Orange API Specific Terms for Authentication France API
Service Provider: Orange SA, with registered address located at 78, rue Olivier de Serres, 75015 Paris, France (VAT registered: France 89 380 129 866) (“Orange”)
Version number: 1.0
Date: March, 01 2017
1. Mobile Connect France - Limited API description
Mobile Connect France - Limited API gives access to Orange authentication allowing End-Users to authenticate and to use the service of your API Client, as defined in section 1 of the Orange APIs General Terms. Mobile Connect France - Limited API allows authenticating End-Users located in France only.
The level of Authentication provided under these Terms is a mobile authentication method, meaning that the user has to authenticate on his mobile device, either by validating 1 factor (also named Click OK or LoA2 , the End-Users will be prompted and will need to respond on their mobile device to prove that they are in possession of the device (the credentials)), or by validating 2 factors (also named LoA3, the user will be required to enter a secret PIN that they agreed beforehand. As defined, LoA3 provides a high confidence that the user that has access to the mobile device is also the entity to which the identity was assigned, as only that entity should know the PIN)
2. Contractual Documents
The Terms, as defined in section 1 of the Orange APIs General Terms, consist of (i) such Orange APIs General Terms and (ii) these Orange API Specific Terms for Mobile Connect France - Limited API. In case of any discrepancy between the Orange APIs General Terms and these Orange API Specific Terms, the latter shall prevail.
3. Specific Conditions of Mobile Connect France- Limited API
3.1. Approved Territory
Mobile Connect France - Limited API is provided in Metropolitan France only.
3.2. Prerequisite with respect to End-Users
To use Mobile Connect France - Limited API, You must ensure that End-Users has an Orange mobile subscription stated that the relevant access fees (including roaming fees or costs) are the liability of End-Users. You are informed that End-Users must have all necessary equipment, including a computer a smartphone or features phone, a modem or any other connection tool to enable them to be connected to the internet or mobile network.
3.3. Fees
No fee and no revenu-share amounts will be applied during the Terms period as defined in section “duration”. Each Party bears its own costs.
3.4. Number of Calls
Orange provides Mobile Connect France - limited API up to 1000 calls per month (iii) per MNO.
3.5. Service Availability
Orange will use its best efforts to provide Mobile Connect France - Limited API with reasonable care and skill. Orange will grant no guarantee or warranty with respect to Mobile Connect France - Limited API. In addition, Orange informs You that Mobile Connect France - Limited API may be subject to (i) suspension at any time for technical or operational reasons (in particular but not limited to maintenance operation) or (ii) removal for indefinite periods of time for any reasons or events that are not under the direct or indirect control of Orange.
3.6. Use of Mobile Connect France - Limited API:
Mobile Connect France - Limited API can be used:
- to get the required information to be able to use the APIs requiring an “access_token” (OpenId Connect)
- to perform identity federation.
When End-Users will first access the service of your API Client requiring the Mobile Connect France - Limited API, they must be authenticated by the Mobile Connect France - Limited API.
In some cases, End-Users will be authenticated implicitly or will be required to authenticate explicitly through the Orange authentication form.
When the authentication is valid, Mobile Connect France - Limited API displays a page called “Notice of Consent” corresponding to the “scope” requested. Through this Notice of Consent, the End-User, that has been authenticated by Orange, will have the choice to accept (or not) to grant access to his data provided through other APIs.
The End-User can revoke at any time the permissions given to your API Client at the address: https://selfcare.mobileconnect.orange.fr/selfcare/#/welcome
You may implement Identity federation using the “id token” and in particular the “sub” value, unique for an End-User.
3.7. Grant of Rights to Use
Orange retains all right, title and interest in and to Intellectual Property Rights related to Mobile Connect France - Limited API and You are granted a limited right to use Mobile Connect France - Limited API.
3.7. End-Users Rights
You undertake to make available to End-Users, who have agreed to use Mobile Connect France - Limited API, any and all evidences to enable them to claim their rights and the terms of changing their consent to the use of Mobile Connect France - Limited API.
3.8. End-Users Choice
Orange will cease to authenticate any End-User using Mobile Connect France - Limited API, when such End-User chooses to be no longer authenticated by Orange and as soon as possible after receipt of such End-User’s request by Orange and (if applicable) no later than the deadlines required by the relevant laws and regulations.
3.9. Personal data
Authentication data are considered as personal data. You represent and warrant that You comply with the relevant laws and regulations (in particular but not limited to the process and retention) that apply to personal data and privacy with respect to End-Users using Mobile Connect France- Limited. You further represent and warrant that You will NOT store any authentication data, that Orange provides You with, beyond the time necessary for the use of the service of your API Client.
4. Orange Brands, design rules and graphic resources
The ORANGE brand and any trademarks, brands or logos owned by Orange (the “Brands”) are subject to exclusive rights and You are granted a limited right to use the Brands under section 13 of the Orange APIs General Terms. When Orange makes available, on Orange Developer website (developer.orange.com), (i) some rules with regard to, with no limitation, design, use of the Brands, (the “Design Rules”) and (ii) some graphic resources (such as buttons, error messages, the Brands) (the “Graphic Resources”), You undertake to fully comply with such Design Rules and Graphic Resources.
Any non-compliance with section 13 of the Orange APIs General Terms, the Design Rules and/or the Graphic Resources may constitute a material breach of these Specific Terms. Therefore, Orange may either suspend these Specific Terms until You fully comply with the Design Rules and the Graphic Resources, or terminate these Specific Terms if You do not fully comply with the Design Rules and the Graphic Resources within a reasonable time.
5. Conditions of withdrawal of Mobile Connect France- Limited API
Notwithstanding section 9 of the Orange APIs General Terms, Orange will inform You of the termination of Mobile Connect France - Limited API one-month in advance of the date of the termination, without prejudice of any claim for damages.
6. Duration of the Terms
The Terms shall be effective as of the Terms Effective Date and shall be in force during 6 (six) months.