Digipass Plug-In for IAS Product Guide - Vasco

Digipass Plug-In for IAS Product Guide Digipass
2.7.6 Limiting Usage of Virtual Digipass
Use of Virtual Digipass may be limited by:
Using Backup Virtual Digipass only.
Minimizing the number of Users assigned a Primary Virtual Digipass.
A User’s Primary Virtual Digipass use cannot be limited.
The Backup Virtual Digipass feature may be enabled as an ‘emergency’ backup for Users who
have left their primary Digipass at home, or for other reasons do not have access to their
primary Digipass. Use of this feature can be limited for each User by:
Time period
Set a time period in which a User may access the Backup Virtual Digipass. After this period
has expired, any Virtual Digipass requests from the User will be rejected. If the User is still
unable to use their Digipass, the time period must then be extended by an administrator.
Once they have started using their Digipass again, the administrator must reset the time
period if the User is to be allowed to use Backup Virtual Digipass again.
Number of Uses
Set a maximum number of times a User may request an OTP using the Backup Virtual Digipass
feature. When the User has reached this number of uses, any further OTP requests from the
User will be rejected. This must be reset by an administrator if further use of the Backup
Virtual Digipass is required for the User.
Global and Individual Backup Virtual Digipass settings
Backup Virtual Digipass options can be set globally or individually, to allow a standard policy
for all Digipass with exceptions made where necessary. Global settings will affect all Digipass
whose individual option is set to 'Default'.
Global options are defined in the Policy that controls authentication. Therefore, by using
multiple Policies, you have some additional flexibility.
2.7.6.2 Backup Virtual Digipass Usage Guidelines
Some questions which will need to be answered before arriving at a Backup Virtual Digipass
usage guidelines are:
Will any users have access to Backup Virtual Digipass?
If so, will all users have access to Backup Virtual Digipass?
Will usage of Backup Virtual Digipass be limited? If so, how?
Time-limited
Limited number of uses
© 2005 VASCO Data Security Inc. 40