Starting the Browser-based Account Recovery IDV flow

🎯 Purpose

Describes system behaviour when users initiate account recovery after custom IDV URL configuration.

---

🔄 Recovery Initiation Process

1. 🔗 User Action

• Trigger: User clicks any account recovery link on Web Authentication portal's login page\
• Link Types: Various recovery links (forgot password, mobile app access, etc.)
• User Experience: Single click to initiate recovery process

2. 🎫 Token Generation

• Automatic Process: Web Authentication portal generates token automatically\
• Token Contents: Contains information required for client/customer endpoint
• Factor Information: Includes which authentication factor user requested recovery for
• Example: Token indicates user requested password recovery

3. ➡️ Redirect to Client IDV System

• Target: Configured client's IDV system URL\
• Token Inclusion: Generated token passed to client system
• Information Transfer: All necessary context transferred securely
• Seamless Handoff: User smoothly transitioned to client's system

---

📊 Token Information

• Authentication Factor: Specific factor user needs recovery for (e.g., password)\
• User Context: User identification and relevant profile information
• Recovery Type: Type of recovery process being initiated
• Security Data: Secure authorization for recovery process

---