Configuring HYPR Affirm

These guides cover the day-to-day tasks an administrator performs after Affirm is enabled on a tenant. Each subsection is task-focused — start in Workflow Configuration to build your first flow, then layer on step configuration, policy, outcomes, and customizations as your deployment matures.

For the conceptual background behind these tasks, see Concepts. For a guided end-to-end tutorial, see Get Started.

In this section

Workflow Configuration

Create and manage verification flows, configure their step composition and ordering, set per-step retry limits and injectable outcomes, assign approvers and escalation approvers, and register custom verification steps via the Code Customization API.

Step Configuration

Deep-dive configuration for the verification steps available inside a workflow — KYC compliance screening, Liveness-Only (Anchor Image), and Verified Credentials issuance.

Policy and Enforcement

Network and Location policy (IP allow/block, country blocking, sanctioned regions, multi-headquarters trust zones), risk-signal escalation policy, and HYPR Adapt integration for risk-based verification policy.

Outcomes and Integration

Configure verification outcomes that hand a successful requester off to an identity provider — Entra Temporary Access Pass, Entra Verified ID, Okta password reset — plus the identity-provider application setup these outcomes require.

Customization

Customize the end-user verification experience — Affirm Studio screen content and branding, consent screen content, OIDC settings, Directory Image Writeback, and the Code Customization API for user directory, SMS, email, and outcome overrides.

Helpdesk Operations

Configure the Affirm Helpdesk portal — agent roles, Helpdesk-initiated workflow invocation, the PIN-based verification flow, and the relationship between Helpdesk-eligible workflows and the general workflow library.

Deployment

Pre-deployment checklist, best practices for biometric and document capture configuration, and operational guidance for rolling out HYPR Affirm to production users.