Prepare the connector
Backbase deploys this connector. To provide the environment details, follow these steps:-
Send environment details to Backbase.
Send
feedzai.request.orgId,feedzai.base.url, and, for New Account Fraud,feedzaiNaf.base.urlto your Backbase support team. - Choose level-of-assurance mapping. Tell your Backbase support team whether to enable decision-flag level-of-assurance mapping, and which risk-score thresholds to use. Agree the thresholds with Feedzai from the business rules in the Feedzai engine. For the mapping logic and the default thresholds, see Reference.
Streaming prerequisites
Before you use Feedzai Digital Trust streaming, complete these additional prerequisites:- Obtain a Feedzai Digital Trust for Account Monitoring license that includes Streaming API access.
- Assign the Streaming role to a Feedzai API user.
- Request OAuth 2.0 client credentials for the Streaming endpoint. If your tenant uses distinct API users, these credentials are separate from your synchronous scoring credentials.
- Enable outbound HTTPS from the Banking OS connector cluster to the region-specific Feedzai Digital Trust streaming host (EU or US).
- Configure IP allowlisting on both sides of the streaming connection.
- Activate the Feedzai SDK on your web and mobile channels, so that
user_idandsession_idare supplied during data gathering and echoed on streamed events.
Streaming configuration
Send the Feedzai Digital Trust streaming URL and the streaming OAuth credentials to your Backbase support team. Request filters (optional, onPOST /stream/session-events):
filter.dataSource:web,android_sdk, orios_sdkfilter.alertType: standard Feedzai alert type namefilter.numberOfStream: parallel stream replicas (Feedzai supports up to 3)
vendorSpecificFields.feedzaiStreaming.countermeasures object only when Active Defense (activeDefenseEnabled) is enabled. This flag gates the countermeasures data and is independent of the request filters.
Connection lifecycle behavior
Understanding how the streaming connection behaves helps you integrate and monitor correctly:Feedzai replays events within a 5-minute window after reconnect. Disconnects longer than 5 minutes may result in permanent event loss for that period.
Test your integration
To use the Fraud Unified API, include your Banking OS subscription key in the request header. If you don’t have a key, contact your Backbase support team to have one provisioned.
Test the API using the Postman collection.
Test streaming: Include the same
api-key header. Call POST /stream/session-events with your subscription filters. Verify session events arrive with expected sessionID, userId, and score. Simulate connector pod restart in a non-production environment to validate reconnect behavior.
Troubleshooting
If your connector isn’t responding as expected, check these common scenarios.5xx: internal server error or core system down
5xx: internal server error or core system down
Cause: The Banking OS gateway can’t establish a handshake with the Feedzai endpoint. This typically indicates an upstream service outage at Feedzai or a network routing failure.Solution: Verify the operational status of the Feedzai environment with Feedzai.
5xx: timeout or sockettimeoutexception
5xx: timeout or sockettimeoutexception
Cause: The request to Feedzai exceeded the configured timeout threshold. This can occur during high load or network latency issues.Solution: Verify the operational status of the Feedzai environment with Feedzai.
Invalid authentication
Invalid authentication
Cause: The credentials provided during setup are incorrect.Solution: Verify your credentials with Feedzai and contact the GC team to update the connection.
429: rate limit exceeded
429: rate limit exceeded
Cause: The number of incoming requests exceeded the defined threshold for your subscription tier. This response protects the stability of the Banking OS and partner infrastructure.Solution: Review your application’s request patterns to identify unexpected spikes. If you require higher throughput, contact your Backbase support team to request an adjustment to your APIM rate limit policy.
Stream ended after approximately 5 minutes
Stream ended after approximately 5 minutes
Cause: Normal Feedzai clean connection closure at max connection duration. This is expected vendor behavior, not an error.Solution: Open a new
/stream/session-events subscription.No events for 60+ seconds then disconnect
No events for 60+ seconds then disconnect
Cause: Feedzai idle timeout when no session activity exists.Solution: Expected when no sessions are active. Re-subscribe when monitoring resumes.