Transaction Originator Authentication & Authorization
Transaction originators include merchants and other businesses requiring electronic payment acceptance, and service or software solution providers who originate payments on behalf of the former. Transaction originator authentication, as a component of Commerce Safe, involves authenticating the identity of the transaction originator with each transaction, and authorizing the use of services and data.
The majority of payment services in the market today do not implement any form of originator authentication when processing transactions. Instead, they simply leverage identity data that is passed within the body of the transaction, unprotected. Without authentication, transaction originators are vulnerable to fraudulent transactions.
Federated Identity
Commerce Safe enables software companies to implement their commerce-enabled applications in a fashion that supports a wide range of authentication methodology. One of the key benefits of leveraging
Commerce Lab is capturing the channel opportunity represented by the network. To this end, Commerce Safe enables a consistent customer experience (with one set of credentials) and supports the channel's need for managing authentication and authorization across the network.
How Federated Identity Works
-
Single Sign On (SSO)
- Customers have only one set of authentication credentials, that are authenticated by the channel. This enables a consistent customer experience that allows access to multiple services or applications across multiple parties.
-
Claims Based Authentication
- Channels (who own the relationship with the customer) can use claims to establish business rules, such as spending limits, during authentication. These claims propagate seamlessly and securely through 3rd party offerings and can be enforced in front of payment service connectivity by the IP Commerce Platform. Claims based authentication enables channels to manage authorization of services without creating integration requirements on 3rd parties such as the customer’s software vendor.