{"schemaVersion":"1","journeySelectorList":[{"id":"9174d5c6-19e5-450a-91bf-d3a23eee1329","name":"selector_default","description":"This is the default selector that will always trigger the default journey for user authentication session","rawContent":"package veridium.orchestrator.selector_default\r\n\r\nimport data.veridium.orchestrator.commons\r\n\r\nENGAGEMENT_is_mobile := {\r\n\t\t\"name\": \"ENGAGEMENT_is_mobile\",\r\n\t\t\"type\": \"USER_ENGAGE\",\r\n\t\t\"commands\": [commons.qrEngagement,commons.userinputEngagement]\r\n}\r\n\r\ntransition [ENGAGEMENT_is_mobile] {\r\n\t\tcommons.is_mobile == true\r\n}\r\n\r\nENGAGEMENT_is_desktop := {\r\n\t\t\"name\": \"ENGAGEMENT_is_desktop\",\r\n\t\t\"type\": \"USER_ENGAGE\",\r\n\t\t\"commands\": [commons.qrEngagement,commons.userinputEngagement]\r\n}\r\n\r\ntransition [ENGAGEMENT_is_desktop] {\r\n\t\tcommons.is_desktop == true\r\n}\r\n\r\njourney_default := {\r\n\t\t\"name\": \"journey_default\",\r\n\t\t\"type\": \"JOURNEY\",\r\n\t\t\"id\": \"d9544754-de7a-415e-b087-c33adf35b685\",\r\n\t\t\"priority\": 0.0\r\n}\r\n\r\nShared_Authentication := {\r\n\t\t\"name\": \"Shared_Authentication\",\r\n\t\t\"type\": \"JOURNEY\",\r\n\t\t\"id\": \"252c4301-0c57-4b44-91b3-832c50b297ba\",\r\n\t\t\"priority\": 1.0\r\n}\r\n\r\ntransition [journey_default] {\r\n\t\talways == true\r\n}\r\n\r\nalways {\r\n\t\tcommons.is_always == true\r\n}\r\n\r\ntransition [Shared_Authentication] {\r\n\t\ttransition2 == true\r\n}\r\n\r\ntransition2 {\r\n\t\tcommons.is_shared_account == true\r\n}\r\n\r\n","uiRepresentation":"{\"diagramNodeData\":[{\"key\":\"Start\",\"text\":\"Start\",\"category\":\"START\",\"loc\":\"-300.65625 -388\",\"customData\":{\"engagement\":[{\"targetLabel\":\"mobile\",\"target\":\"is_mobile\",\"qr\":true,\"userInput\":true,\"certificate\":false,\"passkey\":false},{\"targetLabel\":\"desktop\",\"target\":\"is_desktop\",\"qr\":true,\"userInput\":true,\"certificate\":false,\"passkey\":false}]},\"elementType\":\"NODE\"},{\"key\":\"Journey\",\"text\":\"journey_default\",\"category\":\"JOURNEY\",\"loc\":\"-91.65625 -61\",\"customData\":{\"journey\":\"d9544754-de7a-415e-b087-c33adf35b685\",\"priority\":0},\"elementType\":\"NODE\"},{\"key\":-3,\"text\":\"Shared_Authentication\",\"category\":\"JOURNEY\",\"loc\":\"-16.658070879752245 -237.125\",\"customData\":{\"journey\":\"252c4301-0c57-4b44-91b3-832c50b297ba\",\"priority\":1},\"elementType\":\"NODE\"}],\"diagramLinkData\":[{\"elementType\":\"LINK\",\"text\":\"always\",\"key\":-1,\"customData\":{\"name\":\"always\",\"conditions\":[[\"is_always\"]]},\"points\":null,\"from\":\"Start\",\"to\":\"Journey\",\"fromPort\":\"b\",\"toPort\":\"t\"},{\"from\":\"Start\",\"to\":-3,\"fromPort\":\"b\",\"toPort\":\"t\",\"key\":-2,\"points\":null,\"customData\":{\"name\":\"transition2\",\"conditions\":[[\"is_shared_account\"]]},\"elementType\":\"LINK\",\"text\":\"transition2\"}]}","status":"PUBLISHED","version":"6","registrationTime":"2021-08-12T12:17:48.282+00:00","lastUpdateTime":"2024-12-17T11:29:15.228+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"22f70205-746f-438e-85f9-a3f0a9f275d7","default":true}],"journeyRuleList":[{"id":"1ac10c6c-ddb4-48ff-ba30-062f1001e07d","name":"cmd_external_pin_browser","description":"External PIN in browser","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n  \"maxRetries\": 3,\n  \"methods\": [\n    {\n      \"type\": \"EXTERNAL_PIN\",\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2021-09-07T14:26:13.190+00:00","lastUpdateTime":"2021-10-25T07:02:12.226+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"9af6b2a4-58e6-479d-a4ba-169990d0a98d"},{"id":"8724921f-bd87-48b9-a31c-69cf3985072f","name":"is_phone_in_the_country_of_residence","description":"Checks if the phone location matches the country registered in user repository","rawContent":"input.session.authenticatorDeviceContext.location.countryCode == input.identity.externalValues.co","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T14:18:11.745+00:00","lastUpdateTime":"2021-08-11T14:19:06.308+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"709d51a9-e229-463a-a13a-96661ef4a8aa","name":"is_windows_authn_logon_rdp","description":"Check if cp scenario is logon RDP","rawContent":"input.session.externalValues[\"credentialProviderUsageScenario\"] == \"CPUS_LOGON_RDP\"","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2024-07-25T08:04:12.000+00:00","lastUpdateTime":"2024-07-25T08:04:12.000+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"4d9ab4b8-3b1b-4b51-9149-13574f4b75d7","name":"cmd_qr_offline","description":"Command for Offline QR dispatch option","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n    \"methods\": [],\n    \"dispatch\": {\n        \"method\": \"QR_OFFLINE\"\n    }\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2023-11-22T11:05:06.348+00:00","lastUpdateTime":"2023-11-22T11:05:06.348+00:00","createdBy":"da9021dd-6191-44fd-b11f-4b003ed908ce","lastUpdatedBy":"da9021dd-6191-44fd-b11f-4b003ed908ce"},{"id":"38c2e494-4c2d-4847-8cb8-360c5c7435d6","name":"cmd_uba_motion","description":"uba motion analysis","rawContent":"\"type\": \"UBA_MOTION\",\n\"executor\": \"VERIDIUM_SERVER\",\n\"collectors\":[ \"MOTION\" ]","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2022-03-08T12:00:28.991+00:00","lastUpdateTime":"2022-03-08T12:00:28.991+00:00","createdBy":"aad40845-0fa4-4159-9db6-d32865f6e7f9","lastUpdatedBy":"aad40845-0fa4-4159-9db6-d32865f6e7f9"},{"id":"15c59157-7b5c-445b-8a86-6dadad5ee794","name":"cmd_totp_desktop","description":"TOTP for Veridium Authenticator Desktop Application initiated sessions","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n  \"methods\": [\n    {\n      \"type\": \"TOTP_DESKTOP\",\n      \"retries\": 0\n    }\n  ]\n}\n","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2022-01-24T12:06:25.832+00:00","lastUpdateTime":"2022-01-24T12:06:54.158+00:00","createdBy":"091f05c8-8fc2-40dc-8c16-e0f68e6fed1a","lastUpdatedBy":"091f05c8-8fc2-40dc-8c16-e0f68e6fed1a"},{"id":"8a57d51c-fa0e-4f94-943d-231ae92c584e","name":"pin_not_authenticated_recently","description":"pin was not authenticated recently","rawContent":"not pin_authenticated_recently","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"CONDITION","registrationTime":"2023-03-15T20:02:51.071+00:00","lastUpdateTime":"2023-03-15T20:44:14.817+00:00","createdBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E","lastUpdatedBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E"},{"id":"e6314f25-8093-4280-ab97-4219185b2535","name":"is_authentication_successful","description":"True if the previous challenge passed","rawContent":"input.authenticated == true","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"CONDITION","registrationTime":"2021-08-11T12:36:48.781+00:00","lastUpdateTime":"2021-08-12T08:00:21.592+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"c58cde3c-a837-4c08-926c-547a446b158e","name":"cmd_vface_browser","description":"VFace for browser initiated sessions","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n  \"maxRetries\": 1,\n  \"methods\": [\n    {\n      \"type\": \"DESKTOP_FACE\",\n      \"configuration\": {\n          \"enableLiveness\": true,\n          \"requiredBiometricSession\": false,\n          \"livenessFactor\": 50\n      }\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2021-08-11T14:28:32.350+00:00","lastUpdateTime":"2021-10-25T07:06:12.239+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"9af6b2a4-58e6-479d-a4ba-169990d0a98d"},{"id":"8ce207bf-4bc9-4e83-85ae-0f7474d1821c","name":"cmd_otp_only","description":"Otp only","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n    \"maxRetries\": 3,\n  \"methods\": [\n    {\n      \"type\": \"OTP\",\n      \"configuration\": {\n          \"usePin\": false\n      }\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2023-11-22T11:05:06.348+00:00","lastUpdateTime":"2023-11-22T11:05:06.348+00:00","createdBy":"da9021dd-6191-44fd-b11f-4b003ed908ce","lastUpdatedBy":"da9021dd-6191-44fd-b11f-4b003ed908ce"},{"id":"68215034-35e3-4892-aa2e-fd6aa5334031","name":"is_mobile","description":"Checks