Digipass Plug-In for IAS Product Guide - Vasco

More documents

Recommendations

Info

Digipass Plug-In for IAS Product Guide Digipass User Accounts 3.3.2 Multiple Digipass or Digipass Applications A User may have multiple Digipass assigned to their User account, and/or multiple Applications enabled for a Digipass. If so, the IAS Plug-In will need to know which Digipass and Digipass Application will be used for a particular login for the User. The Digipass and Digipass Application required for a login is selected by the Policy applicable to the login scenario. Policy settings may determine the Application Names, Application Type, and/or Digipass Types to be used. Once the Policy settings are taken into account, there may still be more than one Digipass Application that could be used. In that case, the IAS Plug-In will check each one. 3.3.3 Password Field Information Information which may be required to be entered into the password field during login: Static Password The static password may be entered to: authenticate the User if they do not have a Digipass assigned (or if all Digipass assigned to the User are in the grace period). request a challenge or Virtual Digipass OTP be passed on to Windows during back-end authentication (Stored Password Proxy off). inform the IAS Plug-In of a change to the User's Windows static password (Password Autolearn and Stored Password Proxy on). Serial Number The serial number for a User's assigned Digipass will be required if: this is the first time the User has logged in using a Digipass, AND the User is required to Self-Assign the Digipass using the login process (as opposed to the User Self Management Web Site) Server PIN If a Server PIN is required for the User's Digipass, this must be entered every time the User logs in. The User can change their PIN by providing the new PIN twice after the OTP (unless CHAP, MS-CHAP or EAP-MD5 is being used). Request Keyword A Keyword can be used to indicate a request to the IAS Plug-In for an OTP to be sent to the User's mobile phone, or for a 2-step Challenge/Response login. A keyword may be used in conjunction with the static password or just on its own. However, if the keyword is used on its own to request a Virtual Digipass OTP, the static password must be entered in the second login step as well as the OTP. One Time Password A One Time Password is typically required to login via the IAS Plug-In. © 2005 VASCO Data Security Inc. 46
Digipass Plug-In for IAS Product Guide Digipass User Accounts 3.4 Administration Privileges The IAS Plug-In will allow access to Digipass User accounts and Digipass records based on a User's Active Directory privileges. Extra privileges may be granted via the Active Directory Users and Computers console. See the Administrator Reference for more information. © 2005 VASCO Data Security Inc. 47
Page 1 and 2: Digipass Plug-In for IAS IAS Plug-I
Page 3 and 4: Digipass Plug-In for IAS Product Gu
Page 45: Digipass Plug-In for IAS Product Gu
Page 73: Digipass Plug-In for IAS Product Gu

Digipass Plug-In for IAS Product Guide - Vasco

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?