Secure Servers for Transaction APIs and Authentication Method

[lakshitha-attanayaka]

As for our Organization OTP is currently a bit more costly solution to add extra layer of security for our Secure API's.
After hours of research I have come up with Identity Server based authorization method which is going to be our current method for Secure Transactions.
On Behalf Of Grand
This is a Extension Grant method to give API's to access another secure API on behalf of end user by exchanging current access token. Refer the below diagram.
Source: Here

I will be making few changes to the flow and it will be as follows.

@On-Platform/seniors
@On-Platform/netsecurity
@On-Platform/dev