if the user agent is mobile","rawContent":"userAgent := input.session.exploiterDeviceContext.userAgentRaw\nregex.match(\"(?i)iPhone|iPad|iPod|Android\", userAgent)\n","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T12:55:06.434+00:00","lastUpdateTime":"2021-09-30T06:45:24.763+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"f920652e-35bd-4e62-aa44-b14f3c647a41","name":"cmd_sms_browser","description":"SMS  for browser initiated sessions","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n  \"maxRetries\": 3,\n  \"methods\": [\n    {\n      \"type\": \"SMS\",\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2021-08-11T14:38:41.805+00:00","lastUpdateTime":"2021-10-25T07:05:27.393+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"9af6b2a4-58e6-479d-a4ba-169990d0a98d"},{"id":"aa8d9dac-372c-4917-940b-32ca5df58c73","name":"gtureac","description":"test george","rawContent":"input.identity.upn == \"gtureac@dev.local\"","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2024-12-17T11:10:27.441+00:00","lastUpdateTime":"2024-12-17T11:10:27.441+00:00","createdBy":"5381b280-c4a4-4475-a015-c19c721e8f2c","lastUpdatedBy":"5381b280-c4a4-4475-a015-c19c721e8f2c"},{"id":"dec59870-de53-4cbe-a693-4c3ad67c6189","name":"cmd_delegate_authentication","description":"Command for DELEGATE dispatch option","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n    \"methods\": [],\n    \"dispatch\": {\n        \"method\": \"DELEGATE\"\n    }\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2024-05-31T21:00:00.000+00:00","lastUpdateTime":"2024-05-31T21:00:00.000+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"0989e121-cffb-4fca-81d7-1e2b7dbef611","name":"cmd_uba_context","description":"uba context analysis","rawContent":"\"type\": \"UBA_CONTEXT\",\n\"executor\": \"VERIDIUM_SERVER\"","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2022-03-08T12:01:02.765+00:00","lastUpdateTime":"2022-03-08T12:01:02.765+00:00","createdBy":"aad40845-0fa4-4159-9db6-d32865f6e7f9","lastUpdatedBy":"aad40845-0fa4-4159-9db6-d32865f6e7f9"},{"id":"94e1ef9b-7a81-4314-aedd-fae68c8e18ac","name":"cmd_certificate","description":"Certificate authentication","rawContent":" \"type\": \"AUTHENTICATION\",\n  \"executor\": \"FRIEND\",\n  \"authenticate\": {\n    \"methods\": [\n      {\n        \"type\": \"CERTIFICATE\"\n      }\n    ]\n  }","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2024-03-27T12:19:57.000+00:00","lastUpdateTime":"2024-03-27T12:19:57.000+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"fb91696e-28c6-4ceb-9068-93749a895840","name":"is_windows_authn_shell_extension","description":"Checks if cp usage scenario is credui","rawContent":"input.session.externalValues[\"credentialProviderUsageScenario\"] == \"CPUS_CREDUI\"","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2024-02-09T09:39:02.516+00:00","lastUpdateTime":"2024-02-09T09:39:02.516+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"de8114f4-bc13-421d-bca9-d6f14c94976f","name":"is_uba_motion_passed","description":"Asserts that the UBA Motion score is within threshold limits (ignores inference timeout)","rawContent":"not is_uba_motion_failed","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"CONDITION","registrationTime":"2022-05-25T14:43:02.518+00:00","lastUpdateTime":"2022-05-25T14:43:02.518+00:00","createdBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E","lastUpdatedBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E"},{"id":"5c9b3de9-facf-4390-ae01-7b076c5a8acf","name":"is_specific_ip","description":"True for a specific IP address","rawContent":"input.session.exploiterDeviceContext.ip == \"10.0.0.1\"","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T14:10:05.358+00:00","lastUpdateTime":"2021-08-11T14:10:05.358+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"7bc9b61b-26ea-4469-9031-bbb1f4e3d497","name":"cmd_sms_only","description":"SMS