User ID and domain name conversion

OneSpan Authentication Server has options to configure how user IDs and domain names are handled. It is important that these are set up before data is added to the database. Therefore, before installing, decide which of these options to use.

In the basic installation, user ID and domain name conversion is automatically set to Convert to Lower case. To change it, use the Administration Web Interface.

Case-sensitivity

OneSpan Authentication Server can be configured to save and retrieve user IDs and domain names in lower case or with no conversion (data is saved or searched exactly as entered). The configuration depends on your company's requirements and the capabilities of the database used as the data store. For more information, refer to the OneSpan Authentication Server Administrator Guide.

The case conversion of user IDs and domain names can be set when you add the database schema. If the schema has already been added, you can set the case conversion option using the OneSpan Authentication Server Configuration Wizard, or by running the OneSpan Authentication Server Configuration Utility at any time after.

Changing case conversion after the initial configuration may require modification of all user IDs and domain names in the data store.

User name resolution

For the authentication of Active Directory users, there are a few ways to provide user ID and domain details when logging in, such as user names in NT4 format (DOMAIN\userid), User Principal Name (UPN) (userid@domain), or UPN with domain suffix ([email protected]).

When OAS user accounts correspond to Windows user accounts, Windows user name resolution or Active Directory user name resolution can be used to support these login formats.

Windows user name resolution should be used where OneSpan Authentication Server is installed on a Windows machine which is a member server of the Windows domain.

Windows user name resolution works well with Dynamic User Registration (DUR). For more information, refer to the OneSpan Authentication Server Product Guide.

Active Directory user name resolution is a platform-independent alternative to Windows user name resolution for Active Directory users. It can be used where the machine on which OneSpan Authentication Server is installed is either not a member server of the Windows domain, or running a Linux operating system.

For more information about Windows user name resolution and Active Directory user name resolution, refer to the OneSpan Authentication Server Administrator Guide.