Where a request says it came from

Every method in the Everest services carries a Channel field in its request. This field is a code that identifies the channel making the request.

It is used in the authorisation check for whether that operation may be carried out from the channel concerned. The service validates the incoming channel code and checks whether the operation is open to that channel. For this reason the Channel field is mandatory in all requests.

Channels are not embedded in the code; they are managed parametrically. A channel definition carries the following fields. Adding a new channel, changing the description of an existing channel or deactivating a channel requires no code change — a parameter update is enough.

Channel-based authorisation is managed from screens in the same way. For example: card restriction profiles and MCC restrictions can also be defined per channel.