Authentication 2.0

Field Name Type Size Field Format/Description

behaviorScore_isUbaTraining

Boolean

1

Indicates the UBA stage of the user:

  • true = UBA Training stage
  • false = UBA Scoring stage

behaviorScore_rbaScore

Numeric

4

The risk-based authentication score.

behaviorScore_ubaScore

Numeric

4

The value of the user keystroke behavior score. This value is applicable only if isUbaTraining is set to false.

behaviorScore_ubaThreshold

Numeric

4

The value of the user keystroke behavior threshold. This value is applicable only if isUbaTraining is set to false.

clientIdFromHeader

Text

16

Unique identifier for the client or subclient. The value of this field is determined jointly by the client and FICO.

customerIdFromHeader

Text

20

Reserved for internal Falcon Fraud Manager use.

dataSpecificationVersion

Text

5

2

eventType

Text

20

Identifies the event type. Valid values are as follows:

  • RISK_EVALUATE = Indicates whether this is a call to submit ONLY the Risk and Behavior data for risk evaluation purposes. If the targeted external application is Falcon Expert, this may be also an indicator to evaluate the provided Risk and Behavior data based on the Falcon Expert rules and response FAS the Step-up result in the same call.
  • RISK_COMMIT = Indicates whether this is a call invoked after a user completed the Session Sign-in or Transaction flow. It also means the submit request data may contains Step-up result.

externalTransactionId

Text

32

Client-generated unique transaction ID that is unique across all data feeds for a specific installation of Falcon Fraud Manager.

geolocation_clientCity

Text

100

User client city.

geolocation_clientCountry

Text

100

User client country.

geolocation_clientIpAddress

Text

50

User client public IP Address.

gmtOffset

Numeric

6

Specifies the Greenwich Mean Time (GMT) offset associated with all date-time fields in the record body (positions 161 onward). Format is (-)nn.nn, where the digits to the right of the decimal point represent decimal fractions of an hour. For example, a GMT offset of 5 hours and 45 minutes (Nepal) is expressed as 5.75. Note that changes during Daylight Saving Time if Daylight Saving Time is observed in the date-time fields in the record body.

groupId

Text

30

A unique identifier for a group in the FAS Security/Customer Domain. The combination of userId and groupId values uniquely identifies a user record in the system.

recordCreationDate

Date

8

Format: yyyymmdd

Date that this record was created. Time zone must be GMT.

recordCreationMilliseconds

Numeric

3

Format: sss

Milliseconds portion of the time that this record was created.

recordCreationTime

Date

6

Format: hhmmss

Time that this record was created. Time zone must be GMT.

recordType

Text

8

AUTHN20

riskData_OSApiLevel

Text

10

Indicates the API level of the OS.

riskData_appBuildNumber

Text

10

Identifies the application build number.

riskData_appBuildVersion

Text

10

Identifies the application build version.

riskData_appIdentifier

Text

100

Identifies the application.

riskData_browserLanguage

Text

8

The default language setting for the browser.

riskData_browserName

Text

20

The browser name from where the application is being accessed.

riskData_browserTimezone

Text

64

The timezone of the browser used to access the application.

riskData_browserTimezoneOffset

Numeric

5

The time difference between UTC time and local time, in minutes. If time-zone is GMT+2, the value will be -120.

riskData_browserUserAgent

Text

255

The device browser agent.

riskData_browserVersion

Text

20

The browser version from where the application is being accessed.

riskData_carrierAllowsVOIP

Boolean

1

Indicates whether the carrier allows VOIP.

riskData_carrierISOCountryCode

Text

5

The ISO Country Code of the carrier.

riskData_carrierMobileCountryCode

Text

10

The mobile Country Code of the carrier.

riskData_connectedToCellNetwork

Boolean

1

Indicates whether the device is connected to a cellular network.

riskData_connectedToWiFi

Boolean

1

Indicates whether the device is connected to a Wi-Fi network.

