Overview
In this scenario, the user wants to access or use some bank resources, such as log in to the bank portal, perform a transaction and so on. The bank would like to make this as easy as possible for the end user, while ensuring a good level of security.
The scenario allows the bank to request a risk evaluation for the operation based on one or more fraud prevention technologies. The result will be a decision from the policy manager like "authenticate with password", "authenticate with OTP", "denied", and so on.
The bank is in charge of enforcing this decision. If the decision was to authenticate with username and 2FA, the bank needs to request the same level of authentication or higher from the user.
Once the user has been authenticated, the bank must provide the result of this authentication back to IdCloud. To improve the quality of the risk evaluations, historical data on past authentication results plays an important role and allows the system to provide better decisions and improve user experience.
Sequence diagram
The following sequence diagram shows the different steps to execute this scenario.
Next
