Authentication 2.0
Field Name | Type | Size | Field Format/Description |
---|---|---|---|
behaviorScore_isUbaTraining |
Boolean |
1 |
Indicates the UBA stage of the user:
|
behaviorScore_rbaScore |
Numeric |
4 |
The risk-based authentication score. |
behaviorScore_ubaScore |
Numeric |
4 |
The value of the user keystroke behavior score. This value is applicable only if isUbaTraining is set to false. |
behaviorScore_ubaThreshold |
Numeric |
4 |
The value of the user keystroke behavior threshold. This value is applicable only if isUbaTraining is set to false. |
clientIdFromHeader |
Text |
16 |
Unique identifier for the client or subclient. The value of this field is determined jointly by the client and FICO. |
customerIdFromHeader |
Text |
20 |
Reserved for internal Falcon Fraud Manager use. |
dataSpecificationVersion |
Text |
5 |
2 |
eventType |
Text |
20 |
Identifies the event type. Valid values are as follows:
|
externalTransactionId |
Text |
32 |
Client-generated unique transaction ID that is unique across all data feeds for a specific installation of Falcon Fraud Manager. |
geolocation_clientCity |
Text |
100 |
User client city. |
geolocation_clientCountry |
Text |
100 |
User client country. |
geolocation_clientIpAddress |
Text |
50 |
User client public IP Address. |
gmtOffset |
Numeric |
6 |
Specifies the Greenwich Mean Time (GMT) offset associated with all date-time fields in the record body (positions 161 onward). Format is (-)nn.nn, where the digits to the right of the decimal point represent decimal fractions of an hour. For example, a GMT offset of 5 hours and 45 minutes (Nepal) is expressed as 5.75. Note that changes during Daylight Saving Time if Daylight Saving Time is observed in the date-time fields in the record body. |
groupId |
Text |
30 |
A unique identifier for a group in the FAS Security/Customer Domain. The combination of userId and groupId values uniquely identifies a user record in the system. |
recordCreationDate |
Date |
8 |
Format: yyyymmdd Date that this record was created. Time zone must be GMT. |
recordCreationMilliseconds |
Numeric |
3 |
Format: sss Milliseconds portion of the time that this record was created. |
recordCreationTime |
Date |
6 |
Format: hhmmss Time that this record was created. Time zone must be GMT. |
recordType |
Text |
8 |
AUTHN20 |
riskData_OSApiLevel |
Text |
10 |
Indicates the API level of the OS. |
riskData_appBuildNumber |
Text |
10 |
Identifies the application build number. |
riskData_appBuildVersion |
Text |
10 |
Identifies the application build version. |
riskData_appIdentifier |
Text |
100 |
Identifies the application. |
riskData_browserLanguage |
Text |
8 |
The default language setting for the browser. |
riskData_browserName |
Text |
20 |
The browser name from where the application is being accessed. |
riskData_browserTimezone |
Text |
64 |
The timezone of the browser used to access the application. |
riskData_browserTimezoneOffset |
Numeric |
5 |
The time difference between UTC time and local time, in minutes. If time-zone is GMT+2, the value will be -120. |
riskData_browserUserAgent |
Text |
255 |
The device browser agent. |
riskData_browserVersion |
Text |
20 |
The browser version from where the application is being accessed. |
riskData_carrierAllowsVOIP |
Boolean |
1 |
Indicates whether the carrier allows VOIP. |
riskData_carrierISOCountryCode |
Text |
5 |
The ISO Country Code of the carrier. |
riskData_carrierMobileCountryCode |
Text |
10 |
The mobile Country Code of the carrier. |
riskData_connectedToCellNetwork |
Boolean |
1 |
Indicates whether the device is connected to a cellular network. |
riskData_connectedToWiFi |
Boolean |
1 |
Indicates whether the device is connected to a Wi-Fi network. |
riskData_currency |
Text |
5 |
The currency used by the device. |
riskData_deviceAppList |
Text |
0 |
JSON array contains the list of the installed application names on the device. |
riskData_deviceBattery |
Text |
10 |
The battery level for the device. |
