Integration of Orchestration with OneSpan Mobile Security Suite

The Orchestration SDK enables you to easily leverage major security features in your mobile application:

• Two-factor authentication

• Secure provisioning

• Secure Channel

• Secure storage

• Password protection

• Fingerprint recognition

• Multi-device management

This SDK provides the ability to orchestrate the behavior of the mobile application after a risk evaluation. If a risk has arisen for a given transaction, Intelligent Adaptive Authentication can be set to dynamically request step-up authentication or transaction signing on the mobile application. To accomplish this, a given protection type (e.g. fingerprint recognition) is used.

Data exchange happens between the mobile application that integrates the Orchestration SDK and the application server that uses Intelligent Adaptive Authentication. The exchanged data is encapsulated into orchestration commands which are encoded as hexadecimal strings. These orchestration commands are protected by the Secure Channel feature to ensure the confidentiality, integrity, and non-repudiation of the exchanged data.

Find further information in the following documents:

• OneSpan Mobile Security Suite Product Guide

• Orchestration SDK Integration Guide at Mobile Security Suite > Guides > Integration Guides.

Before You Begin

The Orchestration SDK does not handle the communication layers (e.g. network, Push Notification messages, or image scanning). This part must be handled by the mobile application that integrates the Orchestration SDK.

The Orchestration SDK supports the following platforms:

• Android 5.0 and later

• iOS 12.0 and later

The Android and iOS binaries are part of the Mobile Security Suite SDKs bundle that can be retrieved from the Mobile Security Suite SDKs Download page.

Authenticator configuration

To successfully set up orchestration, the following authenticator configuration settings are mandatory:

• The authenticator must have a Secure Channel application for activation, remote authentication, and remote transaction operations.

• PIN protection must be set to optional, and the minimum PIN length must be 6 characters when a keypad is used that is provided by OneSpan.

The following authenticator configuration settings are optional:

• A Response-Only application for local authentication and PIN change.

• A Challenge/Response application for local authentication.

• A Signature application for local transactions.

Integration of the Orchestration SDK in your mobile application

For detailed instructions how to use the Orchestration SDK in your Android and iOS projects, refer to Integrating the Orchestration SDK.