Rabobank Identity Services - SMS OTP

SMS OTP API is an offering of Rabo Identity Services that allows businesses to verify a mobile phone number of their users by sending a One-Time Password (OTP).

SMS OTP Flow

A user wants to access the merchant's website, which requires identification or authentication.
The user enters the mobile phone number in the web application and receives a validation code (OTP) through SMS.
The user enters in the validation code (OTP) in the web application.
The merchant receives the verified mobile phone number in the response from Rabobank.

The SMS OTP API can be consumed as a standalone service. However, it is generally applied as an additional layer on top of another method, such as MFA.

Features

Theme Configuration - custom logo and colours

Custom OTP-codes, 4 - No limit

Sender name change for validation code

Working with Rabobank

To ensure a smooth start with the SMS OTP API, your business should meet the following conditions:

High degree of automation.
Professional IT environment and good infrastructure.
Permanently available security expertise to use SMS OTP API and safeguarding its security.

Connecting with SMS OTP

To connect with SMS OTP you need the following:

An EV SSL certificate for transport.
An EV SSL signing certificate for signing messages.
An active Rabobank business account.

Rabobank accepts:

EV SSL certificates from the certificate issuers listed in the Mozilla CA Certificate report.
X.509 format
RSA: key length should be at least 2048-bit
Certificate should be valid for a maximum of one year.

Implementing

Rabobank actively assists customers throughout the implementation process.

A dedicated Rabobank Implementation manager is assigned to you during the implementation of the SMS OTP API.

Rabobank offers you a Sandbox account for your end-to-end testing to ensure everything runs smoothly for production.