Digipass Plug-In for IAS Product Guide - Vasco

Digipass Plug-In for IAS Product Guide Digipass
Individual Organizational Units
Digipass can be loaded or moved into each Organizational Unit where and when they are
required. It is then easy to set up permissions for delegated administrators to assign them
only within their scope of control. If all Digipass in the Organizational Unit are assigned, more
Digipass will need to be moved in manually by a Domain Admin before they can be assigned
by a delegated administrator.
Image 17: Digipass Record Locations - Individual Organizational Units
In the diagram above, each delegated administrator only requires permissions within their
specific Organizational Unit(s), as unassigned Digipass are stored in the Organizational Units in
which they will be assigned.
The Search Upwards in Organizational Unit hierarchy option does not need to be enabled
for this model.
Combination of models
Digipass may be stored in the Digipass Pool as well as some or all Organizational Units. If no
unassigned Digipass records are found in the Organizational Unit, and the Search Upwards in
Organization Unit hierarchy option is enabled, the IAS Plug-In will search upwards to the
Domain Root and search in the Digipass Pool for an available, unassigned Digipass record.
© 2005 VASCO Data Security Inc. 34