TruValidate IdP Adapter settings reference

Field descriptions for the TruValidate IdP Adapter configuration page:

Standard fields

Field Description

Subscriber ID

The subscriber ID TruValidate provides you.

Subscriber Account

The subscriber account TruValidate provides you. This is typically OLTP.

Subscriber Passcode

The subscriber passcode TruValidate provides you.

Client Certificate

The client certificate used to authenticate to the TruValidate service.

You can find more information on adding a client certificate in Manage SSL client keys and certificates in the PingFederate docs.

TruValidate Integration Point

The name of the integration point you configured in the TruValidate Intelligence Center in Setup.

TruValidate API Base URL

The URL of the TruValidate API.

Production: https://mtls-api.iovation.com
Pre-production: https://mtls-ci-api.iovation.com

Device Profiling Method

The stage of authentication that device details are collected in. You can find a more detailed description in Device profiling method.

If you completed the optional steps in xref:pf_truvalidate_ik_adding_device_profiling_authentication_page.adoc[], select [.uicontrol]**Captured by a previous adapter**.
Otherwise, select [.uicontrol]**Captured by this adapter**.

The default value is Captured by this adapter.

Advanced fields

Field Description

Field	Description
Device Profiling Timeout	The amount of time, in milliseconds, that PingFederate waits for the TruValidate scripts to collect device details. Applies only when [.uicontrol]Device Profiling Method is [.uicontrol]Captured by this adapter. The default value is `2000`.
Device Profiling Max Attempts	The maximum number of times PingFederate attempts device profiling if TruValidate scripts fail to collect profiling details within the configured device profiling timeout window. Retry might occur in cases where PingFederate doesn’t receive any device profiling result. If the limit is reached, the adapter fails forward. The default value is `5`. Applies only when [.uicontrol]Device Profiling Method is [.uicontrol]Captured By This Adapter.
Blackbox Cookie Name Prefix	The prefix of the cookies that contain the TruValidate blackbox captured by a previous adapter. Applies only when [.uicontrol]Device Profiling Method is [.uicontrol]Captured by a previous adapter. If you customized the name prefix for the blackbox cookie in Adding device profiling to an authentication page, enter the same name in this field. The default value is `iovation_bb`.
Fraud Check API Endpoint	The TruValidate REST Fraud Check API endpoint that assesses risk for transactions based on the device and transaction details. The default value is `/fraud/v1/subs/${subscriberId}/checks`.
Failure Mode	When TruValidate is unavailable or an error occurs, this setting determines whether the user’s sign-on attempt should fail or continue with a pre-determined risk result. For cases where the TruValidate API is unavailable or returns an error, you can allow users to continue to sign on by satisfying stricter authentication requirements. You can configure this either: In your adapter configuration by setting the Failure Mode to return the `review` result. In your authentication policy by setting the Fail outcome of the TruValidate IdP Adapter instance as shown in Adding risk results to your authentication policy. The default value is Continue with fallback risk result.
Fallback Risk Result Value	The risk result (for example, `review`, `deny`, or `unknown`) to use in the authentication policy when TruValidate is unavailable or an error occurs, and Failure Mode is Continue with fallback risk result. The default value is `review`.
API Request Timeout	The amount of time, in milliseconds, that PingFederate waits for the API to respond to requests. A value of `0` disables the timeout. The default value is `2000`.
Connection Timeout	The amount of time, in milliseconds, that PingFederate allows to establish a connection with the API. A value of `0` disables the timeout. The default value is `2000`.
Proxy Settings	Defines proxy settings for outbound HTTP requests. The default value is System Defaults.
Custom Proxy Host	The proxy server hostname to use when Proxy Settings is set to Custom. This field is blank by default.
Custom Proxy Port	The proxy server port to use when Proxy Settings is Custom. This field is blank by default.
Verify HTTPS Hostname	When a connection is established with TruValidate, PingFederate matches the target hostname against the names stored inside the server’s X.509 certificate. This security measure ensures that PingFederate is connecting to the correct server. This checkbox is selected by default.

Device Profiling Timeout

The amount of time, in milliseconds, that PingFederate waits for the TruValidate scripts to collect device details.

Applies only when [.uicontrol]**Device Profiling Method** is [.uicontrol]**Captured by this adapter**.

The default value is 2000.

Device Profiling Max Attempts

The maximum number of times PingFederate attempts device profiling if TruValidate scripts fail to collect profiling details within the configured device profiling timeout window.

Retry might occur in cases where PingFederate doesn’t receive any device profiling result.

If the limit is reached, the adapter fails forward. The default value is 5.

Applies only when [.uicontrol]**Device Profiling Method** is [.uicontrol]**Captured By This Adapter**.

Blackbox Cookie Name Prefix

The prefix of the cookies that contain the TruValidate blackbox captured by a previous adapter.

Applies only when [.uicontrol]**Device Profiling Method** is [.uicontrol]**Captured by a previous adapter**.

If you customized the name prefix for the blackbox cookie in Adding device profiling to an authentication page, enter the same name in this field.

The default value is iovation_bb.

Fraud Check API Endpoint

The TruValidate REST Fraud Check API endpoint that assesses risk for transactions based on the device and transaction details.

The default value is /fraud/v1/subs/${subscriberId}/checks.

Failure Mode

When TruValidate is unavailable or an error occurs, this setting determines whether the user’s sign-on attempt should fail or continue with a pre-determined risk result.

For cases where the TruValidate API is unavailable or returns an error, you can allow users to continue to sign on by satisfying stricter authentication requirements. You can configure this either:

In your adapter configuration by setting the Failure Mode to return the review result.
In your authentication policy by setting the Fail outcome of the TruValidate IdP Adapter instance as shown in Adding risk results to your authentication policy.

The default value is Continue with fallback risk result.

Fallback Risk Result Value

The risk result (for example, review, deny, or unknown) to use in the authentication policy when TruValidate is unavailable or an error occurs, and Failure Mode is Continue with fallback risk result.

The default value is review.

API Request Timeout

The amount of time, in milliseconds, that PingFederate waits for the API to respond to requests. A value of 0 disables the timeout.

The default value is 2000.

Connection Timeout

The amount of time, in milliseconds, that PingFederate allows to establish a connection with the API. A value of 0 disables the timeout.

The default value is 2000.

Proxy Settings

Defines proxy settings for outbound HTTP requests.

The default value is System Defaults.

Custom Proxy Host

The proxy server hostname to use when Proxy Settings is set to Custom.

This field is blank by default.

Custom Proxy Port

The proxy server port to use when Proxy Settings is Custom.

This field is blank by default.

Verify HTTPS Hostname

When a connection is established with TruValidate, PingFederate matches the target hostname against the names stored inside the server’s X.509 certificate. This security measure ensures that PingFederate is connecting to the correct server.

This checkbox is selected by default.

TruValidate Integration Kit

TruValidate IdP Adapter settings reference