This topic describes how to initiate an eKYC-PRO request by calling the Initialize operation.
API information
API name: Initialize
Request method: HTTPS POST
Description: Before you start an eKYC-PRO verification, call this operation to obtain a transactionId. This ID is used to associate all API operations in the verification request.
This API operation has a dedicated QPS limit. For more information, see QPS limits for ID Verification server-side API operations.
Service endpoint:
NoteBenefits of internal network access: An internal network is a private communication network between Alibaba Cloud products within the same region. If your business server is deployed in the corresponding Alibaba Cloud region, you can use the internal same-region endpoint to access the ID Verification service. This provides more secure and stable communication.
Optimization suggestions for access from outside China: Network environments outside China can be complex. To optimize your integration solution, reduce network latency, and minimize request failures, see Server-side network latency analysis and optimization.
Singapore
Public network:
cloudauth-intl.ap-southeast-1.aliyuncs.comInternal network:
cloudauth-intl-vpc.ap-southeast-1.aliyuncs.com
Indonesia
Public network:
cloudauth-intl.ap-southeast-5.aliyuncs.comInternal network:
cloudauth-intl-vpc.ap-southeast-5.aliyuncs.com
China (Hong Kong)
Public network:
cloudauth-intl.cn-hongkong.aliyuncs.comInternal network:
cloudauth-intl-vpc.cn-hongkong.aliyuncs.com
Malaysia (Kuala Lumpur)
Internet endpoint:
cloudauth-intl.ap-southeast-3.aliyuncs.comInternal endpoint:
cloudauth-intl-vpc.ap-southeast-3.aliyuncs.com
Online debugging and integration
Before you debug and integrate an API operation, see Debug and integrate server-side API operations using OpenAPI Explorer for information about how to call API operations and obtain SDKs and sample code in OpenAPI Explorer.
You can use OpenAPI Explorer to directly run and debug this API operation and generate SDK code examples.
Request parameters
Name | Type | Required | Description | Example |
ProductCode | String | Yes | The product plan to use. Set the value to: eKYC_PRO: This plan requires your users to complete the entire process of document recognition and liveness detection. | eKYC_PRO |
SceneCode | String | No | A custom verification scenario ID. You can use this ID to query related records in the console. The ID can be a combination of up to 10 letters, digits, and underscores. | 1234567890 |
MerchantBizId | String | Yes | A custom unique business ID used for troubleshooting. The ID can be a combination of up to 32 letters and digits. Make sure that the ID is unique. Note Alibaba Cloud servers do not check the uniqueness of this field's value. For better tracking, we strongly recommend that you ensure the uniqueness of this field. | e0c34a77f5ac40a5aa5e6ed20c35**** |
MetaInfo | String | Yes | The MetaInfo environment parameter. You must call the getMetaInfo() function through the JS file to obtain it. For more information about how to obtain MetaInfo, see the client integration document for the corresponding platform. Important
| |
MerchantUserId | String | Yes | A custom user ID or another identifier for a specific user, such as a mobile phone number or email address. We strongly recommend that you desensitize the value of this field in advance, for example, by hashing the value. | 123456789 |
Model | String | No | The type of liveness detection to perform:
Note For information about the supported SDK versions, see SDK release notes. | PHOTINUS_LIVENESS |
DocType | String | Yes | The document type. For a list of supported document codes, see the Document type table. For details about the Optical Character Recognition (OCR) return fields for each document type, see the Document OCR field table. Important Supported certificate types vary by region due to regional model limitations.
| GLB03001 |
SecurityLevel | String | No | The mode that represents different security levels of the verification flow. Valid values:
| 02 |
IdThreshold | String | No | The custom OCR quality detection threshold mode:
| 0 |
IdSpoof | String | No | Specifies whether to enable the document anti-spoofing feature:
| Y |
DocVideo | String | No | Specifies whether to save a verification video.
Note Because the video file is large, the system may discard it if the network is unstable to prioritize the transmission of essential verification images. | N |
CallbackUrl | String | No | The webhook address for verification result notifications. The callback request method is GET by default. The webhook address must start with
Warning
| https://www.aliyun.com?callbackToken=100000****&transactionId=shaxxxx&passed=Y&subCode=200 |
CallbackToken | String | No | A security token that you generate for anti-replay and tamper-proofing checks. If you set this parameter, the CallbackToken field is included in the CallbackUrl webhook. | NMjvQanQgplBSaEI0sL******** |
AppQualityCheck | String | No | Specifies whether to enable strict quality detection for faces.
Important
| N |
Pages | String | No | The page collection configuration. Use a comma (
| 01 |
ShowGuidePage | String | No | Specifies whether to display the guide page:
| 1 |
LanguageConfig | String | No | The custom language configurations. Convert the language configurations that you want to add to a JSON string based on the configuration template. Then, specify this parameter to add the custom language configurations. For more information, see Internationalization language and custom text support. Note This parameter is applicable only to the mobile integration mode of Web SDK. The PC mode is not supported. |
|
StyleConfig | String | No | The custom UI configurations. Convert the UI configurations that you want to add to a JSON string based on the configuration template. Then, specify this parameter to add the custom UI configurations. For more information, see IDV UI style customization. Note This parameter is applicable only to the mobile integration mode of Web SDK. The PC mode is not supported. | |
ReturnUrl | String | No | The target address to which the user is redirected from the business page. Important This parameter is optional only when you use an iframe for encapsulation. | https://www.alibabacloud.com |
ShowBlbumIcon | String | No | In the document OCR step, specifies whether to display the album upload entry:
| 1 |
ShowOcrResult | String | No | In the document OCR step, specifies whether to display the recognition result page:
| 1 |
ProcedurePriority | String | No | When a compatibility issue occurs during verification on a mobile H5 page, specifies whether to allow a degraded processing method to be displayed.
Note
| url |
EditOcrResult | String | No | Specifies whether users can edit information on the OCR recognition result page.
| 0 |
Authorize | String | No | Specifies whether to enable authoritative data source verification to enhance document anti-spoofing. This parameter applies only when IdSpoof is set to Y.
Note
| T |
Mobile | String | No | An Indonesian phone number. Must start with +62 followed by 9–11 digits. This parameter takes effect only when Note This parameter is required only when Indonesian data sources are enabled. | +6281293671234 |
Return data
Name | Type | Description | Example | |
HTTP status code | Integer | The HTTP status code. | 200 | |
HTTP body | RequestId | String | The request ID. | 130A2C10-B9EE-4D84-88E3-5384FF0**** |
Code | String | Success | ||
Message | String | The detailed description of the return code. | success | |
Result.TransactionId | String | The unique identifier for the entire verification flow. This field is used for billing statistics and to initiate a CheckResult API operation request. Important
| hksb7ba1b28130d24e015d6******** | |
Result.TransactionUrl | String | The web verification URL. After verification, the user is redirected to the ReturnUrl specified in the request. Important
| https://www.alibabacloud.com/index.html?clientcfg=**** | |
Result.Protocol | String | The standard encryption protocol for verification. We recommend that you get this parameter and pass it to the client SDK. The SDK uses this parameter to reduce network interactions and support dynamic network switching, improving user experience. Note This field is required for H5 web integration using iframe embedding. | hksb7ba1b28130d24e015d********* | |
Return codes
HTTP status code | Code | Description |
200 | Success | Request successful. |
400 | MissingParameter | Parameter cannot be empty. |
InvalidParameter | Invalid parameter. | |
401 | Forbidden.ExceptionRepeatedInvoke | The number of repeated abnormal calls exceeds the limit. |
403 | Forbidden.RAMUserAccessDenied | You need to grant the RAM user the AliyunAntCloudAuthFullAccess permission. For more information, see Authorize RAM users to access the service. |
Forbidden.AccountAccessDenied | Ensure that you have activated ID verification and your account has no overdue payment. | |
Throttling.Api | API request is blocked due to throttling. | |
500 | InternalError | Internal system error. Provide feedback to engineers for troubleshooting. |
503 | ServiceUnavailable | The service is unavailable. Contact engineers for troubleshooting. |