riskData_currency

Text

5

The currency used by the device.

riskData_deviceAppList

Text

0

JSON array contains the list of the installed application names on the device.

riskData_deviceBattery

Text

10

The battery level for the device.

riskData_deviceBoardName

Text

50

The board name of the device.

riskData_deviceHardware

Text

50

The device hardware.

riskData_deviceId

Text

64

Logical non hardware persistent device unique identifier.

riskData_deviceLatitude

Text

16

The GPS latitude coordinate.

riskData_deviceLocationEnabled

Boolean

1

Indicates whether device Location service is enabled.

riskData_deviceLocationPermissionGranted

Boolean

1

Indicates whether user granted the Location permission to the integrated mobile app.

riskData_deviceLongitude

Text

16

The current longitude of the device in degrees.

riskData_deviceMemory

Text

16

The memory in the device.

riskData_deviceModel

Text

20

The device model.

riskData_deviceNetworkCarrier

Text

64

The device network carrier.

riskData_deviceOsName

Text

20

The OS for the device.

riskData_deviceOsVersion

Text

20

The version of the OS for the device.

riskData_deviceStorage

Text

16

The storage size of the device.

riskData_deviceVendor

Text

20

The vendor of the device.

riskData_deviceWifiProxy

Text

50

The WiFi connection proxy.

riskData_deviceWifiSecurity

Text

16

The security type for the Wifi connection, such as WEP or WPA.

riskData_deviceWifiSsid

Text

32

The SSID for the WiFi network that the device is connected to.

riskData_distanceAvailable

Boolean

1

Indicates whether the device can estimate distance travelled.

riskData_floorCountingAvailable

Boolean

1

Indicates whether the device can count floors.

riskData_hasAccelerometerSensor

Boolean

1

Indicates whether the device has an accelerometer.

riskData_hasAmbientTemperatureSensor

Boolean

1

Indicates whether the device includes an ambient temperature sensor.

riskData_hasAudioOutput

Boolean

1

Indicates whether the device has audio output capability.

riskData_hasBarometerSensor

Boolean

1

Indicates whether the device has a barometer.

riskData_hasCDMATelephony

Boolean

1

Indicates whether the device has a CDMA telephony stack.

riskData_hasCompassSensor

Boolean

1

Indicates whether the device has a compass.

riskData_hasFaceScanner

Boolean

1

Indicates whether the device has biometric hardware to perform face authentication.

riskData_hasFingerprintScanner

Boolean

1

Indicates whether the device has biometric hardware to detect a fingerprint.

riskData_hasFrontCamera

Boolean

1

Indicates whether the device has a front camera.

riskData_hasGPS

Boolean

1

Indicates whether the device has a Global Positioning System (GPS) and can report a precise location.

riskData_hasGSMTelephony

Boolean

1

Indicates whether the device has a GSM telephony stack.

riskData_hasGamepad

Boolean

1

Indicates whether the device has a gamepad or compatible game controller.

riskData_hasGyroscopeSensor

Boolean

1

Indicates whether the device has a gyroscope.

riskData_hasHeartRateMonitor

Boolean

1

Indicates whether the device has a heart rate monitor.

riskData_hasIrisScanner

Boolean

1

Indicates whether the device has biometric hardware to perform iris authentication.

riskData_hasLightSensor

Boolean

1

Indicates whether the device has a light sensor.

riskData_hasMicrophone

Boolean

1

Indicates whether the device has a microphone.

riskData_hasPhysicalKeyboard

Boolean

1

Indicates whether the device has a physical keyboard.

riskData_hasProAudioCapability

Boolean

1

Indicates whether the device has Pro Audio capability.

riskData_hasProximitySensor

Boolean

1

Indicates whether the device has a proximity sensor.

riskData_hasRearCamera

Boolean

1

Indicates whether the device has a rear camera.