riskData_deviceBoardName |
Text |
50 |
The board name of the device. |
riskData_deviceHardware |
Text |
50 |
The device hardware. |
riskData_deviceId |
Text |
64 |
Logical non hardware persistent device unique identifier. |
riskData_deviceLatitude |
Text |
16 |
The GPS latitude coordinate. |
riskData_deviceLocationEnabled |
Boolean |
1 |
Indicates whether device Location service is enabled. |
riskData_deviceLocationPermissionGranted |
Boolean |
1 |
Indicates whether user granted the Location permission to the integrated mobile app. |
riskData_deviceLongitude |
Text |
16 |
The current longitude of the device in degrees. |
riskData_deviceMemory |
Text |
16 |
The memory in the device. |
riskData_deviceModel |
Text |
20 |
The device model. |
riskData_deviceNetworkCarrier |
Text |
64 |
The device network carrier. |
riskData_deviceOsName |
Text |
20 |
The OS for the device. |
riskData_deviceOsVersion |
Text |
20 |
The version of the OS for the device. |
riskData_deviceStorage |
Text |
16 |
The storage size of the device. |
riskData_deviceVendor |
Text |
20 |
The vendor of the device. |
riskData_deviceWifiProxy |
Text |
50 |
The WiFi connection proxy. |
riskData_deviceWifiSecurity |
Text |
16 |
The security type for the Wifi connection, such as WEP or WPA. |
riskData_deviceWifiSsid |
Text |
32 |
The SSID for the WiFi network that the device is connected to. |
riskData_distanceAvailable |
Boolean |
1 |
Indicates whether the device can estimate distance travelled. |
riskData_floorCountingAvailable |
Boolean |
1 |
Indicates whether the device can count floors. |
riskData_hasAccelerometerSensor |
Boolean |
1 |
Indicates whether the device has an accelerometer. |
riskData_hasAmbientTemperatureSensor |
Boolean |
1 |
Indicates whether the device includes an ambient temperature sensor. |
riskData_hasAudioOutput |
Boolean |
1 |
Indicates whether the device has audio output capability. |
riskData_hasBarometerSensor |
Boolean |
1 |
Indicates whether the device has a barometer. |
riskData_hasCDMATelephony |
Boolean |
1 |
Indicates whether the device has a CDMA telephony stack. |
riskData_hasCompassSensor |
Boolean |
1 |
Indicates whether the device has a compass. |
riskData_hasFaceScanner |
Boolean |
1 |
Indicates whether the device has biometric hardware to perform face authentication. |
riskData_hasFingerprintScanner |
Boolean |
1 |
Indicates whether the device has biometric hardware to detect a fingerprint. |
riskData_hasFrontCamera |
Boolean |
1 |
Indicates whether the device has a front camera. |
riskData_hasGPS |
Boolean |
1 |
Indicates whether the device has a Global Positioning System (GPS) and can report a precise location. |
riskData_hasGSMTelephony |
Boolean |
1 |
Indicates whether the device has a GSM telephony stack. |
riskData_hasGamepad |
Boolean |
1 |
Indicates whether the device has a gamepad or compatible game controller. |
riskData_hasGyroscopeSensor |
Boolean |
1 |
Indicates whether the device has a gyroscope. |
riskData_hasHeartRateMonitor |
Boolean |
1 |
Indicates whether the device has a heart rate monitor. |
riskData_hasIrisScanner |
Boolean |
1 |
Indicates whether the device has biometric hardware to perform iris authentication. |
riskData_hasLightSensor |
Boolean |
1 |
Indicates whether the device has a light sensor. |
riskData_hasMicrophone |
Boolean |
1 |
Indicates whether the device has a microphone. |
riskData_hasPhysicalKeyboard |
Boolean |
1 |
Indicates whether the device has a physical keyboard. |
riskData_hasProAudioCapability |
Boolean |
1 |
Indicates whether the device has Pro Audio capability. |
riskData_hasProximitySensor |
Boolean |
1 |
Indicates whether the device has a proximity sensor. |
riskData_hasRearCamera |
Boolean |
1 |
Indicates whether the device has a rear camera. |
riskData_hasRelativeHumiditySensor |
Boolean |
1 |
Indicates whether the device has a relative humidity sensor. |
riskData_hasStepCounterSensor |
Boolean |
1 |
Indicates whether the device has a step counter. |
