Difference between revisions of "DirectTrust Activation"

From Updox API
Jump to: navigation, search
(Testing)
(Description)
 
(12 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 +
== AKA "Vetting" Process ==
 +
 
== Description ==
 
== Description ==
In order for a practice/site to become part of the DirectTrust trust bundle, at least one user per practice/site must successfully go through vetting process as defined by DirectTrust.org.  This involves three steps:  1) a computerized telephone call that provides an validation code to be entered into a webpage, 2) validation of supplied demographic information, and 3) validation of supplied credit card information.
+
A key security component of Direct messaging exchange is to verify a sender is “who they say they are”. Updox performs this function by verifying the personal identity of your customers. As an Updox partner, your organization chose the type of Direct certificates to use in your integration(domain bound or address bound).
 +
 
 +
Domain bound certificates are assigned to the practice as a whole; Updox will verify the personal identity of an authorized representative of the practice. That representative, in turn, is responsible for verifying the identity of employees of the practice who are issued a Direct address.
 +
 
 +
Address bound certificates are assigned to each Direct messaging user at the practice; Updox will verify the personal identity of each of these users.
 +
 
 +
During your integration you will determine the work flow for directing your customers to the Updox DirectTrust Activation process.
 +
 
 +
Updox uses credit bureaus to accomplish these verifications. These are soft inquiries and do not affect a person’s credit report. Updox does not see the credit report details and does not store personal financial information.
  
 
== Testing ==
 
== Testing ==
In order to support testing and development, we have enabled access to two QA-only features. The first feature is a set of test data that will allow you to step through the DirectTrust activation process and obtain realistic results. The second feature is an API call that will allow you to directly toggle the Vetted value for any of your practices/accounts. By combining these two features, you should be able to test your workflow end-to-end in a production-similar manner.
+
In order to support testing and development, we have enabled access to two QA-only features. The first feature is a set of test data that will allow you to step through the DirectTrust activation process and obtain realistic results. The second feature is an API call that will allow you to directly toggle the setting that indicates if the vetting was successful for your practices/accounts. By combining these two features, you should be able to test your workflow end-to-end in a production-similar manner.
  
  
[[DirectTrust Activation Walkthrough]]
+
== Additional Information ==
 +
 
 +
[http://updoxdirect.com/doc/Web%20Help/topics/idh-topic2220.htm DirectTrust Activation Overview]
  
 
[[DirectTrust Activation Test Cases]]
 
[[DirectTrust Activation Test Cases]]
Line 13: Line 25:
  
 
[[API_Method_PracticeVettedToggle|Samples and examples using the PracticeVettedToggle API method]]
 
[[API_Method_PracticeVettedToggle|Samples and examples using the PracticeVettedToggle API method]]
 +
 +
[http://updoxdirect.com/doc/Web%20Help/topics/idh-topic2120.htm DirectTrust Activation Agreement –Domain Bound Certificates]
 +
 +
[http://updoxdirect.com/doc/Web%20Help/topics/idh-topic2180.htm DirectTrust Domain Bound Certificate Activation Information]
 +
 +
[http://updoxdirect.com/doc/Web%20Help/topics/idh-topic2190.htm DirectTrust Activation Agreement –AddressBound Certificates]
 +
 +
[http://updoxdirect.com/doc/Web%20Help/topics/idh-topic2160.htm DirectTrust Address Bound Certificate Activation Information]

Latest revision as of 14:15, 5 February 2018

Contents

AKA "Vetting" Process

Description

A key security component of Direct messaging exchange is to verify a sender is “who they say they are”. Updox performs this function by verifying the personal identity of your customers. As an Updox partner, your organization chose the type of Direct certificates to use in your integration(domain bound or address bound).

Domain bound certificates are assigned to the practice as a whole; Updox will verify the personal identity of an authorized representative of the practice. That representative, in turn, is responsible for verifying the identity of employees of the practice who are issued a Direct address.

Address bound certificates are assigned to each Direct messaging user at the practice; Updox will verify the personal identity of each of these users.

During your integration you will determine the work flow for directing your customers to the Updox DirectTrust Activation process.

Updox uses credit bureaus to accomplish these verifications. These are soft inquiries and do not affect a person’s credit report. Updox does not see the credit report details and does not store personal financial information.

Testing

In order to support testing and development, we have enabled access to two QA-only features. The first feature is a set of test data that will allow you to step through the DirectTrust activation process and obtain realistic results. The second feature is an API call that will allow you to directly toggle the setting that indicates if the vetting was successful for your practices/accounts. By combining these two features, you should be able to test your workflow end-to-end in a production-similar manner.


Additional Information

DirectTrust Activation Overview

DirectTrust Activation Test Cases

API page for the PracticeVettedToggle API method

Samples and examples using the PracticeVettedToggle API method

DirectTrust Activation Agreement –Domain Bound Certificates

DirectTrust Domain Bound Certificate Activation Information

DirectTrust Activation Agreement –AddressBound Certificates

DirectTrust Address Bound Certificate Activation Information