riskData_hasRelativeHumiditySensor

Boolean

1

Indicates whether the device has a relative humidity sensor.

riskData_hasStepCounterSensor

Boolean

1

Indicates whether the device has a step counter.

riskData_hasStepDetectorSensor

Boolean

1

Indicates whether the device has a step detector.

riskData_hasStrongBoxKeystore

Boolean

1

Indicates whether the device has a StrongBox hardware-backed Keystore.

riskData_hasTelephonyRadio

Boolean

1

Indicates whether the device has a telephony radio with data communication support

riskData_hasTouchScreen

Boolean

1

Indicates whether the device has a touchscreen.

riskData_hasTrackball

Boolean

1

Indicates whether the device has a trackball.

riskData_isActivitiesOnSecondDisplaysSupported

Boolean

1

Indicates whether the device supports running activities on secondary displays.

riskData_isAppWidgetsSupported

Boolean

1

Indicates whether the device supports app widgets.

riskData_isApplicationTampered

Boolean

1

Indicates whether the mobile application has been tampered with.

riskData_isBackupRestoreSupported

Boolean

1

Indicates whether the device can perform backup and restore operations on installed applications.

riskData_isBluetoothLowEnergySupported

Boolean

1

Indicates whether the device is capable of communicating with other devices using Bluetooth Low Energy radio.

riskData_isBluetoothSupported

Boolean

1

Indicates whether the device is capable of communicating with other devices using Bluetooth.

riskData_isCameraARSupported

Boolean

1

Indicates whether the camera supports motion tracking.

riskData_isCameraAutoFocusSupported

Boolean

1

Indicates whether the camera on the device supports auto-focus.

riskData_isCameraFlashSupported

Boolean

1

Indicates whether the camera supports a flash.

riskData_isCameraFullHardwareSupported

Boolean

1

Indicates whether the camera supports full hardware. Full hardware devices support per-frame manual control of sensor, flash, lens and post-processing settings, and image capture at a high rate.

riskData_isCameraManualPostProcessingSupported

Boolean

1

Indicates whether the camera on the device supports manual post-processing.

riskData_isCameraManualSensorSupported

Boolean

1

Indicates whether the camera supports manual control of duration, exposure, sensitivity, and so on.

riskData_isCameraRAWSupported

Boolean

1

Indicates whether the camera supports RAW file formats. Devices that support the RAW capability allow both for saving DNG files and for processing of raw sensor images.

riskData_isCameraSupported

Boolean

1

Indicates whether the device has a camera.

riskData_isCantSaveStateAPISupported

Boolean

1

Indicates whether the device supports the Cant Save State API.

riskData_isCompanionDeviceSetupSupported

Boolean

1

Indicates whether the device supports associating with devices using CompanionDeviceManager.

riskData_isConnectionServiceAPIEnabled

Boolean

1

Indicates whether the Connection Service API is enabled on the device.

riskData_isCredentialsAutofillSupported

Boolean

1

Indicates whether the device supports autofill of user credentials, addresses, credit cards, and so on, through integration with autofill providers.

riskData_isDebuggerAttached

Boolean

1

Indicates whether the mobile application has a debugger attached.

riskData_isDeviceAdminSupported

Boolean

1

Indicates whether the device supports device policy enforcement using device admins.

riskData_isDeviceRooted

Boolean

1

Indicates whether the device is rooted (Android) or jailbroken (iOS).

riskData_isDeviceSecure

Boolean

1

Indicates whether the device is protected by the device security lock, such as PIN, Password, Fingerprint, Face ID, and so on.

riskData_isDistinctFaketouchSupported

Boolean

1

Indicates whether the device supports touch emulation for basic events that supports distinct tracking of two or more fingers. The device does not have a touchscreen.

riskData_isDistinctMultitouchSupported

Boolean

1

Indicates whether the touchscreen of the device is capable of tracking two or more fingers fully independently.

riskData_isESEBasedNFCCardEmulationSupported

Boolean

1

Indicates whether the device supports eSE- based NFC card emulation.

riskData_isEUICCSubscriptionsSupported

Boolean

1

Indicates whether the device supports embedded subscriptions on Embedded Universal Integrated Circuit Cards (eUICCs).

riskData_isEmbeddedDevice

Boolean

1

Indicates whether the device is embedded.

riskData_isEthernetSupported

Boolean

1

Indicates whether the device supports ethernet.

riskData_isExternalCameraSupported

Boolean

1

Indicates whether the device supports an external camera, which may or may not be available to use.

riskData_isFaketouchSupported

Boolean

1

Indicates whether the device supports touch emulation for basic events. The device does not have a touchscreen.

riskData_isFreeformWindowMgmtSupported

Boolean

1

Indicates whether the device supports freeform window management, that is, windows have title bars and can be moved and resized.

riskData_isHeartRateSensorAnECG

Boolean

1

Indicates whether the heart rate sensor on the device is an Electrocardiogram.

riskData_isHiFiProcessingSupported

Boolean

1

Indicates whether the device supports high-fidelity, sensor-processing capabilities.

riskData_isHighPerformanceVRModeSupported

Boolean

1

Indicates whether the device implements an optimized mode for virtual reality (VR) applications.

riskData_isHomeScreenSupported

Boolean

1

Indicates whether the device supports a home screen that is replaceable by third-party applications.

riskData_isHostBasedNFCCardEmulationSupported

Boolean

1

Indicates whether the device supports host- based NFC card emulation.

riskData_isHostBasedNFCFCardEmulationSupported

Boolean

1

Indicates whether the device supports host- based NFC-F card emulation.

riskData_isIMSTelephonySupported

Boolean

1

Indicates whether the device supports attaching to IMS implementations using the ImsService API in telephony.

riskData_isIPSecTunnelsSupported

Boolean

1

Indicates whether the device has the required kernel support for multinetworking-capable IPsec tunnels.

riskData_isInfraRedSupported

Boolean

1

Indicates whether the device has an infrared sensor.

riskData_isJazzhandFaketouchSupported

Boolean

1

Indicates whether the device supports touch emulation for basic events that supports distinct tracking a hand of fingers (5 or more fingers) independently. The device does not have a touchscreen.

riskData_isJazzhandMultitouchSupported

Boolean

1

Indicates whether the touch screen of the device is capable of tracking a full hand of fingers fully independently, that is, 5 or more simultaneous independent pointers.

riskData_isLandscapeOrientationSupported

Boolean

1

Indicates whether the device supports landscape orientation screens. 

riskData_isLeanbackUISupported

Boolean

1

Indicates whether the device supports leanback UI, typically used in a living-room TV experience.

riskData_isLiveTVSupported

Boolean

1

Indicates whether the device supports live TV and can display contents from TV inputs implemented with the TV Input Service API.

riskData_isLiveWallpapersSupported

Boolean

1

Indicates whether the device supports live wallpapers.

riskData_isLocationSupported

Boolean

1

Indicates whether the device supports one or more methods of reporting current location.

riskData_isLowLatencyAudio

Boolean

1

Indicates whether the device has Low Audio Latency.

riskData_isLowRamDevice

Boolean

1

Indicates whether the device is a low-RAM device.

riskData_isMBMSReceptionSupported

Boolean

1

Indicates whether the device supports cell-broadcast reception using the Multimedia Broadcast Multicast Services (MBMS) APIs.

riskData_isMIDISupported

Boolean

1

Indicates whether the device has a full implementation of the Android Media MIDI APIs.

riskData_isManagedProfilesSupported

Boolean

1

Indicates whether the device supports creating secondary users and managed profiles using the Device Policy Manager.

riskData_isMultitouchSupported

Boolean

1

Indicates whether the touchscreen of the device supports multitouch support.

