Two-Way, ENS-Generated OTP Verification Value, Consumer-Provided Message Body

An explicit integration level, ENS consumer desires to send an OOB challenge to its recipient user’s mobile phone using an ENS-generated OTP verification value and a consumer-provided message body. The consumer elects the ENS provider to verify the recipient’s response to the OOB challenge.

Consumer Completed Pre-requites

The consumer has previously completed the following pre-requisites:

• Determined the recipient’s mobile phone number to send in its OOB notification request.
• Determined the entirety of the message body to send in its OOB notification request.
• Subscribed to receive ENS enterprise events.

Consumer Use Case Options

This tutorial example applies the following four consumer options:

1. Explicit integration level.
2. Two-way verification.
3. ENS-generated OTP verification value.
4. Consumer-provided message body.

Steps

1. Consumer presents the recipient OOB challenge instructions from its application user interface:
   • Select which mobile phone number should receive the OOB notification.
   • Press the “Verify Log In” button to trigger the OOB challenge notification.
2. Consumer sends the notification request to the Enterprise OOB Service provided by ENS.
3. ENS:
   • Validates the consumer’s request.
   • Generates a random 6-digit numeric OTP verification value.
   • Returns the message with the verification value.
   • Returns the ENS-generated OTP in the element of the message.
   • Selects which ENS system-default message body to send based on the request values.
4. ENS adds a new OOB session for the consumer’s two-way use case.
5. ENS sends the OOB notification as an SMS message to the recipient’s mobile phone.
6. Recipient responds via SMS text message as instructed by the OOB notification using the OTP verification value.
7. ENS verifies the recipient’s response containing the OTP verification value.
8. ENS sends a “90040 – ENS Publisher Feedback” enterprise event confirming that the recipient successfully verified the OOB challenge.
9. Consumer receives the enterprise event and confirms successful OOB verification to recipient user.

Flowchart

Example Messages

OOBValidate Request

This request sample below highlights a minimum sampling of request elements required for this use case.

<SOAP-ENV:Body>
    <OOBValidateRq xmlns=“http://jackhenry.com/jxchange/TPG/2008”>
        <MsgRqHdr>
            <jXchangeHdr>
                <AuditUsrId>AuditUsrId1</AuditUsrId>
                <AuditWsId>AuditWsId1</AuditWsId>
            </jXchangeHdr>
        </MsgRqHdr>
        <PhoneNum>4175556652</PhoneNum>
        <SMSText>Ovation: Respond <%$otp%> via text msg to authorize your transfer of $2500.00 from Primary Savings to Business Checking.
        </SMSText>
    </OOBValidateRq>
</SOAP-ENV:Body> 

OOBValidate Response

<SOAP-ENV:Body>
    <OOBValidateRs xmlns=“http://jackhenry.com/jxchange/TPG/2008”>
        <MsgRsHdr>
            <jXchangeHdr>
                <AuditUsrId>AuditUsrId1</AuditUsrId>
                <AuditWsId>AuditWsId1</AuditWsId>
            </jXchangeHdr>
        </MsgRsHdr>
        <AlrtPkgId>c883f345-ec44-4293-9343-02e00ddbdbf6</AlrtPkgId>
        <OTP>314323</OTP>
        <RsStat>Success</RsStat>
    </OOBValidateRs>
</SOAP-ENV:Body> 

Referenced and Associated Operations

It is highly recommended that as part of referencing this use case that a user becomes familiar with the following jXchange operations and their function. While the user may elect to not use the listed operation as part of their programming or workflow, knowledge of the operations listed below is essential to understanding the process set forth with this use case.

Detailed information about the operation, the request structure/response, error messages and other useful information can be obtained by clicking the operation name below.