Last reviewed: 04.11.2026
Silent Authentication lets users skip the manual login in the widget. Your backend registers or logs in the user and passes a token in the widget URL.
Scenarios
- Silent Sign-Up: the user is registered and logged in with their email and acceptance of the terms.
- Silent Sign-In: an existing Mercuryo user is logged in.
- Silent Sign-Up with SumSub KYC: if you verify users with SumSub, you can also pass their KYC with a share token (see How does KYC sharing work?).
What you need
- Silent Authentication is available by default. You need the Sdk-Partner-Token from your integration manager.
- Before you register or sign in a user, they must accept Mercuryo's Terms of Service: https://mercuryo.io/legal/terms/
Token expiry
The token works for one hour or until the widget is first opened with it. If it is invalid or expired, the user sees the standard login flow.
Details: https://widget.docs.mercuryo.io/guide/features/authentication