OTP delivery to PSU notification

Note

OTPs for the online card payment journey are not covered in the below. Where a customer selects OTP as their method of authenticating an online card payment, the OTP delivery method will remain per existing client solutions in use today.

Where an OTP is required for Token account flow and Token payment flow, then the OTP is delivered to the customer in one of the following ways:

Solaris SMS to customer (preferred)
Solaris provide to client for onward delivery via SMS to the customer. This will be provided to the client either via:

API 900 response (if a 900 response exists)
HTTP Push (webhook) for VerifyPSUWithSCA

OTP delivery to PSU notification parameters

Parameters	Type	Description
NotificationType	string	Three-digit identifier of the notification type. "066" denotes the OTP delivery to PSU notification.
ConsumerID	integer	Unique identifier of the user.
OTPType	string	Fixed description return "Verify PSU with SCA OTP"
OTPCode	integer	Unique 8-digit, time-limited, one-time-use password needs to be sent on the registered mobile or email.
SecurityHash	string	Contains the hash of the payload values and your webhook security key, to verify the origin and integrity of the notification.

Example of OTP delivery to PSU notification

Copy

Copied

{
   "NotificationType": "066",
   "ConsumerID": "21",
   "OTPType": "Verify PSU with SCA HTTP Post",
   "OTPCode" : "12345678",
   "SecurityHash" : "5d4337d825a29cbccaad48eaca80d07f04abf0315d1d5cf445057f13c06e902e"	
}

Validating the notification security hash

Security Hash validation

See the respective guide for more information on calculating and verifying the notification security hash.

To compute the hash of the notification payload, concatenate the payload values in the following sequence, with your webhook security key as the final item:

Copy

Copied

<NotificationType>&<ConsumerID>&<OTPType>&<OTPCode>&<webhook-security-key>

The payload values above and example webhook security key of abcdefghijklmnop, will produce the following hash input:

Copy

Copied

066&21&Verify PSU with SCA HTTP Post&12345678&abcdefghijklmnop