Authentication

Workflow:

1. User to access online service website and to start the login by using iAM Smart process
2. Online service to redirect user to a webpage that is hosted in iAM Smart System
3. User to use iAM Smart Mobile App to scan the QR code on the webpage
4. iAM Smart System to redirect user to online service with “Authorisation Code” included
5. Online service to pass the “Authorisation Code” to iAM Smart System
6. iAM Smart System to return the “Access token” which includes user’s tokenised account identifier* and online service to use tokenised account identifier to perform user matching at local user database

* Tokenised account identifier is a unique identifier of iAM Smart user assigned by iAM Smart System for a particular online service.  Different online service will be assigned with different values of tokenised account identifier for the same iAM Smart user.