User ID and domain resolution
To allow users to authenticate with user names in different formats, OneSpan Authentication Server identifies user accounts via the user ID and domain.
Table: User name resolution in OneSpan Authentication Server provides a comparison overview of the user name resolution methods. For a description of each user name resolution method and user account identification, see :
Table: User name resolution in OneSpan Authentication Server
| Feature |
User Name Resolution Type |
| |
Windows |
Active
Directory |
Simple |
| User can authenticate with UPN and SAM account name, even if different. |
✓ |
✓ |
|
| User can authenticate with UPN that includes alternative UPN domain suffixes. |
✓ |
✓ |
✓ |
| Supported where OneSpan Authentication Server is installed on a Windows machine which is a member server of the Windows domain. |
✓ |
✓ |
✓ |
| Supported where the machine on which OneSpan Authentication Server is installed is either not a member server of the Windows domain or running a Linux operating system. |
|
✓ |
✓ |
| Support for Active Directory users. |
✓ |
✓ |
✓ |
| Support for Active Directory or Global Catalog as back-end server. |
✓ |
✓ |
✓ |
| Resolves user name to SAM account name and FQDN. |
✓ |
✓ |
|
| Requires additional configuration of back-end directory information |
|
✓ |
✓ |
Figure: Name resolution
Figure: Name resolution with Active Directory back-end server