Use External Data for Identity Verification

If the data required to verify a caller resides outside of Salesforce, configure the identity verification process to use data from an external source.

1. Create an Apex class.
   The Apex class implements the identity verification process methods for building verification context, searching for customer records, and getting verification data.
2. Create an Identity Verification Process Definition record.
   A process definition record links an identity verification process configuration to the identity verification flow.
3. Create an Identity Verification Process Detail record that looks up to the process definition record.
   In the process detail record, set the values of the required fields and specify the Apex class that you’ve created. Select External as the data source. Ensure that the process detail record configuration is identical to your Apex implementation. Otherwise, the flow doesn’t work as expected. If you’re using the Verify Customer Identity V2 or the Verify Customer Identity Base V2 flow template, you can’t use object-based search with an external data source. Also, you must enter values for the Object and the Search Record Unique ID fields. If you don’t, you get empty search results even if the Search API returns non-empty results.

   

   Note The Search Record Unique ID Field value must be identical to the Field Name value in one of the associated identity verification process field records.
   Create two or more process detail records to configure secondary or tertiary verifications depending on your business needs.
4. Create identity verification process field records for each process detail record. Ensure that the process field records match your Apex implementation. Otherwise the flow doesn’t work as expected. For each record, specify the data type of the field in the external data source using the Field Data Type field.
5. Create an identity verification flow.
6. Make the flow available to your users.

When displaying information from external data sources on the identity verification screen, make sure that you don’t show any sensitive or confidential information. Your Apex class must either mask sensitive information or only partially display the information. For example, you may want to show only the last four digits of social security numbers (SSN) or account numbers and mask the rest.

Note To disconnect from an external data source, remove all authentication information, data source connection details and mappings, as well as any other dependent configuration.