2.3 Onboarding Guide

The onboarding process for a Partner Manager on the Wallet Partner Portal involves several steps to ensure that businesses or partners can effectively integrate their services into Samsung Wallet and begin offering digital cards, passes, loyalty programs, and other services to their customers.

2.3.1 Onboarding Process

The following sections contain a description of the Samsung Wallet onboarding process for new partners.

  • The partner manager should fill basic information of the company and card details on partner portal, choose the card type and template that fit their contents, which will then provide keys such as Card ID and Partner ID.
  • To ensure safe data communication, make sure to prepare security key factors.
  • Samsung will sign the provided CSR then deliver certificates used to create the secured data.

Samsung Account is necessary to manage own service for Samsung Wallet. The account is used to sign-up/sign-in on Partner portal.

The following section contains the steps to register a new Samsung account at the Wallet Partners Portal.

  1. Navigate to the Wallet Partners Portal and click the Sign In button.


  2. Enter the email address and password in the form and click Sign in.




  3. If creating a new account, enter the account details (email address, password, name, date of birth, and ZIP code), and then click Next.


Sign Up

Signing up for the Samsung Wallet service involves registering a partner to access and utilize the features offered by Samsung Wallet. To utilize full functionality of the Samsung Wallet Partners Service, a partner needs to enter company information, set encryption information, and configure card information. After verification, the partner will get the authority to use all services.

The new partner of Wallet Partners Portal is the Samsung account will be conducted by Samsung developer.

The new partners register to create business account and agree to the terms and conditions. The partners complete the company profile information to onboard, create and manage business in Wallet partner.

Here’s a step-by-step guide for a new partner to sign up for the Samsung Wallet Partners Portal:

  1. Create Business Account - To use the Wallet Partners Portal, one must Create Business Account. To get started, one must have a Samsung Developer Business Account. This account is required to manage company’s digital assets and integrate services with Samsung Wallet.
  2. Accept the Terms and Conditions - To use Wallet Partners Portal, review and accept the Terms and Conditions of the Samsung Developer Portal. Ensure to read through the guidelines carefully, as they outline the rules for integrating business with Samsung Wallet.
  3. Verify Account Profile – Complete the company profile information. Then enter the company name, company website, username etc. Additional information for the Business Account is optional, but providing detailed information will help with the registration process. After filling out the required details, click Submit to send the registration form for review.
  4. Welcome Onboard - Once the Business Account is created and the information is submitted; the Wallet Partner Onboarding Process is complete.
  5. After completing the onboarding process, a welcome email confirming that the business has been successfully registered with the Samsung Wallet Partners Portal.

2.3.2 Set Encryption Information and Request Permission

Setting encryption information involves configuring security measures to protect sensitive data during transactions and interactions within the Samsung Wallet Partners Portal. Encryption is used to secure the data being exchanged, preventing unauthorized access or interception.

Once the encryption information is configured, one will need to request permission to access specific services within the Samsung Wallet Partners Portal. Permissions are necessary for performing operations such as adding or managing digital assets (e.g., cards, tickets, loyalty programs) and accessing sensitive business data.

Steps to Set Encryption Information:

We need to perform encryption authentication to use the Wallet Partners Portal.

  • Create a CSR that will request a digital certificate to be issued by a trusted authority.


  • We support multiple CSR registrations.

    • If you click the + button, the CSR registration area will be added.
    • If you click the - button, the CSR registration area will be deleted.


  • Go to the Wallet Partners Portal and input the CSR registration details.

    Item

    		 Description
    Encryption Type

    		 Select End to End Encryption (CSR) or None (Upload later).
    CSR

    		 CSR (Certificate Signing Request) The SAMSUNG PUBLIC KEY is the key used for data encryption. This can be used to issue and delete wallets. CSR is a file used to request signature of a certificate. After uploading CSR to the portal, CSR will be signed using the Samsung certificate. Please be careful not to expose SAMSUNG PUBLIC KEY and CSR due to security issues. Upload a *.csr file only.
    None (Upload later)

    		 You need to set the encryption information (CSR) to utilize the full functionality of Samsung Wallet Service. Even if the subscription is done, you must upload the CSR file later.
    Samsung Public Key

    		 Samsung Public Key is sent to the partner’s email account.
    Signed Certificate

    		 The signed certificate is sent to the partner’s email account.

  • Complete encryption authentication to verify the correctness of the setup.

  • Click Done to submit the encryption information and complete the process.


  • A welcome email is sent when a user completes the sign-up process. In addition, information required for the completion of CSR is sent along with it.


2.3.3 Security Factors

Security factors refer to the various protocols and measures taken to secure the data and ensure the privacy and safety of the partners.

The service flow describes the series of steps or actions taken to complete a specific task in the Wallet Partners Portal, from initial account creation to the use of services. The service flow also ensures that data is handled securely.




2.3.4 CSR (Certificate Signing Request) Process

Overview

The Certificate Signing Request (CSR) process is critical for requesting a digital certificate from a Certificate Authority (CA). OpenSSL, an open-source command-line tool, is commonly used to create the necessary files for CSR generation and private key creation, which are essential to establish secure communication.

Private Key

Private key helps to enable encryption and is the most important component of certificates. The private key should remain secure, as it is used for signing the CSR and encrypting communication.

openssl genpkey -out domain.key -algorithm RSA -pkeyopt rsa_keygen_bits:2048

Creating a Certificate Signing Request

The CSR contains the public key and additional information such as the organization’s details. This is required when a digital certificate is to be signed by a trusted Certificate Authority (CA).

Steps to create a CSR from an existing private key

  1. Open a terminal and use OpenSSL to generate a CSR (domain.csr) using the existing private key.
openssl req -out domain.csr -key domain.key -new -sha256
  1. It will also prompt you to provide CSR information, such as:
    a. Country Name (C): The two-letter country code (e.g., US for the United States).
    b. State or Province Name (ST): Your state or province.
    c. Locality Name (L): Your city or locality.
    d. Organization Name (O): Your organization’s legal name.
    e. Organizational Unit (OU): (Optional) The department or business unit within the organization.
    f. Common Name (CN): The domain name (e.g., www.yourdomain.com).
    g. Email Address (Email): Your contact email address.
You are about to be asked to enter information that will be incorporated into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a f ew fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:KR
State or Province Name (full name) []:Seoul
Locality Name (eg, city) [Default City]:Sample City
Organization Name (eg, company) [Default Company Ltd]:Sample Company
Organizational Unit Name (eg, section) []:Sample section
Common Name (eg, your name or your server's hostname) []:domain
Email Address []:email@email.com
Please enter the following 'extra' attributes to be sent with your certificate request
A challenge password []:
An optional company name []:
  1. Once completed, the CSR file (domain.csr) will be generated.

Creating a Key and CSR Together

Both the private key and CSR can be created with a single command.

openssl req -newkey rsa:2048 -nodes -keyout domain.key -out domain.csr

For additional information:

2.3.5 My Account

The My Account section in Samsung Wallet allows to manage profile, payment methods, security settings, and other account details.

Navigate to the Samsung Wallet page, in top-right corner, select the My Account section to manage the profile and encryption settings.

In this section, manage ‘Wallet Partner Management’ to modify Company information and manage the encryption settings.