Learn how to authenticate your end customers to Hosted Pages.
Hosted Pages let you offer powerful, sensitive banking actions to your customers with minimal effort. Qonto hosts the page, secures the flow, and ensures compliance. You keep control of the experience: open the page directly or embed it inside your product.
Hosted Pages are authenticated web pages provided by Qonto Embed. They are designed for complex or sensitive actions that you don’t want to build and secure yourself. Their goal is to reduce your integration time while meeting Qonto’s security and compliance standards.
Hosted Pages are only accessible through time-bound Embed Auth Links you create on behalf of your end customers via a backend-to-backend API call.Embed Auth Links last for 1 minute after creation, and can be used only once.
Each authenticated session lasts 30 minutes and cannot currently be refreshed. When it expires, you must request a new link.Currently available Hosted Pages:
Your server creates an Embed Auth Link. On success, you receive a response containing a url field that points to the Hosted Page for your customer.
You present the Hosted Page to the customer. Choose the format that best fits your product:
Standalone (redirect): Navigate the customer to the url.
Embedded (iframe): Render the url in an iframe for a seamless, in-app experience.
You handle session lifecycle. A session is valid for 30 minutes. When it expires, generate a new Embed Auth Link and redirect or reload the iframe with the new url.