Digipass Plug-In for IAS Product Guide - Vasco

Digipass Plug-In for IAS Product Guide Active Directory Integration
6 Active Directory Integration
6.1 What is Stored in Active Directory?
The following information is stored in Active Directory:
Digipass User accounts
Digipass and Digipass Application records
Digipass configuration records (Policies, Components)
6.2 Schema Extensions
User attributes – vasco-UserExt class
Extra VASCO attributes are added to an Active Directory User record via an 'auxiliary class'
vasco-UserExt on the User class.
Digipass and Digipass Application records
The vasco-DPToken class is used to store Digipass attributes. It is also a container, in which
vasco-DPApplication records for that Digipass are stored.
Upon assignment to a User, the Digipass record is stored in the same location as the User.
Policies and Components
Policy and Component records are stored in vasco-Policy and vasco-Component objects. They
are located in a single “Digipass-Configuration” container in a single Domain.
As the data model is shared with other Digipass Plug-In and Digipass Pack products, the
schema will also include the vasco-BackEndServer class. However, this is not used in Digipass
Plug-In for IAS.
6.3 Permissions Needed by the IAS Plug-In
The installation process will ensure that the IAS Plug-In has sufficient permissions. This is
achieved by assigning permissions in the domain to the in-built “RAS and IAS Servers” group.
It is necessary to make sure that the IAS server is added to that group.
6.4 Sensitive Data Encryption
Sensitive data is encrypted by the IAS Plug-In using an embedded key. If needed, this
encryption may be strengthened by including a custom encryption key. See the Administrator
Reference for more information.
© 2005 VASCO Data Security Inc. 62