riskData_hasStepDetectorSensor |
Boolean |
1 |
Indicates whether the device has a step detector. |
riskData_hasStrongBoxKeystore |
Boolean |
1 |
Indicates whether the device has a StrongBox hardware-backed Keystore. |
riskData_hasTelephonyRadio |
Boolean |
1 |
Indicates whether the device has a telephony radio with data communication support |
riskData_hasTouchScreen |
Boolean |
1 |
Indicates whether the device has a touchscreen. |
riskData_hasTrackball |
Boolean |
1 |
Indicates whether the device has a trackball. |
riskData_isActivitiesOnSecondDisplaysSupported |
Boolean |
1 |
Indicates whether the device supports running activities on secondary displays. |
riskData_isAppWidgetsSupported |
Boolean |
1 |
Indicates whether the device supports app widgets. |
riskData_isApplicationTampered |
Boolean |
1 |
Indicates whether the mobile application has been tampered with. |
riskData_isBackupRestoreSupported |
Boolean |
1 |
Indicates whether the device can perform backup and restore operations on installed applications. |
riskData_isBluetoothLowEnergySupported |
Boolean |
1 |
Indicates whether the device is capable of communicating with other devices using Bluetooth Low Energy radio. |
riskData_isBluetoothSupported |
Boolean |
1 |
Indicates whether the device is capable of communicating with other devices using Bluetooth. |
riskData_isCameraARSupported |
Boolean |
1 |
Indicates whether the camera supports motion tracking. |
riskData_isCameraAutoFocusSupported |
Boolean |
1 |
Indicates whether the camera on the device supports auto-focus. |
riskData_isCameraFlashSupported |
Boolean |
1 |
Indicates whether the camera supports a flash. |
riskData_isCameraFullHardwareSupported |
Boolean |
1 |
Indicates whether the camera supports full hardware. Full hardware devices support per-frame manual control of sensor, flash, lens and post-processing settings, and image capture at a high rate. |
riskData_isCameraManualPostProcessingSupported |
Boolean |
1 |
Indicates whether the camera on the device supports manual post-processing. |
riskData_isCameraManualSensorSupported |
Boolean |
1 |
Indicates whether the camera supports manual control of duration, exposure, sensitivity, and so on. |
riskData_isCameraRAWSupported |
Boolean |
1 |
Indicates whether the camera supports RAW file formats. Devices that support the RAW capability allow both for saving DNG files and for processing of raw sensor images. |
riskData_isCameraSupported |
Boolean |
1 |
Indicates whether the device has a camera. |
riskData_isCantSaveStateAPISupported |
Boolean |
1 |
Indicates whether the device supports the Cant Save State API. |
riskData_isCompanionDeviceSetupSupported |
Boolean |
1 |
Indicates whether the device supports associating with devices using CompanionDeviceManager. |
riskData_isConnectionServiceAPIEnabled |
Boolean |
1 |
Indicates whether the Connection Service API is enabled on the device. |
riskData_isCredentialsAutofillSupported |
Boolean |
1 |
Indicates whether the device supports autofill of user credentials, addresses, credit cards, and so on, through integration with autofill providers. |
riskData_isDebuggerAttached |
Boolean |
1 |
Indicates whether the mobile application has a debugger attached. |
riskData_isDeviceAdminSupported |
Boolean |
1 |
Indicates whether the device supports device policy enforcement using device admins. |
riskData_isDeviceRooted |
Boolean |
1 |
Indicates whether the device is rooted (Android) or jailbroken (iOS). |
riskData_isDeviceSecure |
Boolean |
1 |
Indicates whether the device is protected by the device security lock, such as PIN, Password, Fingerprint, Face ID, and so on. |
riskData_isDistinctFaketouchSupported |
Boolean |
1 |
Indicates whether the device supports touch emulation for basic events that supports distinct tracking of two or more fingers. The device does not have a touchscreen. |
riskData_isDistinctMultitouchSupported |
Boolean |
1 |
Indicates whether the touchscreen of the device is capable of tracking two or more fingers fully independently. |
