Resident eKYC documentation

Product guide for Resident DigiLocker eKYC (/kyc/) and KFin KRA eKYC (/kyc/kfin). For Flutter / React / REST integration, use the SDK guide.

1. DigiLocker resident eKYC (`/kyc/`)

MeriPehchaan DigiLocker OAuth for Indian residents. PredictRAM holds Auth Partner credentials; end-users consent on DigiLocker; your app never embeds DigiLocker secrets.

Start session (optional PAN + PANCR consent)
Redirect to DigiLocker authorize → user login / consent
Callback fetches e-Aadhaar XML + PAN Verification Record (PANCR)
Onboarding: Aadhaar OTP → IPV selfie → RA declarations → signature
Build merged PDF + All-KRA ZIP (KFin / CVL / CAMS / NDML / DotEx)
Optional: push KFin batch via SFTP when configured

Portal pages

Start: /kyc/
Session status: /kyc/session/{id}
Onboarding: /kyc/session/{id}/onboarding
Admin DigiLocker credentials: /admin/kyc-digilocker

2. KFin KRA eKYC (`/kyc/kfin`)

Full pre-KRA resident journey optimized for KFintech ingest: DigiLocker PAN/Aadhaar (or Offline XML), contact OTP, MITC/IPV, then official KFin batch ZIP and multi-KRA download.

Enter PAN (format check) → verify contacts via OTP
DigiLocker for realtime PANCR + e-Aadhaar (or upload Offline Aadhaar XML/ZIP)
MITC acceptance + IPV selfie / signature
Build official KFin batch + All-KRA ZIP
Push to KFin SFTP (/admin/kyc-kfin) or demo UNDER_PROCESS

Portal pages

Start: /kyc/kfin
Session: /kyc/kfin/session/{id}
SFTP / POS admin: /admin/kyc-kfin

3. KRA upload packs (end of both flows)

KRA	Format in All-KRA ZIP	Push
KFintech	Official batch ZIP — `KFIN_KYC_DATA.txt` (~) + assets	SFTP when configured
CVL	UTF-8 tilde flat `.txt`, no header	Portal / utility upload
CAMS / NDML / DotEx	Portable CSV + JSON (map to their Excel/portal)	Portal upload

4. Which flow to use?

Need	Use
Quick DigiLocker identity + internal RA onboarding PDF	`/kyc/`
SEBI/KRA-grade pack with Offline Aadhaar option + KFin SFTP	`/kyc/kfin`
Resident without DigiLocker (PAN + Aadhaar copies + V-CIP)	/kyc/resident-vcip
Embed in Flutter / React / partner backend	/kyc/sdk

5. Security notes

DigiLocker Client ID/Secret stay on PredictRAM (Auth Partner).
Do not iframe DigiLocker; use full redirect / system browser.
KRA document assets must be ≤2MB and not password-protected.
Admin SFTP credentials are only on /admin/kyc-kfin.

Next step for developers

Open the Resident eKYC SDK for REST endpoints, Flutter and React samples, DigiLocker OAuth sequence, and KFin pack/push APIs.