Digipass Plug-In for IAS Product Guide - Vasco

Digipass Plug-In for IAS Product Guide Policies
4.5 Pre-Loaded Policies
These Policies are created for the IAS Plug-In on installation of the Digipass Plug-In for IAS.
They provide an example for setting up Policies in a typical environment.
Policy Name Parent
Policy
Base Policy - Globally applicable settings.
In general, all other Policies
should inherit from this,
directly or indirectly.
IAS Base Policy Base Policy Settings applicable to all IAS
Plug-In Policies, including
local authentication. In
general, all other IAS
policies should inherit from
this, directly or indirectly.
IAS Windows Auto-
Assignment
IAS Windows Self-
Assignment
IAS Base
Policy
IAS Base
Policy
Description Non-Default Settings
IAS Plug-In model for Auto-
Assignment with Dynamic
User Registration, using
Windows back-end
authentication and a
Windows group check.
IAS Plug-In model for Self-
Assignment with Dynamic
User Registration, using
Windows back-end
authentication.
User Lock Threshold = 3,
PIN Change Allowed = Yes
Challenge Request Method = Keyword (Note:
the keyword is blank though)
PVDP Request Method = Password
BVDP Request Method = KeywordPassword
BVDP Keyword = “otp”
ITimeWindow = 100, EventWindow = 100
SyncWindow = 6, IThreshold = 0
Local Authentication = Digipass/Password
Back-End Authentication = If Needed
Back-End Protocol = Windows
Dynamic User Registration = Yes
Assignment Mode = Auto-Assignment
Search up OU Path = Yes
Grace Period = 7
Group Check Mode = Passthrough
Group List = “Digipass Users”
Back-End Authentication = If Needed
Back-End Protocol = Windows
Dynamic User Registration = Yes
Assignment Mode = Self-Assignment
Search up OU Path = Yes
Serial No. Separator = “|”
© 2005 VASCO Data Security Inc. 57