User Tools

Site Tools


integration:transactions

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
integration:transactions [2018/10/24 12:03]
tjotov
integration:transactions [2019/08/01 08:31]
tjotov removed
Line 1: Line 1:
-====== No-code transcations ======+====== No-code transacations ======
 What if solution requires more than pure authentication? In that case an integrator can use AAA Reverse Proxy transaction system.  What if solution requires more than pure authentication? In that case an integrator can use AAA Reverse Proxy transaction system. 
  
Line 10: Line 10:
   - Prepare confirmation text (e.g. “Pay $99 from account 123456789 to account 987654321”).    - Prepare confirmation text (e.g. “Pay $99 from account 123456789 to account 987654321”). 
   - Generate transaction ID (internal unique ID of transaction)   - Generate transaction ID (internal unique ID of transaction)
-  - Call AAA Reverse Proxy transaction method (standard http request) providing confirmation text, return URL and verification level (personal factor, bio factor, no second factor)+  - Call AAA Reverse Proxy transaction method (standard http request) providing confirmation text, return URL and verification level ([[documentation:personalcode|PersonalCode]] bio factor, no second factor)
   - Redirect to AAA Reverse Proxy transaction (must be in the same https context)   - Redirect to AAA Reverse Proxy transaction (must be in the same https context)
     * Now ADUCID integration code call PEIG or display a QR      * Now ADUCID integration code call PEIG or display a QR 
     * Request is processed via PEIG (directly or QR scan)     * Request is processed via PEIG (directly or QR scan)
-    * User confirms it and provides personal factor+    * User confirms it and provides [[documentation:personalcode|PersonalCode]]
     * User is redirected back to application (return URL)     * User is redirected back to application (return URL)
     * AAA Reverse Proxy writes transaction status to http header      * AAA Reverse Proxy writes transaction status to http header 
-  - Now service provider has to read transaction status from http header i.e. evaluate success / failure: OK, User rejected, Wrong personal factor, etc.+  - Now service provider has to read transaction status from http header i.e. evaluate success / failure: OK, User rejected, Wrong PersonalCode, etc.
  
 User experience: User experience:
Line 23: Line 23:
   - Optionally QR code is displayed – user scans it using his / her PEIG   - Optionally QR code is displayed – user scans it using his / her PEIG
   - A confirmation message is displayed on his smart phone (PEIG application)   - A confirmation message is displayed on his smart phone (PEIG application)
-  - If user agrees, personal factor is required (or bio factor)+  - If user agrees, [[documentation:personalcode|PersonalCode]] is required (or bio factor)
   - Done   - Done