iovation Integration Kit

iovation IdP Adapter settings reference

Field descriptions for the iovation IdP Adapter configuration screen.

Standard fields
Field Description

Subscriber ID

The subscriber ID provided to you by iovation.

Subscriber Account

The subscriber account provided to you by iovation. This is typically "OLTP".

Subscriber Passcode

The subscriber passcode provided to you by iovation.

Iovation Integration Point

The name of the integration point that you configured in the iovation Intelligence Center in Setup.

Iovation API Base URL

The URL of the iovation API.

Pre-production: https://ci-api.iovation.com

Device Profiling Method

For a detailed description, see Device profiling method.

If you completed the optional steps in Adding device profiling to an authentication page, select Captured by a previous adapter".

Otherwise, select Captured by this adapter.

The default value is Captured by this adapter.

Advanced fields
Field Description

Device Profiling Timeout

The amount of time in milliseconds that PingFederate waits for the iovation scripts to collect device details. Applies only when Device Profiling Method is set to Captured by this adapter.

The default value is 2000.

Blackbox Cookie Name Prefix

The prefix of the cookies that contain the iovation blackbox captured by a previous adapter. Applies only when Device Profiling Method is set to Captured by a previous adapter.

If you customized the name prefix for the blackbox cookie in the optional Adding device profiling to an authentication page steps, enter the same name in this field.

The default value is iovation_bb.

Fraud Check API Endpoint

The iovation REST Fraud Check API endpoint that assesses risk for transactions based on the device and transaction details.

The default value is /fraud/v1/subs/${subscriberId}/checks.

Failure Mode

When iovation is unavailable or an error occurs, this setting determines whether the user’s sign-on attempt should fail or continue with a pre-determined risk result.

For cases where the iovation API is unavailable or returns an error, we recommend that you allow users to continue to sign on by satisfying stricter authentication requirements. You can do this in your adapter configuration by setting the Failure mode to return the review result. Alternately, you can do this in your authentication policy by setting the Fail outcome of the iovation IdP Adapter instance as shown in Adding risk results to your authentication policy.

Fallback Risk Result Value

The risk result (for example, "review", "deny", or "unknown") to use in the authentication policy when iovation is unavailable or an error occurs, and Failure Mode is set to Continue with fallback risk result.

The default value is Continue with fallback risk result.

API Request Timeout

The amount of time in milliseconds that PingFederate waits for the API to respond to requests. A value of 0 disables the timeout.

The default value is 5000.

Connection Timeout

The amount of time in milliseconds that PingFederate allows to establish a connection with the API. A value of 0 disables the timeout.

The default value is 5000.

Proxy Settings

Defines proxy settings for outbound HTTP requests.

The default value is System Defaults.

Custom Proxy Host

The proxy server hostname to use when Proxy Settings is set to Custom.

This field is blank by defauilt.

Custom Proxy Port

The proxy server port to use when Proxy Settings is set to Custom.

This field is blank by defauilt.

Verify HTTPS Hostname

When a connection is established with iovation, PingFederate matches the target hostname against the names stored inside the server’s X.509 certificate. This security measure ensures that PingFederate is connecting to the correct server.

This check box is selected by default.