IBM Safer Payments

Showing 136

Separate timeouts for OTP and User Sessions

In our last Pen Test, we identified a concern with the current configuration of security timeouts. Specifically, the system is using the same timeout value for both the user session and the login OTP validity. We believe these should be separate s...

4 months ago in IBM Safer Payments / Technical 0 Submitted

2 VOTE

SSO Enhancement Request for IBM Safer Payments

Summary: Enhancement Request for IBM SaferPayments: PCI Need: FIS need IBM SaferPayments to support federated authentication/authorization such as oAuth2.0/OpenID Connect (OIDC)/SAML Details: IBM SaferPayments SSO supports only a basic HTTP header...

9 months ago in IBM Safer Payments / Technical 0 Future consideration

1 VOTE

Import configuration from client machine to the SAFER UI

Currently IBM SAFER allows users to download configurations from the environment to once laptop through IBM SAFER UI. How about allowing us to load configuration from our laptops to the UI. I would like to take configuration from one environment t...

5 months ago in IBM Safer Payments / Technical 0 Submitted

1 VOTE

Adding Okta support for MFA

We want safer payments to allow for okta integration for MFA and as an Authenication method

5 months ago in IBM Safer Payments / Operational 0 Submitted

9 VOTE

Using case attributes as quereies

The client has a requirement to see exactly case related transactions under the case when we use a calendar profile. For example; (1month calendar - txns amount > 1000 and sent to Turkey).. We can put a query with the same conditions and I can ...

over 3 years ago in IBM Safer Payments / Business 0 Future consideration

1 VOTE

Text Risk List Entries Having Option for Case Sensitive/Ignore Cases

We have clients who import attributes that are stored as text (Merchant Name) into their risk lists and the file they are importing comes through as all capital letters due to how their internal database stores the data. In order to account for th...

5 months ago in IBM Safer Payments / Operational 0 Submitted

2 VOTE

Allow for all Action Usage at Merge

It would be beneficial is we could update more than just inputs at the time of Merge. Having the ability to reference all possible actions would provide more flexibility and allow for quicker usage of data. There are payloads that along with updat...

10 months ago in IBM Safer Payments / Business 0 Submitted

2 VOTE

Better support for modern occ communication (i.e. case actions) patterns (REST/OAuth)

Topic of this request are the "case actions" (occ communication) from Safer Payments to any external systems to send/receive data from a cases. Mainly it focuses on the lack of abilities for the “HTTP method” message type that lacks any modern fea...

10 months ago in IBM Safer Payments / Technical 0 Submitted

2 VOTE

Improper Input Validation

During Cyber Security assessment, identified that the application doesn’t validate the input from the client side. An adversary can utilize the vulnerability to exploit vulnerabilities like XSS, SQLI, or injection vulnerabilities. It is recommende...

10 months ago in IBM Safer Payments / Technical 0 Submitted

5 VOTE

In Case Management, allow visibility of fired rules for only the mandator level they fired in.

Currently, in a Case all rules that fired will be shown in that case, even if another case class was raised by the same or other rules firing at the same time. Therefore, if there are sensitive rules from 1 department firing, these would be visibl...

about 2 years ago in IBM Safer Payments / Business 1 Not under consideration

Please enter your email address

FILTER BY CATEGORY