iovation Integration Kit

iovation IdP Adapter settings reference

Field descriptions for the iovation IdP Adapter configuration page.

Standard fields
Field Description

Subscriber ID

The subscriber ID iovation provides you.

Subscriber Account

The subscriber account iovation provides you. This is typically OLTP.

Subscriber Passcode

The subscriber passcode iovation provides you.

Iovation Integration Point

The name of the integration point you configured in the iovation Intelligence Center in Setup.

Iovation API Base URL

The URL of the iovation API.

Production

https://api.iovation.com

Pre-production

https://ci-api.iovation.com

Device Profiling Method

The stage of authentication that device details are collected in. You can find a more detailed description in Device profiling method.

If you completed the optional steps in Adding device profiling to an authentication page, select Captured by a previous adapter. Otherwise, select Captured by this adapter.

The default value is Captured by this adapter.
Advanced fields
Field Description

Device Profiling Timeout

The amount of time, in milliseconds, that PingFederate waits for the iovation scripts to collect device details.

Applies only when Device Profiling Method is Captured by this adapter.

The default value is 2000.

Blackbox Cookie Name Prefix

The prefix of the cookies that contain the iovation blackbox captured by a previous adapter.

Applies only when Device Profiling Method is Captured by a previous adapter.

If you customized the name prefix for the blackbox cookie in Adding device profiling to an authentication page, enter the same name in this field.

The default value is iovation_bb.

Fraud Check API Endpoint

The iovation REST Fraud Check API endpoint that assesses risk for transactions based on the device and transaction details.

The default value is /fraud/v1/subs/${subscriberId}/checks.

Failure Mode

When iovation is unavailable or an error occurs, this setting determines whether the user’s sign-on attempt should fail or continue with a pre-determined risk result.

For cases where the iovation API is unavailable or returns an error, you can allow users to continue to sign on by satisfying stricter authentication requirements. You can configure this either:

  • In your adapter configuration by setting the Failure Mode to return the review result.

  • In your authentication policy by setting the Fail outcome of the iovation IdP Adapter instance as shown in Adding risk results to your authentication policy.

The default value is Continue with fallback risk result.

Fallback Risk Result Value

The risk result (for example, review, deny, or unknown) to use in the authentication policy when iovation is unavailable or an error occurs, and Failure Mode is Continue with fallback risk result.

The default value is review.

API Request Timeout

The amount of time, in milliseconds, that PingFederate waits for the API to respond to requests. A value of 0 disables the timeout.

The default value is 2000.

Connection Timeout

The amount of time, in milliseconds, that PingFederate allows to establish a connection with the API. A value of 0 disables the timeout.

The default value is 2000.

Proxy Settings

Defines proxy settings for outbound HTTP requests.

The default value is System Defaults.

Custom Proxy Host

The proxy server hostname to use when Proxy Settings is set to Custom.

This field is blank by default.

Custom Proxy Port

The proxy server port to use when Proxy Settings is Custom.

This field is blank by default.

Verify HTTPS Hostname

When a connection is established with iovation, PingFederate matches the target hostname against the names stored inside the server’s X.509 certificate. This security measure ensures that PingFederate is connecting to the correct server.

This checkbox is selected by default.