verification","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n    \"maxRetries\": 3,\n  \"methods\": [\n    {\n      \"type\": \"SMS\",\n      \"configuration\": {\n          \"usePin\": false\n      }\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2023-11-22T11:05:06.348+00:00","lastUpdateTime":"2023-11-22T11:05:06.348+00:00","createdBy":"da9021dd-6191-44fd-b11f-4b003ed908ce","lastUpdatedBy":"da9021dd-6191-44fd-b11f-4b003ed908ce"},{"id":"24d65851-ef14-45da-b70a-cfdf08cac9ac","name":"is_shared_account","description":"check if it's a shared account","rawContent":"allowed_groups := {\"SharedAccounts\"}\r\nidentityGroups = {identityGroup | identityGroup := input.identity.groups[_]}\r\ncount(identityGroups & allowed_groups) > 0","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2024-12-17T10:26:46.895+00:00","lastUpdateTime":"2024-12-17T10:26:46.895+00:00","createdBy":"22f70205-746f-438e-85f9-a3f0a9f275d7","lastUpdatedBy":"22f70205-746f-438e-85f9-a3f0a9f275d7"},{"id":"d850844f-c5ca-4182-a948-885d42e5cf30","name":"is_windows_authn_logon","description":"Checks if cp usage scenario is logon","rawContent":"input.session.externalValues[\"credentialProviderUsageScenario\"] == \"CPUS_LOGON\"","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2024-02-09T09:39:02.516+00:00","lastUpdateTime":"2024-02-09T09:39:02.516+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"16766dbb-6534-4959-ac33-11eccf9d0b84","name":"cmd_push_with_userpresence_code","description":"Push authentication command with required user presence code","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n    \"methods\": [],\n    \"dispatch\": {\n        \"method\": \"PUSH\",\n        \"userPresence\": \"CODE\"\n    }\n}\n","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2021-08-11T14:26:30.398+00:00","lastUpdateTime":"2021-10-25T07:06:38.026+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"9af6b2a4-58e6-479d-a4ba-169990d0a98d"},{"id":"82ae70e8-3db8-4b10-b1fe-3d5b34e3cdd1","name":"is_specific_application","description":"True for a specific application","rawContent":"input.session.exploiterDeviceContext.serviceIdentifier == \"ApplicationName\"","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T14:10:57.357+00:00","lastUpdateTime":"2021-08-11T14:10:57.357+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"b7d71681-1f37-4ace-ad39-d3a5da0f517e","name":"cmd_totp_browser","description":"TOTP  for browser initiated sessions","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n  \"maxRetries\": 3,\n  \"methods\": [\n    {\n      \"type\": \"TOTP\",\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2021-08-11T14:39:27.279+00:00","lastUpdateTime":"2021-10-25T07:05:09.338+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"9af6b2a4-58e6-479d-a4ba-169990d0a98d"},{"id":"36d4a8c8-0c47-4d05-8b02-29431e992c16","name":"is_local_network","description":"Checks if the user is in the local network infrastructure","rawContent":"input.session.exploiterDeviceContext.location.countryCode == \"Local Network\"","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T13:54:46.844+00:00","lastUpdateTime":"2021-08-11T13:54:46.844+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"ff18ad9f-5233-4383-a6b2-eaacc22e03c4","name":"is_uba_context_failed","description":"Asserts that the UBA context score is outside threshold limits (ignores inference timeout)","rawContent":"is_uba_result_missing := input.ubaContext == null\nnot is_uba_result_missing\ninput.ubaContext.score > 5","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"CONDITION","registrationTime":"2022-05-25T14:40:28.342+00:00","lastUpdateTime":"2022-05-26T07:27:05.934+00:00","createdBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E","lastUpdatedBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E"},{"id":"643abdd0-0d79-4acf-8109-1354d7bd744f","name":"cmd_native_biometrics_mobile","description":"Native biometrics on mobile (TouchID/FaceID)","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"PHONE\",\n\"authenticate\": {\n   \"methods\": [\n    {\n      \"type\": \"TOUCHID\",\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2021-08-11T14:26:30.398+00:00","lastUpdateTime":"2021-10-25T07:06:38.026+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"9af6b2a4-58e6-479d-a4ba-169990d0a98d"},{"id":"39e2140a-dc80-44ca-9a78-064e58562411","name":"cmd_pin_browser","description":"PIN in browser","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n  \"maxRetries\": 3,\n  \"methods\": [\n    {\n      \"type\": \"PIN\",\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2021-08-11T14:32:50.973+00:00","lastUpdateTime":"2021-10-25T07:05:36.572+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"9af6b2a4-58e6-479d-a4ba-169990d0a98d"},{"id":"8c57f79e-7f0b-47d9-a9c6-ea11bdfa1011","name":"is_phone_not_in_the_country_of_residence","description":"Checks if the phone location doesn't match the country registered in user repository","rawContent":"not is_phone_in_the_country_of_residence","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T14:19:37.574+00:00","lastUpdateTime":"2021-08-11T14:19:37.574+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"7f181541-e94f-40b5-96ef-d7b5e0870909","name":"is_authentication_failed","description":"True if the previous challenge failed","rawContent":"input.authenticated == false","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"CONDITION","registrationTime":"2021-08-11T12:41:20.034+00:00","lastUpdateTime":"2021-08-12T10:26:58.082+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"0e03310b-87bb-4fff-a0f3-82415e5a6b3c","name":"is_windows_authn_unlock_rdp","description":"Checks if cp usage scenario is unlock RDP","rawContent":"input.session.externalValues[\"credentialProviderUsageScenario\"] == \"CPUS_UNLOCK_WORKSTATION_RDP\"","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2024-07-25T08:04:12.000+00:00","lastUpdateTime":"2024-07-25T08:04:12.000+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"c18b704b-d132-4328-b920-33ebbdf1cb77","name":"is_not_in_the_country_of_residence","description":"Checks if the session was triggered from a different country than the one registered in user repository","rawContent":"not is_in_the_country_of_residence","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T14:01:54.319+00:00","lastUpdateTime":"2021-08-11T14:01:54.319+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"744cade8-48bd-429a-88d2-5ca7def3497f","name":"cmd_lost_mode_browser","description":"Lost Mode for browser initiated sessions","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n  \"maxRetries\": 3,\n  \"methods\": [\n    {\n      \"type\": \"LOST_MODE\",\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2021-08-11T14:50:39.032+00:00","lastUpdateTime":"2021-10-25T07:03:54.222+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"9af6b2a4-58e6-479d-a4ba-169990d0a98d"},{"id":"9da36af2-f71e-4b70-bfd9-26160a581793","name":"is_specific_user","description":"True for a specific user principal name","rawContent":"input.identity.upn == \"user@domain.local\"","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T14:09:14.549+00:00","lastUpdateTime":"2021-08-11T14:09:14.549+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"c4ae2376-a899-4e9d-aa3d-700c8410851d","name":"cmd_4f_mobile","description":"4F (Four Fingers) on mobile","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"PHONE\",\n\"authenticate\": {\n  \"methods\": [\n    {\n      \"type\": \"4F\",\n      \"configuration\": {\n          \"enableLiveness\": true\n      }\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2021-08-11T14:30:07.113+00:00","lastUpdateTime":"2021-10-25T07:05:59.792+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"9af6b2a4-58e6-479d-a4ba-169990d0a98d"},{"id":"f7664626-0aff-475a-975c-97c92c7156e3","name":"is_in_the_country_of_residence","description":"Checks if the session was triggered from the same country as the one registered in user repository","rawContent":"input.identity.externalValues.co == input.serviceContext.location.countryCode","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T14:00:41.405+00:00","lastUpdateTime":"2021-08-11T14:00:41.405+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"5cc1a6c3-007e-46ad-939d-d6f325e22de0","name":"is_from_specific_country","description":"True for a specific country code found in user repository","rawContent":"input.identity.externalValues.co == \"US\"","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T14:12:15.201+00:00","lastUpdateTime":"2021-08-11T14:13:28.111+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"9036143e-8637-4c45-8d33-224920bde652","name":"cmd_4F_CP","description":"4F biometry used in CP","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"DESKTOP\",\n\"authenticate\": {\n  \"maxRetries\": 1,\n  \"methods\": [\n    {\n      \"type\": \"4F\",\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2022-08-31T13:45:10.258+00:00","lastUpdateTime":"2022-08-31T13:50:41.186+00:00","createdBy":"541996a2-a373-49cb-8f8c-ad7fd6e562a4","lastUpdatedBy":"541996a2-a373-49cb-8f8c-ad7fd6e562a4"},{"id":"0dc4592e-0900-4208-ba8b-d963177868f8","name":"cmd_desktop_fingerprint","description":"Desktop Fingerprint","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n  \"maxRetries\": 1,\n  \"methods\": [\n    {\n      \"type\": \"FINGERPRINT\"\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2022-08-31T13:45:10.258+00:00","lastUpdateTime":"2022-08-31T13:50:41.186+00:00","createdBy":"541996a2-a373-49cb-8f8c-ad7fd6e562a4","lastUpdatedBy":"541996a2-a373-49cb-8f8c-ad7fd6e562a4"},{"id":"a5f39350-2db1-48de-a9a3-b7dcb5066d13","name":"cmd_fido_browser","description":"FIDO for browser initiated sessions","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n  \"methods\": [\n    {\n      \"type\": \"FIDO\",\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2021-08-11T14:51:21.550+00:00","lastUpdateTime":"2021-10-25T07:03:35.975+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"9af6b2a4-58e6-479d-a4ba-169990d0a98d"},{"id":"cdff38b7-2749-41bd-b03f-7d103d990e47","name":"cmd_pin_mobile","description":"PIN on mobile","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"PHONE\",\n\"authenticate\": {\n  \"maxRetries\": 3,\n  \"methods\": [\n    {\n      \"type\": \"PIN\",\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2021-08-11T14:31:12.232+00:00","lastUpdateTime":"2021-10-25T07:05:48.382+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"9af6b2a4-58e6-479d-a4ba-169990d0a98d"},{"id":"0886b200-0989-41b0-a0dc-f33321237fb8","name":"is_never","description":"Always false","rawContent":"false","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T12:34:39.385+00:00","lastUpdateTime":"2021-08-11T12:34:39.385+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"419f6d3f-81fe-4de8-a257-382b89ab005e","name":"cmd_yubico_otp","description":"Yubico OTP authentication for browser initiated sessions","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n  \"maxRetries\": 3,\n  \"methods\": [\n    {\n      \"type\": \"YUBICO_OTP\",\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2022-11-23T15:58:46.619+00:00","lastUpdateTime":"2022-11-23T15:58:46.619+00:00","createdBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E","lastUpdatedBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E"},{"id":"9d4b62ac-3a8b-4b57-98ea-379ca40dbbd7","name":"cmd_push","description":"Push authentication command","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n    \"methods\": [],\n    \"dispatch\": {\n        \"method\": \"PUSH\",\n        \"userPresence\": \"NONE\"\n    }\n}\n","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2022-04-27T11:33:44.458+00:00","lastUpdateTime":"2022-04-27T11:34:05.724+00:00","createdBy":"1c41f31b-806a-4930-876f-c254170120d9","lastUpdatedBy":"1c41f31b-806a-4930-876f-c254170120d9"},{"id":"e2751336-518b-4322-b9a9-73562a825eea","name":"is_uba_motion_failed","description":"Asserts that the UBA Motion score is