riskData_isESEBasedNFCCardEmulationSupported |
Boolean |
1 |
Indicates whether the device supports eSE- based NFC card emulation. |
riskData_isEUICCSubscriptionsSupported |
Boolean |
1 |
Indicates whether the device supports embedded subscriptions on Embedded Universal Integrated Circuit Cards (eUICCs). |
riskData_isEmbeddedDevice |
Boolean |
1 |
Indicates whether the device is embedded. |
riskData_isEthernetSupported |
Boolean |
1 |
Indicates whether the device supports ethernet. |
riskData_isExternalCameraSupported |
Boolean |
1 |
Indicates whether the device supports an external camera, which may or may not be available to use. |
riskData_isFaketouchSupported |
Boolean |
1 |
Indicates whether the device supports touch emulation for basic events. The device does not have a touchscreen. |
riskData_isFreeformWindowMgmtSupported |
Boolean |
1 |
Indicates whether the device supports freeform window management, that is, windows have title bars and can be moved and resized. |
riskData_isHeartRateSensorAnECG |
Boolean |
1 |
Indicates whether the heart rate sensor on the device is an Electrocardiogram. |
riskData_isHiFiProcessingSupported |
Boolean |
1 |
Indicates whether the device supports high-fidelity, sensor-processing capabilities. |
riskData_isHighPerformanceVRModeSupported |
Boolean |
1 |
Indicates whether the device implements an optimized mode for virtual reality (VR) applications. |
riskData_isHomeScreenSupported |
Boolean |
1 |
Indicates whether the device supports a home screen that is replaceable by third-party applications. |
riskData_isHostBasedNFCCardEmulationSupported |
Boolean |
1 |
Indicates whether the device supports host- based NFC card emulation. |
riskData_isHostBasedNFCFCardEmulationSupported |
Boolean |
1 |
Indicates whether the device supports host- based NFC-F card emulation. |
riskData_isIMSTelephonySupported |
Boolean |
1 |
Indicates whether the device supports attaching to IMS implementations using the ImsService API in telephony. |
riskData_isIPSecTunnelsSupported |
Boolean |
1 |
Indicates whether the device has the required kernel support for multinetworking-capable IPsec tunnels. |
riskData_isInfraRedSupported |
Boolean |
1 |
Indicates whether the device has an infrared sensor. |
riskData_isJazzhandFaketouchSupported |
Boolean |
1 |
Indicates whether the device supports touch emulation for basic events that supports distinct tracking a hand of fingers (5 or more fingers) independently. The device does not have a touchscreen. |
riskData_isJazzhandMultitouchSupported |
Boolean |
1 |
Indicates whether the touch screen of the device is capable of tracking a full hand of fingers fully independently, that is, 5 or more simultaneous independent pointers. |
riskData_isLandscapeOrientationSupported |
Boolean |
1 |
Indicates whether the device supports landscape orientation screens. |
riskData_isLeanbackUISupported |
Boolean |
1 |
Indicates whether the device supports leanback UI, typically used in a living-room TV experience. |
riskData_isLiveTVSupported |
Boolean |
1 |
Indicates whether the device supports live TV and can display contents from TV inputs implemented with the TV Input Service API. |
riskData_isLiveWallpapersSupported |
Boolean |
1 |
Indicates whether the device supports live wallpapers. |
riskData_isLocationSupported |
Boolean |
1 |
Indicates whether the device supports one or more methods of reporting current location. |
riskData_isLowLatencyAudio |
Boolean |
1 |
Indicates whether the device has Low Audio Latency. |
riskData_isLowRamDevice |
Boolean |
1 |
Indicates whether the device is a low-RAM device. |
riskData_isMBMSReceptionSupported |
Boolean |
1 |
Indicates whether the device supports cell-broadcast reception using the Multimedia Broadcast Multicast Services (MBMS) APIs. |
riskData_isMIDISupported |
Boolean |
1 |
Indicates whether the device has a full implementation of the Android Media MIDI APIs. |
riskData_isManagedProfilesSupported |
