Highly Regulated Identity

Elevate security, privacy, and user experience beyond login. Secure your most sensitive customer operations while maintaining compliance and intuitive user experiences.

 

 

Securing Sensitive Customer Operations

Boost security and avoid fraud

Protect APIs and sensitive customer transactions and data. Strong Customer Authentication (SCA) lets customers review and approve transactions in real time. Client Initiated Backchannel Authentication (CIBA) enables secure and streamlined user authentication for call center, in-person, and online interactions.

Deliver intuitive user experiences

Balance security and ease by integrating with your risk engine to streamline user experience. Send enriched approval requests only when necessary. Drive user adoption that is intuitive, easy, and fast.

Drive agility and reduce costs

Grow confidently and ease cost pressures with a scalable, reliable, and extensible born-in-the-cloud Identity solution that bolsters security without sacrificing agility.

Set the stage for compliance

Highly Regulated Identity provides a certified FAPI 1 Advanced security profile implementation, laying the groundwork for solutions that are compliant with open banking requirements. Customer Managed Keys help achieve controls for provenance and lifecycle compliance of cryptographic keys.

How Highly Regulated Identity can be used

Safeguard sensitive customer operations such as updating account information, admin or security settings, accessing sensitive data or apps, sending money, making an open banking payment, and more.

Strong Customer Authentication

Strong Customer Authentication (SCA) lets users review and approve sensitive operations in real time. Dynamic Linking ties transaction details to the SCA approval confirmation to help prevent transaction tampering.

Financial Grade API Protocols 

A certified FAPI 1 Advanced security profile implementation to ensure data privacy and app security. FAPI protects the end-to-end flow against cyber and fraud risks like transaction tampering. (FAPI is the Financial Grade API working group at the OpenID Foundation).

Customizable user journeys

Here’s when the magic of the Customer Identity Cloud kicks in: customizing is easy. Simply use Actions to run custom policy and adopt new UX templates for the MFA waiting screen and custom consent screen. Easy, right?

Reduced friction for users

CIBA (Client Initiated Back-channel Authentication) allows user authentication to be initiated by a backend application instead of the user device. This way, for out-of-band interactions, you can skip the often-forgotten, less secure verification questions. With CIBA, call center agents, for example, can send an authentication request right to the end user's device, so they can verify their identity with a single tap.

Increased compliance

Some organizations have stricter compliance and audit policies that require them to have complete control over their encryption keys. Customer Managed Keys is our way of tackling this. You can import self-generated keys for encryption and rotate and rekey tenant keys.

  • Strong Customer Authentication
    Strong Customer Authentication

    Strong Customer Authentication (SCA) lets users review and approve sensitive operations in real time. Dynamic Linking ties transaction details to the SCA approval confirmation to help prevent transaction tampering.

  • Financial Grade API Protocols 
    Financial Grade API Protocols 

    A certified FAPI 1 Advanced security profile implementation to ensure data privacy and app security. FAPI protects the end-to-end flow against cyber and fraud risks like transaction tampering. (FAPI is the Financial Grade API working group at the OpenID Foundation).

  • Customizable user journeys
    Customizable user journeys

    Here’s when the magic of the Customer Identity Cloud kicks in: customizing is easy. Simply use Actions to run custom policy and adopt new UX templates for the MFA waiting screen and custom consent screen. Easy, right?

  • Reduced friction for users
    Reduced friction for users

    CIBA (Client Initiated Back-channel Authentication) allows user authentication to be initiated by a backend application instead of the user device. This way, for out-of-band interactions, you can skip the often-forgotten, less secure verification questions. With CIBA, call center agents, for example, can send an authentication request right to the end user's device, so they can verify their identity with a single tap.

  • Increased compliance
    Increased compliance

    Some organizations have stricter compliance and audit policies that require them to have complete control over their encryption keys. Customer Managed Keys is our way of tackling this. You can import self-generated keys for encryption and rotate and rekey tenant keys.

Easy, secure customer operations

See how Highly Regulated Identity simplifies the process for everyone involved.

Let’s get you going