Digipass Plug-In for IAS Product Guide - Vasco

Digipass Plug-In for IAS Product Guide Digipass User Accounts
3.3.2 Multiple Digipass or Digipass Applications
A User may have multiple Digipass assigned to their User account, and/or multiple Applications
enabled for a Digipass. If so, the IAS Plug-In will need to know which Digipass and Digipass
Application will be used for a particular login for the User.
The Digipass and Digipass Application required for a login is selected by the Policy applicable to
the login scenario. Policy settings may determine the Application Names, Application Type,
and/or Digipass Types to be used.
Once the Policy settings are taken into account, there may still be more than one Digipass
Application that could be used. In that case, the IAS Plug-In will check each one.
3.3.3 Password Field Information
Information which may be required to be entered into the password field during login:
Static Password
The static password may be entered to:
authenticate the User if they do not have a Digipass assigned (or if all Digipass assigned
to the User are in the grace period).
request a challenge or Virtual Digipass OTP
be passed on to Windows during back-end authentication (Stored Password Proxy off).
inform the IAS Plug-In of a change to the User's Windows static password (Password
Autolearn and Stored Password Proxy on).
Serial Number
The serial number for a User's assigned Digipass will be required if:
this is the first time the User has logged in using a Digipass, AND
the User is required to Self-Assign the Digipass using the login process (as opposed to
the User Self Management Web Site)
Server PIN
If a Server PIN is required for the User's Digipass, this must be entered every time the User
logs in. The User can change their PIN by providing the new PIN twice after the OTP (unless
CHAP, MS-CHAP or EAP-MD5 is being used).
Request Keyword
A Keyword can be used to indicate a request to the IAS Plug-In for an OTP to be sent to the
User's mobile phone, or for a 2-step Challenge/Response login. A keyword may be used in
conjunction with the static password or just on its own. However, if the keyword is used on its
own to request a Virtual Digipass OTP, the static password must be entered in the second login
step as well as the OTP.
One Time Password
A One Time Password is typically required to login via the IAS Plug-In.
© 2005 VASCO Data Security Inc. 46