Secure Channel validation

Article summary

Did you find this summary helpful?

Thank you for your feedback

Regular Secure Channel validation

<SecureChannelValidation internalValidation="true">
<URL value="http://MY_DOMAIN_NAME/...?serial=%_ SerialNumber_%&otp=%_ OTP_%_%&cryptoAppIndex=2&secureChannelMessage=%_ SecureChannelMessage_%" >
</URL>
</SecureChannelValidation>

SecureChannelValidation: This element is used to configure the Mobile Authenticator Studio Secure Channel validation. This element is optional.
- internalValidation: Indicates whether the transaction is validated internally (by Mobile Authenticator Studio) or externally (via a web browser). The default value is false.
SecureChannelValidation > URL: This is the URL used to validate the Secure Channel message signature.

Masks for the regular Secure Channel validation URL lists the masks for the regular Secure Channel validation URL.

Mask	Value
Masks for the regular Secure Channel validation URL
%_SerialNumber_%	This is the serial number of the authenticator. This mask is mandatory.
%_OTP_%	This is the generated signature of the Secure Channel message. This mask is mandatory.
%_SecureChannelMessage_%	This is the Secure Channel message signed by the application. This mask is optional.

<SecureChannelValidation>
<URL method="POST" contentType="json"value="http://MY_DOMAIN_NAME/rest/v2/signature/push/authSignature">
<PayloadParameter key="userID"value="%_UserIdentifier_%"/>
<PayloadParameter key="domain"value="%_Domain_%"/>
<PayloadParameter key="challengeKey"value="%_Challenge_%"/>
<PayloadParameter key="signature"value="%_OTP_%"/>
</URL>
</SecureChannelValidation>

SecureChannelValidation > URL: This is the URL used to validate the Secure Channel message signature. It must use the POST method and the json content type.

Masks for the Secure Channel validation URL with DIGIPASS Gateway lists the masks for the Secure Channel validation URL in case of push-and-login or push-and-sign operations using DIGIPASS Gateway.

Mask	Value
Masks for the Secure Channel validation URL with DIGIPASS Gateway
%_UserIdentifierSerialNumber_%	This is the user identifier used to activate the authenticator. This mask is mandatory.
%_Domain_%	This is the domain used by the generated signature of the Secure Channel message. This mask is mandatory.
%_Challenge_%	This is the challenge key used to retrieve the Secure Channel message signed by the application. This mask is mandatory.
%_OTP_%	This is the generated signature of the Secure Channel message. This mask is mandatory.

The SecureChannelValidation element is used during push-and-login or push-and-sign operations using DIGIPASS Gateway.

Was this article helpful?

Table of contents