Authentication Providers

• 1: Daxko Barcode Authentication
• 2: ReClique SSO Configuration

1 - Daxko Barcode Authentication

Open Y Gated Content (Virtual Y) release 0.13 includes a new authentication provider to support Daxko Virtual Areas. This allows associations using Daxko to set up Virtual Areas that enable members to access Virtual Y content using only their member barcode.

Instructions for setting up Virtual Areas are in Daxko’s documentation. If you need assistance configuring Virtual Areas, Daxko’s support team can assist you with setup: support@daxko.com.

Configuration

1. Enable Daxko Barcode Virtual YMCA integration.
2. OPTIONAL (but highly recommended): Configure reCaptcha settings at /admin/config/people/captcha/recaptcha.
3. Add your validation secret and form URL, and check the help messages at /admin/openy/virtual-ymca/gc-auth-settings/provider/daxkobarcode.
4. Save your settings.
5. Set Daxko Barcode as your main authorization plugin in the Virtual YMCA settings: /admin/openy/openy-gc-auth/settings.

Once enabled, the module allows granular configuration of messages that users will receive on the page. You can change “Barcode” to something different, like “Member ID”, and add help text to assist members in finding their ID. It also allows for global help text to direct members to help channels if they’re unable to log in.

Once the module is enabled, members will be presented with the appropriately titled field to log in to Virtual Y.

Upon success, the user will be logged in to Virtual Y. Upon failure, the failure state will be returned along with a help message provided by the association.

Notes

Members with a Balance Due

Anyone with a balance due in Daxko doesn’t have access to Virtual Y [via Daxko Barcode]. A lot of the accounts with balances are families with memberships who receive state scholarships for child care. The balance in Daxko is the portion the state pays, so it’s a bit of a “fake” balance. Is there any way to allow any ACTIVE member to use [Virtual Y], regardless of whether they have a balance or not?

The fix:

There’s a setting on the Daxko Operations virtual area at Membership > Virtual Area > Virtual Y > Edit that you can check/uncheck for “Block access when balance due.” Unchecking that should let the member access the virtual area.

2 - ReClique SSO Configuration

The ReClique Core API enables check-in access by specifying a member’s email address. The following steps are necessary to fully configure the ReClique Provider for your Virtual Y site.

Acquire ReClique Core API Access

To get started, you will need to perform the following steps in the ReClique CORE portal, while logged in as a YMCA super admin user:

• Locate and note your YMCA association’s YMCA ID, known within the ReClique CORE documentation as the “Association Slug”.
• Create a separate user for executing the ReClique CORE authentication API and grant this user API-level access.

In Detail:

1. Log into the ReClique Core portal using a user with the YMCA super administrator role.

2. Click Profile in the top-right corner of the CORE portal.

   

3. The YMCA ID is the non-numeric part of the “Association Slug” in front of the numeric user ID. Note this value for use in the Verification URL. In this example, the text midtn is the association slug value and is needed for the YMCA ID.

   

4. Click Users from the navigation menu (Users > Add New User).

   

5. Select the + Add User / Staff button.

   

6. Create a stand-alone user for the purpose of executing API calls only. A suggested name is virtual_y, but any suitable name can be used.

7. Assign this user the API Access role by selecting Use Core API in the Other list of role options.

   

Configure the Virtual Y ReClique Provider

To enable the Virtual Y site to communicate with the ReClique Core API, you’ll need to configure the ReClique provider.

1. Navigate to the Gated Content Auth Setting Page at Manage > Virtual Y > Virtual YMCA Settings > GC Auth Settings.

   

   The GC Auth Settings page, when loaded, will look like this:

   

2. Find the ReClique Provider option and click the Edit Action.

   

3. Enter Your ReClique Provider Settings.

   The ReClique Provider configuration page allows the specification of permission mappings, settings for accessing the ReClique CORE authentication API, and Email Verification settings.

   

   1. Specify Permission Mappings

      This is used for User Segmentation. User Segmentation will allow YMCAs to segment content to particular Virtual Y roles based on membership types. Refer to documentation from the Open Y Community for more information about Setting up user segmentation.

      

   2. Add ReClique CORE API settings

      Add the values needed to connect to the ReClique Core API.

      

      Field	Value
      Verification URL	The API endpoint provided by ReClique to verify member logins. It takes the form https://{Y_ID}.recliquecore.com/api/v1/members/virtual_y/?Email= (This is the Production verification URL).
      Authentication login	The login for the dedicated user created with ‘Use Core API’ access in the ReClique Core portal.
      Authentication password	The password for the dedicated user created with ‘Use Core API’ access in the ReClique Core portal.
      ID field text	The text to be displayed on the Virtual Y login form. The default value is “Enter your Email:”.

   3. Specify the Email Verification options

      This enables a one-time login link to be sent to the member’s email for verification. Here, you can configure the length of time the login link will last before needing to generate another, email verification text, and a message displayed to the member with instructions on how to proceed with logging into the Virtual Y site.

      

   4. Specify the Verification Message

      This is the message the member will see when logging in if they are inactive. The phone number must be added at the very least.

      

   5. After configuring the ReClique provider, click Save.

   6. From the GC Auth Settings page, ensure only ReClique Provider is selected and click Save.

Your ReClique Provider is now fully configured and ready for use.

To test, log out from the admin portal. You should now see your new login form configured and ready to accept input from the Home Page.

If a valid email address is entered and the member is active, the member will be allowed access to your gated content (videos, blog posts, virtual meetings).