Evaluate risk
This page describes how to call the Risk Management policy manager from your back end to evaluate a risk. In other words, it focuses on the exchanges 4 to 5 of this use case:
Prerequisite
The communication with Risk Management is realized through a REST API that serves both management and operational purposes. This API is secured with JSON Web Token (JWT) authentication RFC7519. It is assumed that the clients of this API are capable of issuing valid JWT tokens.
JWT tokens can be obtained by requesting them from an identity provider or created manually. In both cases, the public key to use for signature verification must be provisioned in the Risk Management back end.
If no identity provider is available, then the following section describes how to generate an RSA key pair that you can use to issue and verify JWT tokens.
For more information, see authorization token.
For an introduction to how policies are configured to return the decisions, see Manage policies on the console.
Evaluate risk
For more information about the request parameters and response message for risk evaluation, see the REST API reference.
Response example
HTTP/1.1 200
Content-Type: application/json;charset=UTF-8
{
"status": "SUCCESS",
"tenantId": "mybank",
"decision": {
"access": {
"policy": "Login policy",
"scenario": "Unrecognised device, step-up required",
"result": "challenge"
}
},
"client": "web",
"input": {
"responseLevel": "medium",
"client": "web",
"userId": "testUser",
"event": "login",
"category": "bill",
"visitId": "123e4567-e89b-12d3-a456-426614174000"
},
"ddp": {
"request_id": "123e4567-e89b-12d3-a456-426614174001",
"policy_score": "5",
"reason_code": ["known device for user", "Device Inconsistency OS", "Hosting Facility Detected"],
"digital_id": "0123456789abcdef0123456789abcdef",
"device_id": "fedcba9876543210fedcba9876543210",
"fuzzy_device_id": "fedcba9876543210fedcba9876543210",
"input_ip_address": "203.0.113.10",
"true_ip": "203.0.113.10"
},
"tre": {
"rules": {
"browser edge": "true",
"os windows": "true",
"network tor": "false",
"device new": "false"
},
"score": 0
}
}
