Configure Member Login Methods

Overview

You can configure the authentication methods members use when they register for or log in to the member app.

Pokepay supports the following login methods:

• External services such as LINE and Google
• Phone and email

⚠️ If you change login methods, some members may lose access if they have not registered the information required for the new method.

Before changing settings, guide members to update their login method when needed.

Open the Settings Screen

1. Select “Menu” → “Member Settings” → “Login Method”.
2. Configure the login methods you want to use.

Login with External Services

Members can log in to the member app using external service accounts such as LINE or Google.

LINE Login

1. Turn on “LINE Login” under “Login with External Services”.
2. Follow the confirmation steps.

⚠️ Registration may fail if the LINE account does not have an email address linked, or if the member does not allow email address sharing on the LINE authorization screen.

In that case, ask the member to unlink LINE, allow email address sharing, and link again, or choose another login method.

Sign in with Google

1. Turn on “Sign in with Google” under “Login with External Services”.
2. Follow the confirmation steps.

Login with Phone and Email

Members can log in using verification codes sent to their phone number and email address.

When phone number authentication is used, verification codes are sent by SMS or voice call.

1. Turn on “Login with phone and email”.
2. Select “Phone and Email” or “Email Only”.

✅ Message fees

Additional fees apply when phone number authentication is enabled. SMS costs 10 yen per message, and voice calls cost 20 yen per call.

These message fees do not apply when members log in with external services such as LINE or Google.

Difference Between “Phone and Email” and “Email Only”

Phone and Email

This uses verification codes with both a phone number and an email address. It improves security, but members need to complete more steps.

Email Only

This uses verification codes with only an email address. It reduces member effort, but the security level is lower than using both phone number and email.

Allow Carrier Emails

You can allow mobile carrier email addresses, such as @docomo.ne.jp or @au.com, as login email addresses.

1. Turn on “Allow Carrier Emails”.
2. Review the warning.

⚠️ Carrier emails are not recommended

Carrier emails are often affected by spam filters and reception settings, so verification codes may not arrive. They may also change or become unavailable when the member changes their plan or device.

If a member can no longer log in, they may need to update their login method themselves, or an admin may need to change member information.

(In development) Restrict Email Domain

This setting is still in development. It is not shown in the production app.

You can restrict the email domains that members can use for login and registration. Use this when you want to limit app access to members of a company or organization.

1. Turn on “Restrict Email Domain”.
2. Select “Add Allowed Domains”.
3. Enter the email domain, such as yourcompany.com.

(In development) Add External Authentication Service

This setting is still in development. It is not shown in the production app.

You can connect an external identity provider (IdP) that supports OpenID Connect (OIDC), so members can log in with your organization’s authentication system.

This is an advanced setting. Configure it only when your company or organization has an identity platform to use.

1. Create an application for Pokepay in the external IdP admin console.
2. In Pokepay, open “Menu” → “Member Settings” → “Login Method”.
3. Select “Add External Authentication Service”.
4. Get the following information from the external IdP:
   • Issuer
   • Client ID
   • Client Secret
5. Enter the provider name and the information from the IdP, then select “Register”.

Information to Register in the External IdP

Register the following information in the external IdP admin console.

Application URL: https://<configured-domain>.pkpy.jp

Redirect URI: https://auth.pkpy.jp/oauth/callback

Display Name in the Member App

The provider name appears in the member app as labels such as “Continue with <provider name>” or “Log in with <provider name>”.