What is DigiLocker?
What is DigiLocker?
DigiLocker is a government-backed platform that allows users to securely store and share official documents, such as Aadhaar, PAN, and Driving License.
How does Cashfree use DigiLocker for KYC?
How does Cashfree use DigiLocker for KYC?
Cashfree integrates with DigiLocker to enable a consent-based KYC process. You redirect users to the DigiLocker portal, where they log in and approve document sharing. Cashfree retrieves the verified data securely after user consent.
Why should I use Cashfree’s DigiLocker integration?
Why should I use Cashfree’s DigiLocker integration?
Cashfree’s DigiLocker flow is compliant with UIDAI guidelines and the Digital Personal Data Protection (DPDP) Act. It supports multiple document types, uses a trusted government portal, and requires minimal changes to your existing integration.
Which documents can I verify using DigiLocker?
Which documents can I verify using DigiLocker?
You can verify Aadhaar, PAN, Driving License, and other government-issued documents supported by DigiLocker.
Does the user need to provide consent?
Does the user need to provide consent?
Yes. The user must log in to DigiLocker and explicitly approve document sharing. Cashfree retrieves data only after receiving consent.
Which industries can use this integration?
Which industries can use this integration?
You can use this solution in banking, lending, insurance, logistics, fintech, trading, and mobility services to meet KYC and compliance requirements.
How does the verification process work?
How does the verification process work?
Use the Verify Account API to check if the user has a DigiLocker account (optional).
Use the Create URL API to generate a consent link.
Redirect the user to the DigiLocker portal for login and consent.
Use the Get Verification Status API to check the user’s progress (optional).
Use the Get Document API to retrieve the verified document.
Use the Create URL API to generate a consent link.
Redirect the user to the DigiLocker portal for login and consent.
Use the Get Verification Status API to check the user’s progress (optional).
Use the Get Document API to retrieve the verified document.
What statuses can I receive?
What statuses can I receive?
You can receive the following status values:
PENDING– The user has not completed the verification.AUTHENTICATED– The user has logged in and given consent.EXPIRED– The link expired before completion.CONSENT_DENIED– When user rejects or denies consent.
Do I need to change my existing integration?
Do I need to change my existing integration?
No. The data format remains the same as the previous flow. You can enable DigiLocker verification with minimal or no code changes.
Why does the DigiLocker API return a 404 error when PAN and GSTIN verification work?
Why does the DigiLocker API return a 404 error when PAN and GSTIN verification work?
The DigiLocker API (
POST /verification/digilocker) requires separate account-level activation in addition to general Secure ID access. If PAN and GSTIN verification work but this endpoint returns 404, follow these steps:- Confirm you are using Secure ID credentials (
x-client-idandx-client-secret), not Payment Gateway keys. Using PG keys against Secure ID endpoints is a common cause of this error. - If your credentials are correct, fill out the Support Form to request DigiLocker activation on your account.
Why does the e-Aadhaar field in the API response return 'N'?
Why does the e-Aadhaar field in the API response return 'N'?
The e-Aadhaar field in the API response returns N if the user hasn’t provided consent. Verify that the user has given consent, and then retry fetching the status.