Register a mobile SCA device

To enable out-of-band (OOB) authentication for your users, you must register their mobile device as an SCA device. The registration associates your user's device with their business account.

You can register devices for SCA using Adyen's Authentication SDK. To do so:

1. Check SCA eligibility.
2. Initiate the device registration from your server.
3. Register the device.
4. Finalize the registration from your server.

The following sections explain how to perform all the steps to register a user's mobile device for SCA.

Before you begin

• Ensure that the operating system on your user's device supports SCA.
• Ensure that you have installed the Authentication SDK.
• Ensure that your API credential has the following role:
  • Bank SCA Webservice Role

Check SCA eligibility

You will use the sdkOutput when initiating the registration. We suggest that you store sdkOutput for further usage, in case you need to start the registration process again.

Initiate device registration

Registering the device is a one-off procedure. You can only register one device per payment instrument. If you register a new device for a business account that already has a registered device, the previous device will be deregistered.

To start the device registration, make a POST /registeredDevices request from your server.

In the request, specify the following:

Request parameter	Description
paymentInstrumentId	The unique identifier of the business account you want to register the device for.
strongCustomerAuthentication.sdkOutput	Base64-encoded blob of data created in the previous step.

The response returns:

• sdkInput: pass the value to the SDK when registering the device.
• id: the device ID needed when finalizing the registration. This ID begins either with BSDR or RD.

We suggest that you create and store a mapping between the registered device id and the human-readable account holder name. For example, BSDR00000000000000000000001 is "Cardholder's iPhone". You can use this pair later to show the details, for example, when deregistering the device.

Authenticate cardholder

In your client app, perform authentication. PSD2 requires you to perform two-factor authentication (2FA) as an extra security step during the login process.

Register the device

To register the device with the Authentication SDK:

1. Authenticate the user by performing two-factor authentication (2FA).

2. Trigger the SDK to start the device registration and pass sdkInput from step 2.

   Kotlin Swift

   Kotlin Swift

   After the successful registration, the SDK generates a Base64-encoded sdkOutput data blob.

   Trigger the SDK to start the device registration and pass sdkInput.

   The SDK uses the Apple DeviceCheck framework to generate a Base64-encoded sdkOutput data blob. To do this, the SDK authenticates the user using Touch ID, Face ID, or the device passcode. To enable Face ID support, add NSFaceIDUsageDescription to Info.plist.

3. Pass sdkOutput to your server.

Finalize registration

To finalize the device registration:

1. Make a PATCH /registeredDevices/{id} request from your server. Specify the following parameters:

   Parameter	Parameter type	Description
   id	Path	The unique identifier of the SCA device. You obtain this id after you initiate the device registration.
   paymentInstrumentId	Body	The unique identifier of the business account you want to register the device for.
   strongCustomerAuthentication.sdkOutput	Body	Base64-encoded blob of data created in the previous step.

2. Verify that the response contains success true.

The registration is now complete. The user can start authenticating themselves for future operations using your app.