27 Checking card suitability

You can configure MyID to call out to an external web service before collecting, updating, or activating a device, passing details of the device so that the external web service can determine whether the collection, update, or activation can proceed.

Using your own web service, you can carry out checks on the device and the cardholder to ensure that your organization's business processes have been followed before providing them with credentials for access.

For example, you may have a list of device serial numbers that should be retired; when the operator inserts the card, MyID passes the serial number to the web service, which is then checked against the list. If the device should be retired, the web service passes a response to MyID that the device is not suitable.

The process is as follows:

  1. Create a web service that processes the output from MyID and returns a response.

  2. Set up the details of this web service within MyID.

  3. Carry out one of the following operations:

    • Collect Card

    • Batch Collect Card

    • Collect Updates

    • Assisted Activation

    When you select the device to be used, MyID calls out to the external web service, and checks the response.

    If the web service approves the device, the operation proceeds as usual, with no indication to the operator.

    If the web service does not approve the device, the device is marked as unsuitable on screen, with a message passed from the external web service to inform the operator why the operation cannot proceed. The operator can then try a different device. The response from the web service is logged in the audit trail.

This chapter contains information on: