Operation Authorization

This built-in feature that Innovation Studio provides a multi-factor authorization process on-demand to verify the identity of a customer to authorize an action in the digital journey. It adds a layer of protection in the digital transformation. In the case of Online and Mobile Banking, the authorization is implemented in three processes:

As a prerequisite, in Omnichannel Communication Automation,

Hence, when one such payment has been initiated it needs to be signed digitally via a One-Time-Password generated by Operation Authorization. To access the configurations made:

  1. Log in the Innovation Studio with the credentials.
  2. Open the main menu and select Advanced.
  3. Select the child menu item Operation Authorization Types.
  4. There are three authorizations created:

    • FTOS_IB_BulkFiles;

    • FTOS_IB_Payment;

    • FTOS_IB_UtilityPaymentContract.

    FieldValueDescription
    NameFTOS_IB_BulkFilesName of the action authorization type.
    Display NameFTOS_IB_BulkFilesName of the action authorization type as it will be displayed in the user interface.
    Bearer EntityFTOS_IB_BulkFilesIt is the entity in the data model for data persistence.
    Details Automation ScriptFTOS_IB_GetBulkDetailsForSCAServer-side on-demand script endpoint containing the inputs for the pass-code generation and the available tokens for the pass-code message and authorization page templates.
    Authorization Scenario
    Copy
    [
        {
            "name": "otp",
            "formTag": "OTP",
            "messageTemplateName": "FTOS_IB_BulkSCAContent",
            "channelProviderName": "GatewayEmailOTP"
        }
    ]
    		JSON object containing keys for: the name of the scenario, the token used for the pass-code input field in the authorization page template, the template used for the pass-code message, and the channel provider used to send the pass-code message.
    Session Expiration Time in seconds300Number of seconds the user has to authorize the operation from the time the pass-code message is sent. If this duration is exceeded, the operation is rejected.
    Custom Page TemplateFTOS_IB_BulkDynamicLinkingTemplate for the authorization page.
    On Authorization Automation ScriptFTOS_IB_BulkSCAAcceptScriptServer-side on-demand automation script endpoint executed if the operation is authorized.
    On Reject Automation ScriptFTOS_IB_BulkSCARejectScriptServer-side on-demand automation script endpoint executed if the operation is rejected.
     
    FieldValueDescription
    NameFTOS_IB_PaymentName of the action authorization type.
    Display NamePaymentName of the action authorization type as it will be displayed in the user interface.
    Bearer EntityFTOS_IB_PaymentIt is the entity in the data model for data persistence.
    Details Automation ScriptFTOS_IB_GetBulkDetailsForSCAServer-side on-demand script endpoint containing the inputs for the pass-code generation and the available tokens for the pass-code message and authorization page templates.
    Authorization Scenario
    Copy
    [
        {
            "name": "otp",
            "formTag": "OTP",
            "messageTemplateName": "FTOS_IB_PaymentSCAContent",
            "channelProviderName": "GatewayEmailOTP"
        }
    ]
    		JSON object containing keys for: the name of the scenario, the token used for the pass-code input field in the authorization page template, the template used for the pass-code message, and the channel provider used to send the pass-code message.
    Session Expiration Time in seconds300Number of seconds the user has to authorize the operation from the time the pass-code message is sent. If this duration is exceeded, the operation is rejected.
    Custom Page TemplateFTOS_IB_PaymentDynamicLinkingTemplate for the authorization page.
    On Authorization Automation ScriptFTOS_IB_BulkSCAAcceptScriptServer-side on-demand automation script endpoint executed if the operation is authorized.
    On Reject Automation ScriptFTOS_IB_BulkSCARejectScriptServer-side on-demand automation script endpoint executed if the operation is rejected.
     
    FieldValueDescription
    NameFTOS_IB_UtilityPaymentContractName of the action authorization type.
    Display NameFTOS_IB_UtilityPaymentContractName of the action authorization type as it will be displayed in the user interface.
    Bearer EntityFTOS_IB_UtilityPaymentContractIt is the entity in the data model for data persistence.
    Details Automation ScriptFTOS_IB_GetBulkDetailsForSCAServer-side on-demand script endpoint containing the inputs for the pass-code generation and the available tokens for the pass-code message and authorization page templates.
    Authorization Scenario
    Copy
    [
        {
            "name": "otp",
            "formTag": "OTP",
            "messageTemplateName": "FTOS_IB_UtilitySCAContent",
            "channelProviderName": "GatewayEmailOTP"
        }
    ]
    		JSON object containing keys for: the name of the scenario, the token used for the pass-code input field in the authorization page template, the template used for the pass-code message, and the channel provider used to send the pass-code message.
    Session Expiration Time in seconds300Number of seconds the user has to authorize the operation from the time the pass-code message is sent. If this duration is exceeded, the operation is rejected.
    Custom Page TemplateFTOS_IB_ContractDynamicLinkingTemplate for the authorization page.
    On Authorization Automation ScriptFTOS_IB_BulkSCAAcceptScriptServer-side on-demand automation script endpoint executed if the operation is authorized.
    On Reject Automation ScriptFTOS_IB_BulkSCARejectScriptServer-side on-demand automation script endpoint executed if the operation is rejected.

    For details on how the emails and SMSes are genarated and sent to the users, see Email and SMS Generation.