Additional response in the assuranceLevel field of the getUserInfo method of the VALID Service

A new security level has been added to the REST method response getUserInfo () of the VALID service, in the assuranceLevel field of the JSON response, will now also return the value low (additional to values substantial i high, which were already being returned now).

The countryside insuranceLevel indicates the security level of authentication performed in accordance with ReIdAS.

Until now the values ​​they could take were:

  • substantial: if user authentication was done using any method other than a qualified card certificate.
  • high: if user authentication was done from a qualified card certificate.

At this point, we add the possibility that the value low is obtained in the answer, and then the 3 types of answer are framed as follows:

  • low: if user authentication is done with a idCAT Mobile phone accredited electronically (this is the case in which the registration of theidCAT Mobile has been made by the user based on the DNI, mobile phone and Health Card number).
  • substantial: if user authentication is done with a idCAT Mobile accredited with certificate or in person, idCAT Mobile Connect, Cl@ve or qualified certificate in software.
  • high: if user authentication is based on a qualified card certificate.

The change is already available in the Pre-Production environment, and its rise to Production is planned on Wednesday, December 12 in the afternoon.

Published in