Digipass assignment

In OneSpan Authentication Server, Digipass authenticators can be assigned to users in a number of ways, depending on the requirements of your organization:

• Dynamic User Registration/auto-assignment
• Self-assignment
• Manual assignment

You need to import Digipass records into the data store before you can assign the authenticators to users. For more information about importing Digipass records, refer to the Digipass Authentication for Windows Logon Getting Started Guide.

Dynamic User Registration/auto-assignment

Auto-assignment allows OneSpan Authentication Server to automatically assign an available Digipass authenticator when a user logs on to Windows via Digipass Authentication for Windows Logon. After the Digipass authenticator has been assigned, it must be delivered to the user. Users can continue to log on with their static password until they receive their Digipass authenticator. The period of time during which users can continue to log on with their static password, i.e. the grace period, can be configured in the OneSpan Authentication Server Administration Web Interface. The Digipass Authentication for Windows Logon client can notify the end user that a specific Digipass authenticator has been assigned (if configured).

Auto-assignment can be combined with Dynamic User Registration (DUR). This combination allows OneSpan Authentication Server to automatically assign an available Digipass authenticator when a user account is created through DUR. The correct authenticator must then be delivered to the user. Usually, a grace period is set, which allows users to still log on with their static password. After the grace period has expired, depending on the Local Authentication settings of the relevant policy, users can then either continue to use either their static password or their Digipass authenticator (policy setting: DIGIPASS or Password), or can only use the authenticator (policy setting: DIGIPASS/Password during Grace Period or DIGIPASS Only) to log on.

For more information about Digipass auto-assignment and DUR settings, refer to the OneSpan Authentication Server Product Guide.

Self-assignment

With self-assignment, users can assign themselves a Digipass authenticator via OneSpan User Websites. This facilitates the distribution of Digipass authenticators within an organization and significantly reduces administrative effort. Typically, users assign the provided Digipass authenticators to themselves in the course of the Windows logon process.

For more information about Digipass self-assignment and OneSpan User Websites, refer to the OneSpan Authentication Server Product Guide.

Manual assignment

During manual assignment, a Digipass authenticator is assigned to a user by an administrator via the Administration Web Interface. The administrator has the option to specify the grace period during manual assignment.

For more information about manual assignment, refer to the OneSpan Authentication Server Product Guide.