Boolean |
1 |
Indicates whether the device supports creating secondary users and managed profiles using the Device Policy Manager. |
riskData_isMultitouchSupported |
Boolean |
1 |
Indicates whether the touchscreen of the device supports multitouch support. |
riskData_isNFCBeamAPIEnabled |
Boolean |
1 |
Indicates whether the Beam API is enabled on the device. |
riskData_isNFCSupported |
Boolean |
1 |
Indicates whether the device can communicate using Near-Field Communications (NFC). |
riskData_isNetworkBasedLocationSupported |
Boolean |
1 |
Indicates whether the device can report location with coarse accuracy using a network-based geolocation system. |
riskData_isNewInputMethodsSupported |
Boolean |
1 |
Indicates whether the device supports adding new input methods implemented with the InputMethodService API. |
riskData_isNotLowRamDevice |
Boolean |
1 |
Indicates whether the device is not a low-RAM device. |
riskData_isOnlyLeanbackUISupported |
Boolean |
1 |
Indicates whether the device supports only leanback UI. |
riskData_isOpenGLESExtensionPackSupported |
Boolean |
1 |
Indicates whether the device supports the OpenGL ES Android Extension Pack. |
riskData_isOverlayDetected |
Boolean |
1 |
Indicates whether an overlay is detected on the mobile application. |
riskData_isPCDevice |
Boolean |
1 |
Indicates whether the device is dedicated to be used primarily with keyboard, mouse or touchpad. This includes traditional desktop computers, laptops and variants such as convertibles or detachables. |
riskData_isPictureInPictureSupported |
Boolean |
1 |
Indicates whether the device supports Picture-In-Picture |
riskData_isPortraitOrientationSupported |
Boolean |
1 |
Indicates whether the device supports portrait orientation screens. |
riskData_isPrintingSupported |
Boolean |
1 |
Indicates whether the device supports printing. |
riskData_isSIPBasedVOIPSupported |
Boolean |
1 |
Indicates whether the device supports SIP-based VOIP. |
riskData_isSIPSupported |
Boolean |
1 |
Indicates whether the SIP API is enabled on the device. |
riskData_isScreenOn |
Boolean |
1 |
Indicates whether the screen of the device is on. |
riskData_isSecureKeyguardSupported |
Boolean |
1 |
Indicates whether the device has a secure implementation of keyguard, meaning the device supports PIN, pattern, password, and so on. |
riskData_isUICCBasedNFCCardEmulationSupported |
Boolean |
1 |
Indicates whether the device supports uicc- based NFC card emulation. |
riskData_isUSBAccessorySupported |
Boolean |
1 |
Indicates whether the device can connect to USB accessories. |
riskData_isUSBHostSupported |
Boolean |
1 |
Indicates whether the device can connect to USB accessories as the USB host. |
riskData_isUsersSecureRemovalSupported |
Boolean |
1 |
Indicates whether the device supports secure removal of users. |
riskData_isVRHeadtrackingSupported |
Boolean |
1 |
Indicates whether the device implements headtracking suitable for a VR device. |
riskData_isVehicleHeadunitDevice |
Boolean |
1 |
Indicates whether the device is dedicated to showing UI on a vehicle headunit. |
riskData_isVerifiedBootSupported |
Boolean |
1 |
Indicates whether the device supports verified boot. |
riskData_isVulkanComputeSupported |
Boolean |
1 |
Indicates whether the device supports a level of optional compute features beyond the Vulkan 1.0 requirements. |
riskData_isVulkanLevelSupported |
Boolean |
1 |
Indicates whether the device supports a level of optional hardware feature. |
riskData_isVulkanVersionSupported |
Boolean |
1 |
Indicates whether the device supports a Vulkan API version. |
riskData_isWatchDevice |
Boolean |
1 |
Indicates whether the device is dedicated to showing UI on a watch worn on the body, perhaps on the wrist. |
riskData_isWebViewSupported |
Boolean |
1 |
Indicates whether the device has a full implementation of the android.webkit.* APIs. |
riskData_isWiFiAwareSupported |
Boolean |
1 |
Indicates whether the device supports Wi-Fi Aware. |
riskData_isWiFiDirectSupported |
