COLNEO User Management and Authentication

To use COLNEO infohub and the Webmodules provided for COLNEO pro a user has to register and create an account on COLNEO infohub.
The following steps describe how to register at COLNEO infohub with email verification.

The registration can be done here: https://idp.colneo.services/cnapp_login/register

1. Navigate to Registration: Click "Kein Konto? Registrieren" from the login page
2. Fill Required Information:
   • Name (required)
   • UserID (Email address - required)
   • Password (required)
   • Confirm Password (required)
3. Accept Terms: Check both required checkboxes:
   • Accept Terms and Conditions (AGB)
   • Accept Privacy Policy (Datenschutzerklärung)
4. Submit Registration: Click "Registrieren" button
5. Email Confirmation: You will receive a confirmation email

• Valid email address (used as UserID)
• Password must match confirmation
• All required fields must be completed
• Terms and privacy policy must be accepted

Verify your email address using the confirmation code sent after registration.

Confirmation Process

email-confirmation-link: https://idp.colneo.services/cnapp_login/email-confirm

After registration, confirm your email address:

1. Check Email: Look for confirmation email in your inbox
2. Navigate to Confirmation: Click the link in the email or go to email confirmation page
3. Enter Details:
   • UserID (Email address)
   • Confirmation Code (from email)
4. Submit: Click "Email bestätigen" button
5. Success: You can now log in with your credentials

Resend Confirmation Code

If you didn't receive the confirmation email:

• Click "Code erneut senden" on the confirmation page
• Wait 60 seconds before requesting another code
• Check your spam/junk folder

Access the system with your credentials.

Login Process

login-link: https://idp.colneo.services/cnapp_login/

Once your email is confirmed, log in to the system:

1. Navigate to Login: Go to the login page
2. Enter Credentials:
   • UserID (your registered email address)
   • Password
3. Submit: Click "Anmelden" button
4. Success: You will be authenticated and redirected

Hide Registration Links

If you wish to hide the registration links, you can use the register query parameter.
https://idp.colneo.services/cnapp_login?register=false

Login with User Email

If you wish to login with a user email, you can use the user query parameter.
https://idp.colneo.services/cnapp_login?user=[email]

Custom Token Payload

You can pass a custom JSON payload to be embedded in the issued JWT token using the payload query parameter. The value must be a URL-encoded JSON string.
https://idp.colneo.services/cnapp_login?payload=[URL_ENCODED_JSON]

Example:

https://idp.colneo.services/cnapp_login?payload=%7B%22projectId%22%3A%22abc123%22%7D

When this parameter is present, an info button (ⓘ) is shown after the login form so users can inspect the payload data that will be embedded in their token. The payload is accessible from the JWT token after login.

Custom Token Modules

You can pass a JSON modules list to be embedded in the issued JWT token using the modules query parameter. The value must be a URL-encoded JSON string.
https://idp.colneo.services/cnapp_login?modules=[URL_ENCODED_JSON]

Example:

https://idp.colneo.services/cnapp_login?modules=%5B%22module_a%22%2C%22module_b%22%5D

Both payload and modules can be combined with each other and with other query parameters such as redirect.

Force Fresh Login

By default, if the user has a valid token stored, they are automatically authenticated on page load. To force the login page to ignore any stored token and require the user to log in again, use the uselocalstorage=false parameter.
https://idp.colneo.services/cnapp_login?uselocalstorage=false

Redirect Parameter Integration

The authentication system supports a redirect query parameter for seamless third-party application integration:

How it Works

1. External App Redirects: Your application redirects users to the login page with a redirect parameter
2. User Authenticates: User logs in successfully
3. Automatic Return: System automatically redirects back to your application with an authcode (valid 2 minutes) and UserID

URL Format

https://idp.colneo.services/cnapp_login?redirect=[URL_ENCODED_DESTINATION]

Examples

Scenario	Login URL	After Login Redirect
Simple Redirect	?redirect=https%3A//myapp.com/dashboard	https://myapp.com/dashboard?authcode=abc123&user=user@email.com
URL with Existing Params	?redirect=https%3A//myapp.com/page%3Fid%3D123	https://myapp.com/page?id=123&authcode=abc123&user=user@email.com

Implementation Guide

To integrate with your application:

1. URL Encode: Encode your destination URL using encodeURIComponent()
2. Redirect to Login: Send users to https://idp.colneo.services/cnapp_login?redirect=[YOUR_ENCODED_URL]
3. Handle Return: After login, users return to your URL with:
   • authcode - Short-lived code to exchange for access token (valid 2 minutes)
   • user - User email address
4. Extract Parameters: Parse URL params to read authcode and user
5. Exchange Code: From your server, exchange authcode for an access token via the IDP API (see Web Service docs). Complete this within 2 minutes.
   Endpoint: POST /token
   Request body:

   {
             "authcode": "authcode",
             "user": "user"
           }

6. Authenticate: Use the access token to authenticate requests in your application.

Reset your password using email verification code when you can't access your account.

Forgot Password Process

forgot-password-link: https://idp.colneo.services/cnapp_login/forgot-password

If you forgot your password:

1. Access Reset: Click "Passwort vergessen?" from login page
2. Request Code: Enter your UserID (email) and click "Reset-Code senden"
3. Check Email: You'll receive a reset code via email
4. Reset Password: Enter:
   • UserID (Email address)
   • New password
   • Confirm new password
   • Reset code from email
5. Password Reset Page: https://idp.colneo.services/cnapp_login/reset-password
6. Submit: Click "Passwort zurücksetzen"
7. Success: You can now log in with your new password

Join a project or group using an invitation link sent to your email.

Invitation Process

accept-invitation-link: https://idp.colneo.services/cnapp_login/accept-invite

If you received an invitation to join:

1. Access Invitation: Click the link in your invitation email or navigate to the accept invite page
2. Enter Details: Fill in the required information from your invitation
3. Submit: Click the submit button to accept the invitation
4. Success: Your account will be activated and you can log in

When logged in, you can securely log out:

• Click the "Abmelden" button
• Your session will be terminated
• You'll be redirected to the login page