# Digital Identity Trust + Customer OTP

## Digital Identity Trust + Customer OTP
[This flow](/client-spec/identity-verification-(digital-identity-trust-+-customer-otp)) uses the same DIT step as Digital Identity Trust + Secure Multi-Factor Authentication, so the **DIT-side scenarios apply identically**. The SMFA cases don't apply because you run the OTP step yourself.
| Scenario | SSN | Mobile | Webhook | Result |
|  --- | --- | --- | --- | --- |
| Happy path | `666-10-6116` | `555-555-1222` | `IDPASS` → `ACCREG` | Enrolled |
| Happy path | `666-45-8856` | `555-555-1222` | `IDPASS` → `ACCREG` | Enrolled |
| Happy path | `666-70-0240` | `555-555-1222` | `IDPASS` → `ACCREG` | Enrolled |
| Happy path | `666-56-8513` | `555-555-1222` | `IDPASS` → `ACCREG` | Enrolled |
| DIT failure (identity rejected) | `666-56-8514` | `555-555-1222` | `IDFAIL` | Not enrolled |
| DIT service outage | `666-10-6116` | `555-555-1211` | `IDSVCOUT` | Not enrolled |
| Equifax enrollment fails | `666-10-6116` | `555-555-1266` | `IDPASS` → `ACCREGFAIL` | Not enrolled |
| Thin file | `666-10-6116` | `555-555-1255` | `IDPASS` → `IDTF` | Not enrolled |
| **Mocked end-to-end (EFX 1-bureau)** | `666-10-1000` | `555-555-1201` | `IDPASS` → `ACCREG` | Enrolled (mocked) |
| **Mocked end-to-end (EFX 3-bureau)** | `666-10-3000` | `555-555-1203` | `IDPASS` → `ACCREG` | Enrolled (mocked) |
| **Mocked end-to-end (multi-bureau)** | `666-10-4000` | `555-555-1204` | `IDPASS` → `ACCREG` | Enrolled (mocked) |
| **Mocked end-to-end (partial data)** | `666-10-5000` | `555-555-1205` | `IDPASS` → `ACCREG` | Enrolled (mocked) — receives [partial reports and scores](#partial-data) |

> **Mocked test users.** The `666-10-1000`, `666-10-3000`, `666-10-4000` and `666-10-5000` SSNs **bypass the bureau demo environments entirely**. Identity verification, enrollment, and all subsequent credit-data retrievals (scores, reports, alerts) are served from pre-loaded fixtures on our side. The flow is identical to the other scenarios — same endpoints, same webhooks, same response shapes — but everything is stable and always available, even when the Equifax demo environment is down or flaky. Use these when you need a reliable, repeatable test against real-looking credit data. `666-10-5000` is the exception to "same response shapes" — it deliberately returns a [partial read](#partial-data).

Version: v3

## Description:

  - `Digital Identity Trust + Customer OTP` ()
    This flow uses the same DIT step as Digital Identity Trust + Secure Multi-Factor Authentication, so the DIT-side scenarios apply identically. The SMFA cases don't apply because you run the OTP step yourself. ScenarioSSNMobileWebhookResultHappy path666-10-6116555-555-1222IDPASS → ACCREGEnrolledHappy path666-45-8856555-555-1222IDPASS → ACCREGEnrolledHappy path666-70-0240555-555-1222IDPASS → ACCREGEnrolledHappy path666-56-8513555-555-1222IDPASS → ACCREGEnrolledDIT failure (identity rejected)666-56-8514555-555-1222IDFAILNot enrolledDIT service outage666-10-6116555-555-1211IDSVCOUTNot enrolledEquifax enrollment fails666-10-6116555-555-1266IDPASS → ACCREGFAILNot enrolledThin file666-10-6116555-555-1255IDPASS → IDTFNot enrolledMocked end-to-end (EFX 1-bureau)666-10-1000555-555-1201IDPASS → ACCREGEnrolled (mocked)Mocked end-to-end (EFX 3-bureau)666-10-3000555-555-1203IDPASS → ACCREGEnrolled (mocked)Mocked end-to-end (multi-bureau)666-10-4000555-555-1204IDPASS → ACCREGEnrolled (mocked)Mocked end-to-end (partial data)666-10-5000555-555-1205IDPASS → ACCREGEnrolled (mocked) — receives partial reports and scores Mocked test users. The 666-10-1000, 666-10-3000, 666-10-4000 and 666-10-5000 SSNs bypass the bureau demo environments entirely. Identity verification, enrollment, and all subsequent credit-data retrievals (scores, reports, alerts) are served from pre-loaded fixtures on our side. The flow is identical to the other scenarios — same endpoints, same webhooks, same response shapes — but everything is stable and always available, even when the Equifax demo environment is down or flaky. Use these when you need a reliable, repeatable test against real-looking credit data. 666-10-5000 is the exception to "same response shapes" — it deliberately returns a partial read.