Configuring Strong Customer Authentication

Strong Customer Authentication (SCA) incorporates an additional layer of security to the authentication process. It ensures the online transactions, online account access and other online actions are more secured.

SCA enforces the authentication process to use at least two from the authentication categories below.

These additional layers of authentication in SCA could lead to bad user experiences when there is no risk involved. Therefore, Transaction Risk Analysis (TRA) is introduced as a balancing mechanism between user experience and SCA.

You can enforce SCA for WSO2 Open Banking Solution with the use of Authenticators.

WSO2 Open Banking Solution contains basic authentication and SMS OTP authentication as out-of-the-box features. Click here to find out how to configure default authenticators.
The solution provides you with the flexibility of implementing any type of authentication such as biometric, FIDO, Duo etc. Click here to see how to add a custom authenticator.
The authentication process of the Third Party Provider can also be modified and configured with SCA. You will have to customize the Key Manager Extension in order to achieve this. Click here to see how to customize the key manager extension.