⚙️ Processes
The processes supported by TrustID can be split into "Customer Initiated flows" and "User Initiated flows"
👤 User Initiated Flows
User initiated flows are actions initiated by the user of the app and consumed in the SDK. These are the following:
-
Enable Biometrics ( for authentication)
-
Disable Biometrics ( for authentication)
-
Change PIN
In these processes your Backend servers need not to be involved. TrustID SDK expose APIs to your app and your app needs to implement the code that consumes these APIs and make available the relevant functionality within your app to your users.
🤝 Customer Initiated Flows
Customer initiated flows are actions initiated by your backend servers and initiate an orchestration between your server application, your app and the TrustID ecosystem (SDK and service). The following processes belong to this category:
-
Provisioning
-
Authentication
-
Consent
-
Block a User
📋 Implementation Sequence for Customer Initiated Flows
-
Call the CIBA endpoint to start a new authentication transaction.
-
Use the process identifier within the response to start user authentication (user consent) from the app/sdk.
-
Wait for the user to complete the process (alternatively, poll the server for updates).
-
Poll eIdent server to retrieve the ID token with the result of the authentication.
-
Use the access token from within the ID token, and call the UserInfo endpoint to get extra information related to the authentication (optional).