> ## Documentation Index
> Fetch the complete documentation index at: https://developers.argosidentity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Access Control

> Learn how to control liveform access through private mode and Token ID expiration condition settings.

Access control functions provide private mode and Token ID management functions to control liveform access. You can prevent reuse of authenticated URLs through private mode and set access control through Token ID.

## Private Mode

Strengthens security by preventing reuse of authenticated URLs.

<Frame caption="Private Mode Settings Screen">
  <img src="https://mintcdn.com/argosidentity/352WpTnZFyEfW7I6/images/dashboard/new/acess_control/token_pre.png?fit=max&auto=format&n=352WpTnZFyEfW7I6&q=85&s=58490bb857e70682fdfaddc9de1566a4" alt="Private mode settings" width="2230" height="832" data-path="images/dashboard/new/acess_control/token_pre.png" />
</Frame>

When private mode is activated, authenticated URLs cannot be reused, strengthening security.

<Warning>
  When using private mode, be sure to **enter tokenid**. If users need to retry, please update the tokenid.
</Warning>

***

## Live-form Token ID Pre-registration

You can use tokens without pre-registration, but when the **Live-form Token ID Pre-registration** option is activated, only pre-registered tokens can be used.

<Frame caption="Live-form Token ID Pre-registration Settings Screen">
  <img src="https://mintcdn.com/argosidentity/352WpTnZFyEfW7I6/images/dashboard/new/acess_control/token_regist.png?fit=max&auto=format&n=352WpTnZFyEfW7I6&q=85&s=2dc3af3b432a6b31005b2d7fe3c4db6b" alt="Token ID pre-registration" width="2230" height="510" data-path="images/dashboard/new/acess_control/token_regist.png" />
</Frame>

### Administrator Guidelines

<Info>
  **Important Guidelines**

  * Token IDs to be used must be pre-registered via API. (Maximum 100,000)
  * Pre-registered and valid Token IDs must be used when submitting Live-form.
  * If Token ID is deleted or expired through 'Token Expiration Condition Settings', Live-form access is denied. (Pre-registered Token ID total management is required regardless of expiration progress)
</Info>

<Card title="Token API Documentation" icon="key" href="/en/idcheck/api-reference/api-reference-guide/post-token">
  View Token ID registration/query/deletion API.
</Card>

***

## Token ID Deletion Condition Settings

Token ID total is limited to a maximum of 100,000. Automatic deletion function is provided for cases where real-time management is difficult.

### Delete on Token Expiration

A function that automatically deletes tokens when they expire.

<Frame caption="Automatic Deletion on Token Expiration Settings">
  <img src="https://mintcdn.com/argosidentity/352WpTnZFyEfW7I6/images/dashboard/new/acess_control/autodeletion.png?fit=max&auto=format&n=352WpTnZFyEfW7I6&q=85&s=19de60bedc585dfbcdd870bb55cce073" alt="Automatic deletion on token expiration" width="1702" height="478" data-path="images/dashboard/new/acess_control/autodeletion.png" />
</Frame>

| Setting                        | Description                                                  |
| ------------------------------ | ------------------------------------------------------------ |
| **Delete on Token Expiration** | Automatic deletion function is triggered when token expires. |

<Tip>
  **Automatic Deletion Usage**

  When delete on token expiration option is activated, expired tokens are automatically deleted according to conditions set in 'Token Expiration Condition Settings', making total management easier.
</Tip>

### Volume-based Automatic Deletion

A function that automatically deletes when token registration volume reaches threshold.

<Frame caption="Volume-based Automatic Deletion Settings">
  <img src="https://mintcdn.com/argosidentity/352WpTnZFyEfW7I6/images/dashboard/new/acess_control/autodeletion_by_volume.png?fit=max&auto=format&n=352WpTnZFyEfW7I6&q=85&s=10191a9c3104a5f5d63ff0af5516d604" alt="Volume-based automatic deletion" width="1708" height="656" data-path="images/dashboard/new/acess_control/autodeletion_by_volume.png" />
</Frame>

| Setting                             | Description                                                                     |
| ----------------------------------- | ------------------------------------------------------------------------------- |
| **Volume-based Automatic Deletion** | Automatically deletes when token registration volume reaches threshold.         |
| **Deletion Start Threshold**        | Automatic deletion starts when token registration reaches a specific ratio.     |
| **Deletion Ratio**                  | Sets the ratio of tokens to delete at once when automatic deletion is executed. |
| **Deletion Priority**               | Selects which tokens to delete first. (Recommended: oldest first)               |

<Note>
  **Re-execution Wait Time**

  Re-execution cycle for deletion is **fixed at 5 minutes** for system stability.
</Note>

<Warning>
  **Total Management Importance**

  If Token ID total exceeds 100,000, new token registration fails. Use volume-based automatic deletion function to manage total.
</Warning>

***

## Token Expiration Condition Settings

Sets conditions for registered tokens to expire. This setting is separate from token deletion and defines conditions for tokens to expire and become unusable.

<Frame caption="Token Expiration Condition Settings Screen">
  <img src="https://mintcdn.com/argosidentity/352WpTnZFyEfW7I6/images/dashboard/new/acess_control/token_usage_expiry.png?fit=max&auto=format&n=352WpTnZFyEfW7I6&q=85&s=951c34ad6401beb1d06b5d23b1e3c46c" alt="Token expiration condition settings" width="1702" height="346" data-path="images/dashboard/new/acess_control/token_usage_expiry.png" />
</Frame>

| Condition                  | Description                                                                                                  |
| -------------------------- | ------------------------------------------------------------------------------------------------------------ |
| **Usage-based Expiration** | Token expires immediately when used once. (Expiration point: when user clicks "Start Authentication")        |
| **Time-based Expiration**  | Token expires after a specific time passes after use. Can continue with same Token ID within specified time. |

<Note>
  **Token Expiration Point**

  * **Usage-based Expiration**: Token expires when user clicks "Start Authentication" button in liveform.
  * **Time-based Expiration**: Token expires when set time passes from when token was first used.
</Note>

<Info>
  **Difference Between Expiration and Deletion**

  * **Expiration**: Token becomes unusable but still exists in Token Pool.
  * **Deletion**: Completely removed from Token Pool and deducted from total.

  Expired tokens are also included in total, so it is recommended to activate 'Delete on Token Expiration' option to automatically delete them.
</Info>

***

## Related Documentation

<CardGroup cols={2}>
  <Card title="Data Protection" icon="lock" href="/dashboard/en/project-management/security-settings/data-protection">
    View liveform encryption and secure transmission settings.
  </Card>

  <Card title="System Operation" icon="gear" href="/dashboard/en/project-management/project-settings/system-operation">
    View project status management.
  </Card>

  <Card title="Token API" icon="key" href="/en/idcheck/api-reference/api-reference-guide/post-token">
    View Token ID management API.
  </Card>
</CardGroup>
