Skip to main content

Class SSOCredentialsSHA256

Used to authenticate an SSO user via SHA256 Hash.


Properties

NAMETYPEDESCRIPTION
PhoneKeySystem.StringREQUIRED. The unique id for the phone. A GUID created by the app vendor at first time use and stored in long term storage on the device which is intended to be unique to the device and application. Limit of 100 characters. Printable characters only.
FIIdentifierSystem.StringREQUIRED. A unique string value identifying the Financial Institution's RDA merchant in the EPS system (may be the same as Company, but stored in a different location). By default, this Value is generated and provided by EPS during integration.
HashSystem.StringREQUIRED. A unique string value. Hashed value (either SHA256 or SHA512) used for comparison. The string values must be concatenated in this order: HomeBankingId + Timestamp + FIIdentifier + SharedSecret + SaltValue. Note that the Timestamp used for this hash should be in the format M/d/yyyy h:mm:ss tt. (e.g. 6/17/2019 7:20:40 PM).
HomeBankingIdSystem.StringA string value with a unique identifier for the customer. It is required for all customers boarded with the RDA Web Service and most often corresponds to the customer's unique identifier in the Financial Institution's system. Max length is 50 characters.
SaltValueSystem.StringREQUIRED. A randomly generated string of text by the application vendor, also to be used in the hash calculation to add additional randomness to the hash.
TimestampSystem.DateTimeREQUIRED. Current Date time of the SSO authentication and must be within 10 minutes of the EPS server time. Required to be in the format M/d/yyyy h:mm:ss tt for non-json requests: (e.g., 6/17/2019 7:20:40 PM). Required to be in the format /Date(xxxxxxxxxx-yyy)/ for json requests: (e.g., /Date(1560860654524-300)/)

Examples

{
"__type": "SSOCredentialsSHA256:#JackHenry.Eps.Mobile.RDA"
}