Working with Identity Verification
Identity verification is the process of confirming the authenticity of an individual's identity using various methods such as Personal Identification Numbers (PINs), SMS One Time Pins (OTPs), and knowledge-based authentication (KBA), such as hints and descriptions.
Note: Refer to Expere
Transaction XPaths for eOriginal > Participants collection for more
information.
To enable identity verification within a transaction, you must pass in the following:
/Txn/EOriginalSSPlusParticipants/EOriginalSSPlusParticipant/IdentityVerificationCustomPINInd = "1":- 0=false (default); if the value is "0" or is missing or blank, custom PIN is not enabled
- 1=true; if the value is "1", custom PIN is enabled for identity verification
/Txn/EOriginalSSPlusParticipants/EOriginalSSPlusParticipant/IdentityVerificationCustomPINValue=<12345>: specifies the value of the custom PIN for identity verification.
Additionally, users may pass in the following XPaths to ensure stronger identity
verification:
/Txn/EOriginalSSPlusParticipants/EOriginalSSPlusParticipant/IdentityVerificationCustomPINHintInd: If "1" (true), the custom PIN Hint has been enabled for identity verification./Txn/EOriginalSSPlusParticipants/EOriginalSSPlusParticipant/IdentityVerificationCustomPINHintDesc: a string of data including the custom PIN hint./Txn/EOriginalSSPlusParticipants/EOriginalSSPlusParticipant/IdentityVerificationCustomPINSMSDeliveryInd: If "1", the custom PIN SMS Delivery has been enabled. The phone number being used should be a mobile number./Txn/EOriginalSSPlusParticipants/EOriginalSSPlusParticipant/IdentityVerificationSMSOneTimePINInd: If "1" (true), the SMS One Time Pin has been enabled for identity verification.
Passing in identity verification values in transaction
The code sample below shows the elements above in the context of an Expere
transaction. As evident below, these elements are child elements of the
<EOriginalSSPlusParticipants/><EOriginalSSPlusParticipant/>
container.
<EOriginalSSPlusParticipants index="2">
<EOriginalSSPlusParticipant index="1">
<AccessMethodType>API</AccessMethodType>
<EmailAddress>P1Em@Bank.email</EmailAddress>
<ExcludeFromPrintFulfillmentInd>0</ExcludeFromPrintFulfillmentInd>
<FirstName>John</FirstName>
<MiddleName>Y</MiddleName>
<LastName>ScenarioOne</LastName>
<PhoneNumber>123-456-7890</PhoneNumber>
<RembrandtIDRefs>Brwr1</RembrandtIDRefs>
<RelatedPartyIDRefs/>
<Suffix>Sr</Suffix>
<SSN>123-45-6788</SSN>
<IdentityVerificationCustomPINInd>1</IdentityVerificationCustomPINInd>
<IdentityVerificationCustomPINValue>E2ETest1</IdentityVerificationCustomPINValue>
<IdentityVerificationCustomPINHintInd>1</IdentityVerificationCustomPINHintInd>
<IdentityVerificationCustomPINHintDesc>E2ETest1.1</IdentityVerificationCustomPINHintDesc>
<IdentityVerificationCustomPINSMSDeliveryInd>1</IdentityVerificationCustomPINSMSDeliveryInd>
<IdentityVerificationSMSOneTimePINInd>1</IdentityVerificationSMSOneTimePINInd>
</EOriginalSSPlusParticipant>
</EOriginalSSPlusParticipants>