IDMost Auth - login via MAX, Yandex ID and VK ID

What this solution does

The IDMost Auth module for 1C-Bitrix adds login and registration via MAX, Yandex ID, and VK ID services to a website. Visitors can choose their familiar authentication method while the standard login by username and password remains available. All three authentication methods are included in a single package and can be enabled individually.

Use cases

Online store: login to the personal cabinet and before checkout. After authentication, the user is redirected to the selected internal page, and the order is processed using the store's standard tools.

Corporate website: client login to an existing personal cabinet, document section, or inquiry history. Access rights to sections are managed by the website tools.

Community or website with restricted content: visitor registration and re-login. Subscriptions, payments, and access restrictions are configured separately.

Multi-site installation: individual placement and styling of buttons, return address configuration, and application settings for Yandex ID and VK ID tailored to each site.

Configuration options

Connect one, two, or all three login methods.

Allow registration of new users or restrict login to previously linked accounts only.

Select a secure user group for new users and manage linkages from the admin panel.

The IDMost Auth module enables login via MAX, Yandex ID, and VK ID. Authorization buttons are displayed as a block or in a row. Settings include theme, size, shape, width, labels, and local icons. The component template is adapted using the native Bitrix mechanism without modifying the core system.

Login Security

MAX login is secured by verifying the signature of launch/contact data and the webhook secret. After MAX confirmation, the user must explicitly click the login button on the site; a single GET link does not authorize access. Yandex ID and VK ID utilize server-side OAuth with PKCE and browser binding. Sessions are short-lived and single-use. Secrets remain on the server. Matching phone numbers or email addresses do not automatically merge accounts; disputed bindings are verified by an administrator. External login is restricted for privileged groups.

Compatibility and Connection

The IDMost Auth module provides login via MAX, Yandex ID, and VK ID. Compatibility is declared for 1C-Bitrix: Site Management editions First site, Start, Standard, Small business, Expert, and Business, provided they have the current common core. The system requires PHP version 8.2 or higher, UTF-8 encoding, MySQL or MariaDB databases, and the curl, mbstring, mysqli, and openssl extensions. The use of the HTTPS protocol is mandatory. Installation of the module does not require additional components such as an online store, catalog, or CRM.

Technical verification was performed on a test environment using the Business edition version 26.150.0, PHP versions 8.2 and 8.4, and MariaDB version 10.11. Other platform editions are listed as compatible based on common APIs and dependency checks, but individual installation has not been performed. Before purchase, it is recommended to test the module for 14 days on a site copy. Installation via the Bitrix Market requires an active license or platform support according to the service rules.

To function, the site owner must create their own MAX bot and/or Yandex ID and VK ID applications, configuring exact HTTPS callback URLs. The site owner is responsible for all provider settings and their approval. The module is not declared for use in the Composite environment, with PostgreSQL databases, or in Sites 24 and the boxed or cloud versions of Bitrix 24. It is important to note that the module implements only the login mechanism and does not create a ready-made personal cabinet, online store, or access payment system.

The IDMost Auth module enables login via MAX, Yandex ID, and VK ID. The package includes a button component, administrative settings, binding management, and documentation. The license covers 12 months of updates and standard written support. IDMost does not charge per authorization and does not require a separate subscription to its service. External platforms and hosting operate under their own terms. Renewal of updates and support is voluntary and costs 50% of the current price for 12 months. A paid and installed version continues to function without renewal. Installation is performed independently according to the instructions. Individual configuration and adaptation are agreed upon separately. Before purchase, it is recommended to evaluate the module's operation on your site in trial mode.

General iT can connect “IDMost Auth - login via MAX, Yandex ID and VK ID”, configure it and verify the integration with the existing website.