Question Set Introduction and Concepts

7-6 Oracle Fusion Middleware Administrators Guide for Oracle Adaptive Access Manager Answer Logic is made up of advanced matching algorithms used by the system to intelligently detect the correct answers in the challenge response process. The algorithms and the levels of logic are factors in evaluating answers. Errors can be caused by simple input errors such as fat fingering, extra characters, misspellings, and so on. Common misspellings and abbreviations for example can be accepted if the basic information of the answer is correct. The following algorithms are available and can be configured for your requirements: ■ Phonetics ■ Missing characters ■ Extra characters ■ Common misspellings ■ Common abbreviations ■ Common acronyms ■ Keyboard fat fingering ■ Common nicknames ■ Regional spelling differences ■ Date Format The Answer Logic algorithms can be enabled or disabled and the intensity or strength of some algorithms the level of Answer Logic used to evaluate answers given for challenge questions can also be configured. For example, high risk transactions such as wire transfers may require a high degree of certainty i.e. exact match whereas accessing personal, non-sensitive information may require a lower degree of response certainty. Answer Logic algorithms are available for both the online challenge and CSR phone challenge processes. Online settings are applied for answers the user provided online using the application. Phone challenge settings are applied for answers provided by users over the phone and entered by the CSR. The online challenge and CSR phone challenge Answer Logic are completely independent of each other. They can be configured separately. For example, you can set the online challenge logic strength to high and the CSR phone challenge logic strength to low. For the CSR phone challenge logic strength, you may have provided more margin for error, because CSRs are listening to the answers over the phone and entering the answers.

7.1.9 Validations

Validations are used to validate the answers given by a user at the time of registration. Validations can be at the local level, to associated with each individual question, or at the global level, to be applied to all the questions presented to the user. There are no automated validations to ensure that question specific validations and global validations do not conflict. Administrators must take care not to configure the same validations for local and global. For example, validation for a question should not be set to numeric only if the alpha only is set as a global validation.