outside threshold limits (ignores inference timeout)","rawContent":"is_uba_result_missing := input.uba == null\nnot is_uba_result_missing\ninput.uba.score < 0.5\n","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"CONDITION","registrationTime":"2022-05-25T14:42:15.459+00:00","lastUpdateTime":"2022-05-26T07:27:01.055+00:00","createdBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E","lastUpdatedBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E"},{"id":"d27a9e90-94d3-43cb-b0aa-d7fe566e6e66","name":"cmd_otp","description":"OTP command","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n  \"maxRetries\": 3,\n  \"methods\": [\n    {\n      \"type\": \"OTP\",\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2022-12-19T10:35:47.120+00:00","lastUpdateTime":"2022-12-19T10:35:47.120+00:00","createdBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E","lastUpdatedBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E"},{"id":"5ab8334b-d246-4a73-bda8-0c26baff3e01","name":"is_always","description":"Always true","rawContent":"true","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T12:34:09.186+00:00","lastUpdateTime":"2021-08-11T12:34:55.325+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"ae1c16a7-a48d-43eb-95bb-6cdb94fc7a6c","name":"is_external_network","description":"Checks if the user is in the external network","rawContent":"not is_local_network","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T13:55:57.642+00:00","lastUpdateTime":"2021-08-11T13:55:57.642+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"1cbe5d09-9f3e-4c64-9d60-b4f0e056e248","name":"checks_geo_not_trusted","description":"Checks if the exploiter location is NOT trusted: the coordinates are outside some specific global coordinates","rawContent":"not checks_geo_trusted","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-09-02T17:25:25.267+00:00","lastUpdateTime":"2021-09-30T06:45:18.105+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"2a7e9f2f-c308-43da-8e00-95527b8497ee","name":"pin_authenticated_recently","description":"pin was recently authenticated","rawContent":"\t# change this value to reflect the how often should the user be authenticated\n    authentication_timespan_minutes =  60\n    \n\tcount(input.finishedSessions) > 0\n    \n    completed_sessions_with_pin = [ s | s := input.finishedSessions[_] ; \n    \t\t\t\t\t\t\t\ts.status == \"COMPLETED\" ; \n                                    count([ m | m := s.biometricMethods[_] ; m.type == \"PIN\" ; m.status == true ]) > 0\n                                  ]\n    cp_sessions = [ s | s:= completed_sessions_with_pin[_] ; input.session.exploiterDeviceContext.userAgentName == \"VeridiumCP\" ; input.session.exploiterDeviceId == s.exploiterDeviceId]\n    web_session = [ s | s:= completed_sessions_with_pin[_] ; input.session.exploiterDeviceContext.userAgentTrustId != null ; s.exploiterDeviceContext.userAgentTrustId == input.session.exploiterDeviceContext.userAgentTrustId]\n    \n    same_exploiter_completed_sessions = array.concat(cp_sessions, web_session)\n    \n    count(same_exploiter_completed_sessions) > 0\n    \n    completeTimes = [ mapped |\n        original := same_exploiter_completed_sessions[_]\n        mapped := original[\"completeTime\"]\n    ]\n\n\tmost_recent = max(completeTimes)\n    \n\t(most_recent + authentication_timespan_minutes * 60 * 1000) * 1000000 > time.now_ns()","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"CONDITION","registrationTime":"2023-03-15T19:56:21.752+00:00","lastUpdateTime":"2023-03-22T16:04:01.112+00:00","createdBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E","lastUpdatedBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E"},{"id":"c6802c1d-631c-4235-8028-a8d221881990","name":"is_uba_context_passed","description":"Asserts that the UBA context score is within threshold limits (ignores inference timeout)","rawContent":"not