Inbound IVR-Phonon Audit Points evidence

The following points were asked by HDFC Team for Inbound IVR Audit Points as Evidence.

1.Dormancy parameters configuration for New and Existing Users. (Provide screenshot of Admin console else backend coding screenshot)

2. Provide screenshot for Application password policy

• Password expiry: Not Set 

• Password history:  05 - Not Ok 

• Failed login attempts:  Not Set 

• Passwords should be changed at first logon - Not set 

• Presence of two factor authentication for internet facing applications. - Not set

   

3.Evidence for interfacing applications.(Provide screenshot of backend where the APIs are present)

1. Token Generation and Get Data API 

2. Salesforce

3. iSAC

4. Patch management details for the application (Kamalio).

Phonon Replies:

1. Dormancy parameters configuration for New and Existing Users. (Provide screenshot of Admin console else backend coding screenshot)

2. Active Agents:

   

3. Pending Agents :

   

4. Provide screenshot for Application password policy

• Password expiry: Set.

• 

• Password history:  05 -

•  

  

• Failed login attempts:  Not Set (Video link has been shared)

• Passwords should be changed at first logon - Not set (As passwords are set up by agents while signing up their phonon account)

• Presence of two factor authentication for internet facing applications. - resence of two factor authentication for internet facing applications. - Not set - Already in process and also discussed with Neeraj Sir and Keyur Vasani.

3. .Evidence for interfacing applications.(Provide screenshot of backend where the APIs are present)

   1. Token Generation and Get Data API 

   2. Token Generation API : https://capi.hdfc.com/Mowbly_api_live_dmz/api/Mowbly/GetData

   3. Get Data API : https://capi.hdfc.com/Mowbly_api_live_dmz/api/Mowbly/GetData

   4. Salesforce

   5. API (SF TOKEN GENERATION) https://login.salesforce.com/services/oauth2/token?grant_type=password&client_id=3MVG9fe4g9fhX0E4OpnKNh.peDwRBcWlqO4X0NmF_.A21k7V1vpmuYmiyTKEUkGfJNe1CXP03pKu9Q4K9Tf_q&client_secret=012E1027827AE9C1DBFBC4456B9B343C4809CDC30617FCF910E0FA0F01B4615A&username=phonon.integration@hdfc.com&password=Phonon@12345xw4eXhuyOsQZ6sM510Aql041j#123jG6UGNvh0xAyNF3avF0Nd881r

   6.  SF-GetAccountIDByFileNo : https://hdfclimited.my.salesforce.com/services/data/v57.0/query/?q=select id from opportunity where HDFC_DASH_File_Number__c='$flow.key.i_filenumber'

   7.  New Lead: https://central.phonon.io/socket/api/publish

   8. Open Page: https://central.phonon.io/socket/api/publish

   9. Query_SF Push : https://hdfclimited.my.salesforce.com/services/data/v57.0/sobjects/Case

   10. Request_SF Push : https://hdfclimited.my.salesforce.com/services/data/v57.0/sobjects/Case

   11. Loan_Complain_SF_Push : https://hdfclimited.my.salesforce.com/services/data/v57.0/sobjects/Case

   12. Deposit_Complian_SF Push: https://hdfclimited.my.salesforce.com/services/data/v57.0/sobjects/Case

    

   1. iSAC ( Not having access to this)

   2. Patch management details for the application (Kamalio):- Already discussed with Sachin Srivastav.