Digipass Plug-In for IAS Product Guide - Vasco

More documents

Recommendations

Info

Digipass Plug-In for IAS Product Guide Overview User Account Link Link to another Active Directory User account utilized by the same person. This may be used where an administrator needs to use their Digipass to log in via two different accounts. RADIUS Profiles Provides an authorisation link to IAS by selecting a RADIUS Profile. Record Creation Time The time and date when the Digipass User account was created. This is significant because it is used as an indicator of whether a given Active Directory User has a Digipass User account. 1.4.3.2 Static Passwords When a static password is required for a login through the IAS Plug-In, which static password is checked depends on the settings in the relevant Policy. It will be either: Stored (local) static password in the Digipass User account If back-end authentication is in use, this will be a copy of the Windows static password – this is not typically required for the IAS Plug-In. Otherwise it will be a static password unrelated to the Windows static password. Windows static password Common Scenarios The table below shows common scenarios and the static password that the User would be required to enter on login. Scenario Password Required Local Authentication enabled and Back-End Authentication disabled Stored static password Dynamic User Registration enabled and needed for the login Windows static password Virtual Digipass login with Back-End Authentication enabled Windows static password Challenge/Response login with Back-End Authentication enabled 1 Table 1: Login static password Requirements 1 If static password is required to request a Challenge/Response login Windows static password © 2005 VASCO Data Security Inc. 16
Digipass Plug-In for IAS Product Guide Overview 1.5 Features The IAS Plug-In includes many features to make administration simple and easy. These include integration with your current User Management system and automated processes for Digipass and User management. 1.5.1 Active Directory Integration The Digipass Plug-In for IAS uses Active Directory to store VASCO-specific User attributes, Digipass records and Digipass Configuration information (eg Policies). 1.5.2 User Management These features help your administrators streamline their User management: Dynamic User Registration (DUR) A Digipass User Account can be automatically created for a User new to the IAS Plug-In upon successful login through IAS. This allows the User to be assigned a Digipass, and the IAS Plug-In to process their future logins. Windows Group Check The IAS Plug-In can be configured to only authenticate Users belonging to specific Windows Groups. See 3.5.5 Windows Group Check for more information. 1.5.3 Digipass Management These features will assist your administrators by automating the main Digipass management tasks required: Self-Assignment Your company might decide to distribute all of the Digipass to your Users, then require each User to self-assign their Digipass. On their first login, the User must enter a password combination which includes the Digipass serial number, to inform the IAS Plug-In of the assignment. The User account is then linked with the relevant Digipass record. Auto-Assignment A Digipass may be automatically assigned to a User upon creation of a Digipass User account, when Dynamic User Registration is used. Grace Period The Grace Period supplies a User with a set amount of time (eg. 7 days) between assignment of a Digipass and the User being required to log in for the first time using an OTP from their Digipass. © 2005 VASCO Data Security Inc. 17
Page 1 and 2: Digipass Plug-In for IAS IAS Plug-I
Page 3 and 4: Digipass Plug-In for IAS Product Gu
Page 15: Digipass Plug-In for IAS Product Gu
Page 67 and 68:
Digipass Plug-In for IAS Product Gu
Page 69 and 70:
Page 71 and 72:
Page 73:
show all

Digipass Plug-In for IAS Product Guide - Vasco

Create successful ePaper yourself

Delete template?

Save as template?