Digipass Plug-In for IAS Product Guide - Vasco

Digipass Plug-In for IAS Product Guide Digipass User Accounts
3.5 Authenticating Users
Authentication settings may be applied to an individual User account, although typically these
will be set by the Policy.
3.5.1 Authentication Settings
Digipass User account and Policy settings control the authentication process as follows:
The authentication settings for a Digipass User account override a Policy setting.
The relevant Policy is referred to if the authentication setting for a Digipass User account
is “Default” or if a Digipass User account does not exist for the login.
3.5.2 Local Authentication
'Local' authentication is a term used to describe the IAS Plug-In authenticating a login based
on information in its data store and the One Time Password entered during the login.
The Local Authentication setting specifies whether the IAS Plug-In will authenticate a login
based on an OTP or stored static password. Back-end authentication may also be utilized – in
the latter two options, an authentication request will only be checked with the back-end
authenticator if it passes authentication by the IAS Plug-In.
None
The IAS Plug-In will not authenticate the User's credentials – the request will typically be
checked with the back-end authenticator.
Digipass/Password
The IAS Plug-In will always process authentication requests. If a User has had a Digipass
assigned, they must use an OTP during login, unless a Grace Period is still active for the
Digipass. If a User does not have a Digipass assigned, they can use their static password to
log in. The static password entered will be checked against the stored static password or if
Back-End Authentication is used, the Windows static password.
Digipass Only
The IAS Plug-In will always process authentication requests. Users must login using an OTP.
Users without Digipass will not be able to log in.
3.5.3 Back-End Authentication
'Back-end' authentication applies to the IAS Plug-In checking login details (User ID and static
password) with another system – Windows. This is used by the IAS Plug-In mostly for the
Dynamic User Registration and Self-Assignment processes.
Back-end authentication settings specify whether the IAS Plug-In will pass on an
authentication request to Windows. The User's static password is required for this step, and is
retrieved from either the login, or the stored static password in the Digipass User Account.
None
The IAS Plug-In will not utilize back-end authentication.
© 2005 VASCO Data Security Inc. 48