From 98a85946dd39222775bd1c86645b857ecf3aae5d Mon Sep 17 00:00:00 2001
From: Elliot Hallam <20362314+ehallam@users.noreply.github.com>
Date: Mon, 27 Apr 2026 13:25:23 +0100
Subject: [PATCH] NPA-6620: updated proxy flows

---
 .../policies/FlowCallout.ValidateIDAssuranceLevel.xml     | 7 +++++++
 proxies/live/apiproxy/proxies/default.xml                 | 4 ++++
 .../policies/FlowCallout.ValidateIDAssuranceLevel.xml     | 7 +++++++
 proxies/sandbox/apiproxy/proxies/default.xml              | 8 ++++++++
 4 files changed, 26 insertions(+)
 create mode 100644 proxies/live/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml
 create mode 100644 proxies/sandbox/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml

diff --git a/proxies/live/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml b/proxies/live/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml
new file mode 100644
index 00000000..654a0afe
--- /dev/null
+++ b/proxies/live/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<FlowCallout async="false" continueOnError="false" enabled="true" name="FlowCallout.ValidateIDAssuranceLevel">
+    <DisplayName>FlowCallout.ValidateIDAssuranceLevel</DisplayName>
+    <FaultRules/>
+    <Properties/>
+    <SharedFlowBundle>ValidateIDAssuranceLevel</SharedFlowBundle>
+</FlowCallout>
diff --git a/proxies/live/apiproxy/proxies/default.xml b/proxies/live/apiproxy/proxies/default.xml
index 3e8b5ea2..e7390927 100644
--- a/proxies/live/apiproxy/proxies/default.xml
+++ b/proxies/live/apiproxy/proxies/default.xml
@@ -4,6 +4,10 @@
       <Step>
         <Name>FlowCallout.GetEnvironmentKeyValueMapData</Name>
       </Step>
+      <Step>
+        <Name>FlowCallout.ValidateIDAssuranceLevel</Name>
+        <Condition>!(proxy.pathsuffix = "/_ping" OR proxy.pathsuffix = "/_status")</Condition>
+      </Step>
     </Request>
   </PreFlow>
 
diff --git a/proxies/sandbox/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml b/proxies/sandbox/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml
new file mode 100644
index 00000000..654a0afe
--- /dev/null
+++ b/proxies/sandbox/apiproxy/policies/FlowCallout.ValidateIDAssuranceLevel.xml
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<FlowCallout async="false" continueOnError="false" enabled="true" name="FlowCallout.ValidateIDAssuranceLevel">
+    <DisplayName>FlowCallout.ValidateIDAssuranceLevel</DisplayName>
+    <FaultRules/>
+    <Properties/>
+    <SharedFlowBundle>ValidateIDAssuranceLevel</SharedFlowBundle>
+</FlowCallout>
diff --git a/proxies/sandbox/apiproxy/proxies/default.xml b/proxies/sandbox/apiproxy/proxies/default.xml
index 164b5143..f3517927 100644
--- a/proxies/sandbox/apiproxy/proxies/default.xml
+++ b/proxies/sandbox/apiproxy/proxies/default.xml
@@ -40,6 +40,14 @@
     </Flow>
   </Flows>
   <PreFlow/>
+    <PreFlow>
+      <Request>
+        <Step>
+          <Name>FlowCallout.ValidateIDAssuranceLevel</Name>
+          <Condition>!(proxy.pathsuffix = "/_ping" OR proxy.pathsuffix = "/_status")</Condition>
+        </Step>
+      </Request>
+    </PreFlow>
   <PostClientFlow name="PostClientFlow">
     <Response>
       <Step>