API

Android: check whether UAEPASS app is installed or not by using UAEPASS package id: ae.uaepass.mainapp.stg

iOS: check whether UAEPASS app is installed or not by using UAEPASS scheme: Production: uaepass:// , Staging: uaepassstg://

App installed scenario:

1. If the app is installed in the mobile, then invoke the Login url with acr values: acr_values=urn:digitalid:authentication:flow:mobileondevice

2. Invoke the login url in embedded webview

// httpsdfa:Fasdfadsf

UAE PASS

4. Monitor the webview for UAEPASS deep linking url as below:

uaepassstg://...? successURL=<url1> & failureURL=<url2> & ...                           

5. Save the success url and failure url in separate variables.

6. Re-write the deeplinking url by changing the success url and failure url with SP app scheme and host.

uaepassstg://...?successURL=yourapp:///resume_authn?url=<url1>&failureURL=yourapp:///resume_authn?url=<url2> & ...                                               

7. Invoke the above url in the same webView to open the UAEPASS app for authentication. Once the user confirms the authentication, SP will receive the callback from UAEPASS as successURL. if user cancels the authentication, SP will receive failureURL.

8. Once SP receives callback, SP should invoke the successURL which is stored previously within the same webView.

9. SP will then receive the access code.

10. Access token call (copy and paste the same from web integration).

11. Get user info: (copy and paste the same from web integration).

App not installed scenario:

1. if UAE Pass app is not found in the mobile, SP should use the Login url with acr:

values :acr_values=urn:safelayer:tws:policies:authentication:level:low

2. Invoke the login url in embedded webview

https://stg-id.uaepass.ae/idshub/authorize?response_type=code&client_id=sandbox_web_stage&scope=urn:uae:digitalid:profile:general&state=HnlHOJTkTb66Y5H&redirect_uri=https://stg-selfcare.uaepass.ae&acr_values=urn:safelayer:tws:policies:authentication:level:low

UAE PASS

3. User has to provide his UAE PASS identifier (email, mobile and emirates ID) and click on login.

4. User will receive push notification on other device which has UAE PASS app installed.

5. Once the user confirms the authentication, SP will receive the access code in webview.

6. Access token call (copy and paste the same from web integration).

7. Get user info (copy and paste the same from web integration).

For visitor integration: SP need to use the below scopes to their first authentication call to retrieve the unifiedID and profileType attribute of the user:

 scope=urn:uae:digitalid:profile:general urn:uae:digitalid:profile:general:profileType urn:uae:digitalid:profile:general:unifiedId