Identity Proofing Online with New User Registration using Jumio's Service

Identity Proofing Online with New User Registration using Jumio's Service

What is Identity Proofing?

Identity proofing is a method of collecting identity documents and identity attributes to verify whether a person is who they claim to be.

 

Why is identity proofing is important?

Enterprises thrive to secure their services and users which is critical for them. Typically creating a trusted user database is the first step of security measures by avoiding dummy or fake accounts when users self-register. Trusted user access to service is less prone to a security breach.

Identity proofing online at user signup or new registration to system will ensure the identity is who they claim to be. As part of new user registration to the system, the workflow will collect evidence such as valid supporting documents for validation and gather user attributes for identity verification. This process will ensure that the user is legitimate. Besides, identity can be used to check the fraud databases to ensure identity does not pose a risk to be a part of the system.

Identity proofing at authentication also secures login for users but gives different user experience and few users might feel it is cumbersome to access the system.

 

Jumio's dentity proofing online service integration with new user registration flow:

NetIQ SSPR product offers a new user registration self-service workflow. This article will show how to add Identity proofing offered by Jumio.

SSPR Configuration:

 

Step1:  Deploy SSPR as alone or along with Access Manager

Step2:  Enable a New User registration profile with SSPR configuration.

 

enable2-new-user-register.png

 

 

Step 3: Disable user after registration is successful as a post-registration event

 

New-user-actions.png

 

 

Step 4: Redirect the user to a custom URL to initiate identity proofing online service.

 

new-user-redirect.png

 

For more help please visit SSPR documentation: https://www.netiq.com/documentation/self-service-password-reset-42/sspr-adminguide/data/bookinfo.html

 
The custom endpoint to initiate identity proofing flow:

 

Step 1: Create an endpoint for SSPR to redirect the user to initiate the additional workflow.

Step 2: Endpoint calls the Jumio service rest endpoint to get user redirection URL with an access token.

Step3: Create endpoint URL for handling success, failure responses from Jumio service

Step 4: Create REST endpoint as call back URL where Jumio service will post the user document validation and user attribute verification information offline to browser transaction.

Step 5. Based on Jumio’s result posted to call back endpoint enable or don’t enable the user in user repository. Additionally, one can store the information sent from Jumio service to new or existing attributes for further reference or investigation.

Note:  

  1. Ensure Callback URL is accessible from outside, add firewall rules to access requests from Jumio’s service.
  2. Use valid SSL certificate for rest endpoint service.
  3. For more information on implementation please visit Jumio service API documentation https://github.com/Jumio/implementation-guides/blob/master/netverify/netverify-web-v4.md

 

Jumio’s Service portal configuration details:

 

Step 1: Register for service

Step 2: create API credentials

Login to portal -> settings -> API Credentials -> Transaction Creation APIs

Step 3: Configure application settings

Login to portal -> settings -> Application settings -> General

Minimal configuration recommended: Callback URL, Success URL, Error URL, Select Capture method.

Note: Please do contact Jumio’s support or documentation for any help.

 

The below video is the demo of Identity proofing with the SSPR's New User Registration flow using Jumio’s identity proofing online service.

 

 

Labels (2)

DISCLAIMER:

Some content on Community Tips & Information pages is not officially supported by Micro Focus. Please refer to our Terms of Use for more detail.
Top Contributors
Version history
Revision #:
15 of 15
Last update:
‎2020-07-14 01:41
Updated by:
Micro Focus Contributor
 
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.