riskData_isNFCBeamAPIEnabled

Boolean

1

Indicates whether the Beam API is enabled on the device.

riskData_isNFCSupported

Boolean

1

Indicates whether the device can communicate using Near-Field Communications (NFC).

riskData_isNetworkBasedLocationSupported

Boolean

1

Indicates whether the device can report location with coarse accuracy using a network-based geolocation system.

riskData_isNewInputMethodsSupported

Boolean

1

Indicates whether the device supports adding new input methods implemented with the InputMethodService API.

riskData_isNotLowRamDevice

Boolean

1

Indicates whether the device is not a low-RAM device.

riskData_isOnlyLeanbackUISupported

Boolean

1

Indicates whether the device supports only leanback UI.

riskData_isOpenGLESExtensionPackSupported

Boolean

1

Indicates whether the device supports the OpenGL ES Android Extension Pack.

riskData_isOverlayDetected

Boolean

1

Indicates whether an overlay is detected on the mobile application.

riskData_isPCDevice

Boolean

1

Indicates whether the device is dedicated to be used primarily with keyboard, mouse or touchpad. This includes traditional desktop computers, laptops and variants such as convertibles or detachables. 

riskData_isPictureInPictureSupported

Boolean

1

Indicates whether the device supports Picture-In-Picture

riskData_isPortraitOrientationSupported

Boolean

1

Indicates whether the device supports portrait orientation screens. 

riskData_isPrintingSupported

Boolean

1

Indicates whether the device supports printing.

riskData_isSIPBasedVOIPSupported

Boolean

1

Indicates whether the device supports SIP-based VOIP.

riskData_isSIPSupported

Boolean

1

Indicates whether the SIP API is enabled on the device.

riskData_isScreenOn

Boolean

1

Indicates whether the screen of the device is on.

riskData_isSecureKeyguardSupported

Boolean

1

Indicates whether the device has a secure implementation of keyguard, meaning the device supports PIN, pattern, password, and so on.

riskData_isUICCBasedNFCCardEmulationSupported

Boolean

1

Indicates whether the device supports uicc- based NFC card emulation.

riskData_isUSBAccessorySupported

Boolean

1

Indicates whether the device can connect to USB accessories.

riskData_isUSBHostSupported

Boolean

1

Indicates whether the device can connect to USB accessories as the USB host.

riskData_isUsersSecureRemovalSupported

Boolean

1

Indicates whether the device supports secure removal of users.

riskData_isVRHeadtrackingSupported

Boolean

1

Indicates whether the device implements headtracking suitable for a VR device.

riskData_isVehicleHeadunitDevice

Boolean

1

Indicates whether the device is dedicated to showing UI on a vehicle headunit. 

riskData_isVerifiedBootSupported

Boolean

1

Indicates whether the device supports verified boot.

riskData_isVulkanComputeSupported

Boolean

1

Indicates whether the device supports a level of optional compute features beyond the Vulkan 1.0 requirements.

riskData_isVulkanLevelSupported

Boolean

1

Indicates whether the device supports a level of optional hardware feature.

riskData_isVulkanVersionSupported

Boolean

1

Indicates whether the device supports a Vulkan API version.

riskData_isWatchDevice

Boolean

1

Indicates whether the device is dedicated to showing UI on a watch worn on the body, perhaps on the wrist.

riskData_isWebViewSupported

Boolean

1

Indicates whether the device has a full implementation of the android.webkit.* APIs. 

riskData_isWiFiAwareSupported

Boolean

1

Indicates whether the device supports Wi-Fi Aware.

riskData_isWiFiDirectSupported

Boolean

1

Indicates whether the device supports Wi-Fi Direct networking.

riskData_isWiFiPasspointSupported

Boolean

1

Indicates whether the device supports Wi-Fi Passpoint and all Passpoint related APIs in WifiManager.

