Determining User Authentication Method in FusionAuth

[wesley]

In our application, we want to determine how a user authenticated—whether via Google login, username/password, IDP, etc.

Questions:

1. Is this information already included in the JWT?
2. If not, is there a way to receive this data when a user logs in?

[wesley]

Yes, FusionAuth provides this information via the authenticationType claim in the JWT. This claim indicates the authentication method used, such as PASSWORD, GOOGLE, SAML, etc.

How to Access Authentication Type:

1. From the JWT:
   • The authenticationType claim is included in the JWT access token.
   • Documentation: JWT Access Token Claims
2. From a Webhook Event (Alternative Approach):
   • The same authenticationType value is included in the user.login.success webhook event.
   • This may be useful if your system processes authentication events via webhooks instead of decoding JWTs.
   • Documentation: User Login Success Webhook

For additional details on JWT structure and claims, refer to: JWT Components Explained