Passwordless Login

Enables users to log in without a password by dispatching a one-click magic link to their email address. A session check at entry ensures already-authenticated users skip the email form entirely.

Authentication

How to import

In the Admin Console go to Workflows → New Workflow → From Template, select Passwordless Login, and click Import.

Node Topology

How the Flow Works

1. Entry: every request first hits Has Session.
2. Already logged in: Has Session True routes directly to Success Final, bypassing the email form entirely.
3. No session: Has Session False renders the PasswordLess Web Page (Email input only).
4. Form submitted: the user enters their email and clicks Login without Password. The Web Page Output feeds into Send Suspended Email.
5. Email dispatched: Send Suspended Email True means the magic link was sent successfully. The flow reaches Success Final where the user sees a confirmation message.
6. Send failed: Send Suspended Email False loops the user back to the PasswordLess Web Page so the error is shown inline.
7. Failure Final is on the canvas but has no incoming connections in the default template: wire it from the error edges you want to handle explicitly.

---

Nodes Used & Why

Node	Role	Key config
Has Session	Skips the email form for already-authenticated users	No config needed
Web Page	Renders the passwordless form container	Web Page Header defaults to "Passwordless Login"
Email (child)	Collects the user's email address	No change needed for standard passwordless flows
Send Suspended Email	Dispatches the one-click magic link	Email Template Type must be PasswordLess Login (oneclicksignin)
Success Final	Terminates after the magic link is sent	Set Success Message to instruct the user to check their inbox
Failure Final	Not wired by default	Connect from error edges (e.g. 4039 token limit) when needed

---

Key Design Decisions

TRUE MEANS EMAIL SENT, NOT LOGGED IN

The True edge from Send Suspended Email indicates the magic link was dispatched: not that the user has authenticated. The actual login happens when the user clicks the link, which is processed by a separate token-verification flow. Set the Success Final message to "Check your email" rather than "You are now logged in."

WIRE ERROR CODE 4039 (TOKEN LIMIT REACHED)

If the user submits the form multiple times without following the link, Send Suspended Email returns error 4039. Without wiring this edge the user sees a generic error message. Route it to an info page explaining the limit and asking the user to check their inbox for the earlier link.

4039 · Token limit reached→ Route to info page: "A link was already sent: please check your inbox."

4007 · User does not exist→ Route to Registration or show an account-not-found message

4008 · User ID blocked→ Route to Failure Final with a support contact link

CONFIGURE THE EMAIL TEMPLATE BEFORE DEPLOYING

Send Suspended Email uses the oneclicksignin email template. This template must exist in Admin Console → Platform Config → Email Configuration → Email Templates before the workflow can dispatch links. Verify the magic link format and the return URL for your environment before going live.