptionalonCallback in case authentication fails
OptionalcustomExtra values to be passed in the login request during the authorize-ready phase
Identity provider