Look up a user account
OneSpan Authentication Server verifies that a user account for the user who attempts to authenticate exists in the data store. The user ID and domain resolution performed earlier determines the search criteria to look up the user account.
If a user account is found, the account status is verified (see Verify user account status).
If no user account is found, then the policy settings will determine whether OneSpan Authentication Server continues processing the authentication request or rejects it:
- If Local Authentication Policy is set to DIGIPASS/Password during Grace Period, DIGIPASS or Password, or Digipass Only, local authentication is required. In this case, a user account must exist. It is only possible to proceed if Dynamic User Registration (DUR) is enabled (see Dynamic User Registration (DUR) ).
- If Local Authentication Policy is set to None, local authentication is not required. In this case, the authentication process can proceed without a user account.