Consumer Service Portal Authentication

This task describes the verification flow for the Service Portal registration.

Procedure

Register an application with the InsuranceNow Okta tenant.
```
grant type: client_credentials
```
Configure the jwt-client-settings.xml

Note: A guest user, webportal with Service Portal and Policy Underwriter roles must exist in InsuranceNow.
```
<JWTClient
    CustomerId="serviceportal"
    ClientId="{OKTA_CLIENT_ID}"
    ClientSecret="{OKTA_CLIENT_SECRET}"
    IN_UserName="webportal"
/>
```

Configure okta-http-clientsettings.xml

<OKTAHttpClient
        ClientId="{OKTA_CLIENT_ID}"
        Grant_Type="client_credentials"
        Scope="application"
        AuthServerUri="{OKTA_ISSUER_URL}/v1/token"
        Content-Type="application/x-www-form-urlencoded"
        JWKUrl="{OKTA_ISSUER_URL}/v1/keys"
        Issuer="{OKTA_ISSUER_URL}"
/>

Configure the Service Portal v4 registration fields in registration-criteria.xml

Note: PolicyNumber is required, while all others are optional. Policy number and at least two additional options are required for registration verification.

<options key='serviceportal'>
            <option value='PolicyNumber' label='Policy Number'/>
            <option value='DateOfBirth' label='Date of Birth'/>
            <option value='Zip' label='Zip' />
<!--            <option value='PolicyEffectiveDt' label='Policy Start Date'/>-->
<!--            <option value='PolicyExpirationDt' label='Policy End Date'/>-->
<!--            <option value='PhoneNumber' label='Phone Number'/>-->
<!--            <option value='Email' label='E-mail'/>-->
<!--            <option value='CustomerNumber' label='Customer Number'/>-->
</options>

Add a user group using the following naming convention: insurer.env.project.role, e.g.


            iic.qa.serviceportal.users

and generate an Okta API token

<OKTAHttpClient
        UserGroupId="{OKTA_USER_GROUP_ID}"
        APIToken="{OKTA_API_TOKEN}"
        OrgUrl="https://insurancenow.oktapreview.com"
/>

In okta-http-clientsettings.xml, configure the user group ID and API token.