riskData_isWiFiRTTSupported

Boolean

1

Indicates whether the device supports Wi-Fi RTT (IEEE 802.11mc).

riskData_isWiFiSupported

Boolean

1

Indicates whether the device supports WiFi (802.11) networking.

riskData_multitaskingEnabled

Boolean

1

Indicates whether multi-tasking is enabled on the device.

riskData_numberOfAllowedApps

Numeric

3

The number of applications installed on a device found on the external allowlist. Optional.

riskData_numberOfBlockedApps

Numeric

3

The number of applications installed on a device found on the external blocklist. Optional.

riskData_numberOfProcessors

Text

2

The number of processors in the device.

riskData_proximitySensorEnabled

Boolean

1

Indicates whether the proximity sensor is enabled.

riskData_screenHeight

Text

10

The screen height of the device.

riskData_screenWidth

Text

10

The screen width of the device.

riskData_stepCountingAvailable

Boolean

1

Indicates whether the device can count steps.

riskData_supportedABIsList

Text

0

JSON array contains the list of Android Application Binary Interface name.

riskData_uniqueId

Text

64

Hardware persistent device unique identifier.

sessionId

Text

40

Unique identifier number of the customer's online session associated with the transaction.

stepUpAuthenticator_authDeviceType

Text

50

Step-up authenticator device type. Valid values:

  • Soft = <need description>
  • OOB = <need description>

stepUpAuthenticator_authResult

Numeric

1

The step-up authentication result. Valid values:

  • 0 = Successful authentication
  • 1 = Failed authentication

stepUpAuthenticator_authStatus

Numeric

1

Soft token Push/QR authentication status. This value is applicable only if the value of stepUpAuthenticator_authDeviceType is Soft. Valid values:

  • 1 = Approved
  • 2 = Rejected

stepUpAuthenticator_isDeviceBioAuth

Boolean

1

Indicates whether the step-up authentication involved Device Biometric Authentication. Only applicable if the stepUpAuthenticator_authDeviceType is Soft, and it is online authentication.

stepUpAuthenticator_isFaceAuth

Boolean

1

Indicates whether the step-up authentication involved FAS Face Authentication. Only applicable if the stepUpAuthenticator_authDeviceType is Soft and it is online authentication.

stepUpAuthenticator_isPinAuth

Boolean

1

Indicates whether the step-up authentication involved PIN Authentication. Only applicable if the stepUpAuthenticator_authDeviceType is Soft and it is online authentication.

stepUpAuthenticator_isPushAuth

Boolean

1

Indicates whether the step-up authentication is done using Push authentication. Only applicable if the stepUpAuthenticator_authDeviceType is Soft.

stepUpAuthenticator_isQrAuth

Boolean

1

Indicates whether the step-up authentication involved QR code Authentication. Only applicable if the stepUpAuthenticator_authDeviceType is Soft.

stepUpAuthenticator_isVoiceAuth

Boolean

1

Indicates whether the step-up authentication involved FAS Voice Authentication. Only applicable if the stepUpAuthenticator_authDeviceType is Soft and it is online authentication.

traceId

Text

100

The API trace identifier. This field is designed for the purpose of FAS to provide a "Trace ID” to the targeted external application to find the matching log entries for each API call. It may be useful if we need to debug or audit at the external application.

triggerAction_action

Text

20

Indicates the action result based on the configured rule in Falcon Expert. The supported actions are as follows:

  • STEP_UP = Specifies a step up action to be taken. Enables the Sub Action selection control when this value is selected.
  • ALLOW = Allows the evaluation process to pass without taking any preventative step
  • DENY = To specify a denial to further access to an integrating system.

userId

Text

100

A unique identifier for the user in the FAS Security/Customer Domain. The combination of userId and groupId values uniquely identifies a user record in the system.

workflow

Text

16

Contains the name of the workflow to be executed by Falcon Fraud Manager.
Authentication 2.0 Field Descriptions
  • www.fico.com