Customer authentication

You can require customers to authenticate their identity before they start a session. Lightico provides a number of customer authentication methods you can choose from. 

Activate customer authentication

To activate customer authentication:

1. In the Lightico Administration screen navigation pane, click System Settings > Customer authentication.
   The Customer authentication settings appear.
   

   

2. Turn on the Activate customer authentication switch.
   

   

3. Under First entry to session, select one of the following customer authentication methods:

   • KBA - Knowledge Base Authentication is validated based on answers to specific questions. (Requires a third party integration, contact support for more information.)

   • OTP - A One Time PIN is randomly generated. See below.

   • Photo ID + Selfie - A selfie photo is compared to a valid government issued ID picture. (Requires Mitek  integration.)

   • Photo ID -  Validates the government issued ID, but not the customer. (Requires Mitek  integration.)

   • Session PIN - A PIN is defined by the agent before starting the call. See below.

4. If you want customers to authenticate on subsequent entries to the session, turn on the Subsequent entries to session switch.
   

   

5.  Select an authentication method.

6. Under Require authentication after the customer has been offline for, set the amount of time that the customer is offline to require a new authentication.

To configure additional authentication settings, see the sections below.

Configure customer lockout settings

The following settings define how you handle failed authentication attempts. The same settings are found in the One Time Password (OTP)  and Session PIN configuration sections of the Customer authentication settings.

One Time Password (OTP) authentication

This authentication method automatically generates a One Time Password (OTP) for the session. When the agent invites the customer to the session, the agent sees the password in the Agent console, and tells the customer the password over the phone.

If invited to a session via the API, the customer receives an SMS or email notification with the authentication password. The notification is sent on a different channel from the invitation. For example, if the customer was invited by email, the password is sent via SMS and vice versa.
The instructions below explain settings that are unique to OTP authentication, to configure the lockout settings, see Configure customer lockout settings above.

Configure the following settings for OTP authentication:

Session access PIN authentication

This authentication method requires the agent to define an access PIN before starting the session with the customer. The PIN is a string of between 4 and 20 letters, numbers, and/or special characters (for example, ID/Social Security number, last digits of payment method, or spouse's name). The customizable opening screen for this type of authentication provides a hint to what number the customer should enter. The customer must enter the PIN to authenticate his identity and start the session. 

The instructions below explain how to customize the opening screen. To configure the lockout settings, see Configure customer lockout settings above.

For an explanation of the agent/customer experience for session access PIN, see Manage sessions.

To customize the opening screen for session access PIN authentication:

1. Go to the Workflow > HTML Designer page and create a static HTML page for the opening page (see Create static documents).

   

2.  Go to System settings > Customer authentication, Session PIN configuration section.

3. Turn on the Session PIN opening screen switch.

4. Search for the HTML document in the Doc Name field and click Set HTML file.

   

   
   After clicking Save Changes at the top of the settings page, the opening screen is created.