Boolean |
1 |
Indicates whether the device supports Wi-Fi Direct networking. |
riskData_isWiFiPasspointSupported |
Boolean |
1 |
Indicates whether the device supports Wi-Fi Passpoint and all Passpoint related APIs in WifiManager. |
riskData_isWiFiRTTSupported |
Boolean |
1 |
Indicates whether the device supports Wi-Fi RTT (IEEE 802.11mc). |
riskData_isWiFiSupported |
Boolean |
1 |
Indicates whether the device supports WiFi (802.11) networking. |
riskData_multitaskingEnabled |
Boolean |
1 |
Indicates whether multi-tasking is enabled on the device. |
riskData_numberOfAllowedApps |
Numeric |
3 |
The number of applications installed on a device found on the external allowlist. Optional. |
riskData_numberOfBlockedApps |
Numeric |
3 |
The number of applications installed on a device found on the external blocklist. Optional. |
riskData_numberOfProcessors |
Text |
2 |
The number of processors in the device. |
riskData_proximitySensorEnabled |
Boolean |
1 |
Indicates whether the proximity sensor is enabled. |
riskData_screenHeight |
Text |
10 |
The screen height of the device. |
riskData_screenWidth |
Text |
10 |
The screen width of the device. |
riskData_stepCountingAvailable |
Boolean |
1 |
Indicates whether the device can count steps. |
riskData_supportedABIsList |
Text |
0 |
JSON array contains the list of Android Application Binary Interface name. |
riskData_uniqueId |
Text |
64 |
Hardware persistent device unique identifier. |
sessionId |
Text |
40 |
Unique identifier number of the customer's online session associated with the transaction. |
stepUpAuthenticator_authDeviceType |
Text |
50 |
Step-up authenticator device type. Valid values:
|
stepUpAuthenticator_authResult |
Numeric |
1 |
The step-up authentication result. Valid values:
|
stepUpAuthenticator_authStatus |
Numeric |
1 |
Soft token Push/QR authentication status. This value is applicable only if the value of stepUpAuthenticator_authDeviceType is Soft. Valid values:
|
stepUpAuthenticator_isDeviceBioAuth |
Boolean |
1 |
Indicates whether the step-up authentication involved Device Biometric Authentication. Only applicable if the stepUpAuthenticator_authDeviceType is Soft, and it is online authentication. |
stepUpAuthenticator_isFaceAuth |
Boolean |
1 |
Indicates whether the step-up authentication involved FAS Face Authentication. Only applicable if the stepUpAuthenticator_authDeviceType is Soft and it is online authentication. |
stepUpAuthenticator_isPinAuth |
Boolean |
1 |
Indicates whether the step-up authentication involved PIN Authentication. Only applicable if the stepUpAuthenticator_authDeviceType is Soft and it is online authentication. |
stepUpAuthenticator_isPushAuth |
Boolean |
1 |
Indicates whether the step-up authentication is done using Push authentication. Only applicable if the stepUpAuthenticator_authDeviceType is Soft. |
stepUpAuthenticator_isQrAuth |
Boolean |
1 |
Indicates whether the step-up authentication involved QR code Authentication. Only applicable if the stepUpAuthenticator_authDeviceType is Soft. |
stepUpAuthenticator_isVoiceAuth |
Boolean |
1 |
Indicates whether the step-up authentication involved FAS Voice Authentication. Only applicable if the stepUpAuthenticator_authDeviceType is Soft and it is online authentication. |
traceId |
Text |
100 |
The API trace identifier. This field is designed for the purpose of FAS to provide a "Trace ID” to the targeted external application to find the matching log entries for each API call. It may be useful if we need to debug or audit at the external application. |
triggerAction_action |
Text |
20 |
Indicates the action result based on the configured rule in Falcon Expert. The supported actions are as follows:
|
userId |
Text |
100 |
A unique identifier for the user in the FAS Security/Customer Domain. The combination of userId and groupId values uniquely identifies a user record in the system. |
workflow |
Text |
16 |
Contains the name of the workflow to be executed by Falcon Fraud Manager. |