Protecting the privacy and security of your users is of the utmost importance when setting up an ASAP help widget. It is recommended that you establish trusted domains and enforce identity verification (IDV). This will prevent privacy violations and will require the implementation of strict security measures.
 
You can allow your domains to access your ASAP help widget by creating a list of approved domains. This ensures that only authorized domains can interact with your widget, reducing the risk of unauthorized access or data breaches.

Authentication determines who requests access to a system or device. Access control then determines user identity according to credentials like username and password.

Two authentication methods are used to authenticate users and provide access to the help center services on the ASAP help widget.
 
Anonymous—In this method, end-users are considered guest users. They can only submit tickets and view posts in the user community. They cannot view the tickets they submitted or actively participate in the user community.
 
JWT—In this method, end-users are considered authenticated users. In addition to the activities that guest users can perform, authenticated users can also view the submitted tickets and actively participate in the user community (with rights to perform actions such as following a topic, adding a topic, and commenting on existing posts). For more information on JWT authentication, refer to this article.