is_uba_context_failed","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"CONDITION","registrationTime":"2022-05-25T14:43:23.055+00:00","lastUpdateTime":"2022-05-25T14:43:23.055+00:00","createdBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E","lastUpdatedBy":"47EAEF85-9D37-4366-AF8F-2F4777A6AD4E"},{"id":"04bb5684-c886-4131-9ffb-a0f623931a71","name":"cmd_certificate_mobile","description":"Certificate based authentication using security keys","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"PHONE\",\n\"authenticate\": {\n  \"methods\": [\n    {\n      \"type\": \"CERTIFICATE\",\n      \"configuration\": { \"isSecurityKeyRequired\": true }\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2024-05-31T21:00:00.000+00:00","lastUpdateTime":"2024-05-31T21:00:00.000+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"254248f2-8651-493a-9dcb-f4f2364bfc80","name":"cmd_QR","description":"Command for QR dispatch option","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n    \"methods\": [],\n    \"dispatch\": {\n        \"method\": \"QR\",\n        \"qrImage\": \"\"\n    }\n}\n","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2023-11-16T12:27:40.220+00:00","lastUpdateTime":"2023-11-16T12:27:40.220+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"bf2ad356-013b-44aa-8338-428bc0c146e8","name":"cmd_lost_mode_only","description":"Lost mode only","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"FRIEND\",\n\"authenticate\": {\n    \"maxRetries\": 3,\n  \"methods\": [\n    {\n      \"type\": \"LOST_MODE\",\n      \"configuration\": {\n          \"usePin\": false\n      }\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2023-11-22T11:05:06.348+00:00","lastUpdateTime":"2023-11-22T11:05:06.348+00:00","createdBy":"da9021dd-6191-44fd-b11f-4b003ed908ce","lastUpdatedBy":"da9021dd-6191-44fd-b11f-4b003ed908ce"},{"id":"42e27752-5c8e-400b-9052-17e67370188e","name":"cmd_vface_mobile","description":"VFace on mobile","rawContent":"\"type\": \"AUTHENTICATION\",\n\"executor\": \"PHONE\",\n\"authenticate\": {\n  \"maxRetries\": 1,\n  \"methods\": [\n    {\n      \"type\": \"VFACE\",\n      \"configuration\": {\n          \"enableLiveness\": true,\n          \"livenessFactor\": 50\n      }\n    }\n  ]\n}","applicableTo":["AUTHENTICATION_JOURNEY"],"type":"COMMAND","registrationTime":"2021-08-11T14:27:26.135+00:00","lastUpdateTime":"2021-10-25T07:06:25.720+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"9af6b2a4-58e6-479d-a4ba-169990d0a98d"},{"id":"e8ca6ebc-0f8c-4852-8cb2-4598cb22a278","name":"is_windows_authn_unlock","description":"Check if cp scenario is unlock workstation","rawContent":"input.session.externalValues[\"credentialProviderUsageScenario\"] == \"CPUS_UNLOCK_WORKSTATION\"","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2024-02-09T09:39:02.516+00:00","lastUpdateTime":"2024-02-09T09:39:02.516+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"1d3c3cb4-745f-488f-b43d-b8248234fbea","name":"checks_geo_trusted","description":"Checks if the exploiter location is between some specific global coordinates","rawContent":"input.session.exploiterDeviceContext.location.coordinates.latitude > 44.3\ninput.session.exploiterDeviceContext.location.coordinates.latitude < 44.5\ninput.session.exploiterDeviceContext.location.coordinates.longitude > 26.1\ninput.session.exploiterDeviceContext.location.coordinates.longitude < 26.2","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-09-02T17:23:51.829+00:00","lastUpdateTime":"2021-09-30T06:44:45.693+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"},{"id":"b1a1c442-9c3f-465f-bf1c-56961f50186b","name":"is_desktop","description":"Checks if the user agent is desktop (browser or Veridium Windows CP)","rawContent":"not is_mobile","applicableTo":["AUTHENTICATION_JOURNEY","AUTHENTICATION_SELECTOR"],"type":"CONDITION","registrationTime":"2021-08-11T13:48:19.858+00:00","lastUpdateTime":"2021-09-30T06:45:27.550+00:00","createdBy":"365d674d-5156-469b-b982-46fe904ade1a","lastUpdatedBy":"365d674d-5156-469b-b982-46fe904ade1a"}],"error":{"errorCode":0,"errorDescription":""}}