Configuring Auth entry points

When using the default flow, the Link with account numbers entry point will appear when the user does any of the following:

• Encounters an error in the Link flow
• Selects an institution whose connection health is poor
• Attempts to close the Link modal without connecting an institution
• Receives a "no results" message when searching for an institution
• Scrolls to the bottom of the institution search results

To trigger this flow via the Link demo specify Auth in the Product dropdown menu and then Launch Demo. Trigger empty search results (type in a search query like ‘xyz’) or the Exit Pane (by closing Link) and select Link with account numbers.

This entry point will direct the user to Database Auth, Instant Micro-deposits, or Same-Day Micro-deposits, depending on which fallback options you have enabled and on whether the institution supports Instant ACH.

You can change these entry points using the features Auth Type Select and Reroute to Credentials.

Auth Type Select adds a prompt for the end user to pick a manual Auth flow upfront, without hitting any of the triggers above.

Reroute to Credentials is the opposite: it guides or forces the end user away from manual Auth flows if Plaid detects that the end user's institution is supported with a non-manual flow.

Auth Type Select is a Link configuration that shows a pane upfront, enabling end users to actively choose between credential-based authentication and manual account authentication at the start of the Plaid Link flow.

To demo Auth Type Select via the Plaid Link demo, specify United States and Auth in the Country and Product dropdown menu respectively. Toggle on Auth Type Select, then Launch Demo.

To enable Auth Type Select, use the Dashboard Account Verification pane, or, if not using the Dashboard Account Verification pane, set auth.auth_type_select_enabled: true when calling /link/token/create.

Auth Type Select is best for customers who expect that a substantial portion of their consumers would prefer to authenticate manually, and who prefer to maximize Auth coverage over other data products. Examples may include business account verification use cases where a high percentage of users are not expected to have access to credentials of a bank account.

Customers that see the greatest success with the Auth Type Select configuration have a substantial portion of users (over half, as a rule of thumb) who cannot or will not connect by logging into their bank, who have invested in fraud risk mitigations or have a low risk use case, and/or have very high intent users (such as users connecting a bank account to receive a payment).

Some customers observe an increase in conversion of verified Auth data with this configuration. However, this configuration reduces coverage of other products. When offered the manual option upfront, more users may choose to link manually. Users who opt to connect via micro-deposits can have lower conversion than Instant Auth because the flow requires more steps for a user, including potentially returning to Link the next day to verify micro-deposits. It may encourage users to connect via micro-deposits who would otherwise connect via credential-based Auth types (if the manual option was not available upfront).

This configuration is best for customers who want to maximize Auth coverage and can tolerate reduced coverage of other products like Balance and Identity.

By default, Optional Reroute to Credentials is enabled for all eligible flows. To change this setting, use the Dashboard Account Verification pane, or, if not using the Dashboard Account Verification pane, set a different value in auth.reroute_to_credentials when calling /link/token/create.

In some cases, when rerouting a user to a supported institution, Plaid may show a list of institutions instead of a single institution. This can occur when a financial institution has multiple different brands that share a common routing number.

Optional Reroute to Credentials is the default flow. It is best for customers who would like to make a recommendation for the user to connect via credentials, but not block the user from proceeding with the Same Day Micro-deposits flow. This flow will provide a reminder to the user that the institution is supported, and detail the benefits of instant connection, while also leaving the manual verification option in place. To enable Optional Reroute, you do not need to take any action.

To disable Optional Reroute, use the Dashboard Account Verification pane, or set auth.reroute_to_credentials: "OFF" in the /link/token/create call.

Single Institution Optional Reroute	Multiple Institution Optional Reroute

Forced Reroute to Credentials is best for customers who would like to restrict the user to connect via credentials if the institution is supported on a credential-based flow and stop the user from proceeding with a manual flow. This flow is designed to block a user from connecting manually for institutions that are supported via credentials in high ACH risk use cases. To enable Forced Reroute, use the Dashboard Account Verification pane, or set auth.reroute_to_credentials: "FORCED" in the /link/token/create call.

Single Institution Forced Reroute	Multiple Institution Forced Reroute