| Scope: | - The process of associating a Unipass with a user account on initial login to a Product Provider or Lender Website
|
| Inclusions: | - All services behind the login except those specifically excluded below, e.g. if the extranet of an offshore subsidiary sits behind the login process in question, then that subsidiary’s extranet must also meet the audit criteria
- All users in intermediary firms
|
| Exclusions: | - Commission systems
- Planning tools
- Processes to apply special restrictions on access to services or data imposed by a particular firm or network (but only insofar as they affect users in those particular firms or networks)
|
| Starting point: | - A user with a valid Unipass arriving at the landing page for accessing secure services with Unipass
|
| Finishing Point: | - User able to access via Unipass all extranet services and data under at least one agency number without further registration
|