AuthHub stores the following user-related details in the database:
- Users basic information (first name, last name, Active status )
- Email and phone numbers - All sensitive data of credentials encrypted
- Details of other credentials (FIDO, Push, TOTP etc) - All sensitive data of credentials encrypted
- If risk is enabled then
-
- Signature of the devices (encrypted) used by the users
- Location information (IP address) from where the users accessed the system
Apart from the above user-related information, the following configurations that are required for AH to run are stored in the database:
- ID Store connection details (LDAP/SCIM)
- Identity Providers
- Custom Message/Risk Provider connection details
- Policies (AuthZ and AuthN)
- Tenant/System Settings
- Etc.