Skip to main content

Integration

This section describes integration for both backend systems (Relying Parties (RP)) and Mobile Devices (Device).

General flow​

Generally, attestation has few steps:

  1. Nonce is generated. There are two options:
  2. Mobile Device contacts the attestation issuer (eg. Google, Apple) to issue token/s
  3. Mobile Device builds the XitAttestationToken structure and sends it to the Relying Party
  4. Relying Party sends token and required nonce data to Attestation API for validation
  5. Attestation API validates the token and provides result to Relying Party.