2-Step Offline Activation Using a Color QR Code

For multi-device activation, the following form fields must be used on the 2-Step Offline Activation Using a Color QR Code page and posted to the User Self-Management Website servlet (action="mdlactivation"):

2-Step Offline Activation Using a Color QR Code form fields (Registration page)
Form field name Visible label Description
username User Name

Required. The user name for logging on to User Self-Management Website. The maximum length is 255 characters.
password Password

Required. The static password or OTP for logging on to User Self-Management Website. The maximum length is 128 characters.
commit Register Required. The button to submit data entered by the user to OneSpan Authentication Server.
replay_token <hidden> Required. Internally used form field to prevent re-transmission of form data.
2-Step Offline Activation Using a Color QR Code form fields (Activation page 1)
Form field name Visible label Description
crontoImage <image> Required. Activation Message 1, provided as a color QR code.
deviceCode Device Code Required. Code generated by the authenticator after the color QR codealong with Activation Message 1 have been scanned.
commit Continue Required. The button to submit data entered by the user to OneSpan Authentication Server.
replay_token <hidden> Required. Internally used form field to prevent re-transmission of form data.
2-Step Offline Activation Using a Color QR Code form fields (Activation page 2)
Form field name Visible label Description
crontoImage <image> Required. Activation Message 2, provided as a color QR code.
signature Signature Required. Signature generated by the authenticator after the color QR code along with Activation Message 2 have been scanned.
commit Activate Required. The button to submit data entered by the user to OneSpan Authentication Server.
replay_token <hidden> Required. Internally used form field to prevent re-transmission of form data.

2-step offline activation using color QR codes process for compatible authenticators (multi-device activation)

  1. The user navigates to the 2-Step Offline Activation Using a Color QR Code page.
  2. The user enters their user name.
  3. The user enters the password.
  4. The user clicks Register.
  5. If this login is successful, the User Self-Management Website displays the Activation page with Activation Message 1 as a color QR code.
  6. On the mobile device, the user opens the OneSpan Mobile Authenticator.
  7. In the app menu, the user selects Add.
  8. The user follows the on-screen instructions to scan the color QR code and activate the OneSpan Mobile Authenticator.
  9. (OPTIONAL) Enter the device PIN.
  10. In the User Self-Management Website, the user enters the device code.
  11. The User Self-Management Website displays the Activation page, where Activation Message 2 is provided as a color QR code.
  12. The user scans this second image.
  13. The user chooses an authenticator name.
  14. In the User Self-Management Website, the user enters the generated activation signature displayed on the mobile device.
  15. If this was successful, the User Self-Management Website displays the Activation page with a message to indicate that the authentication has been successful.
  16. On the mobile device, the user confirms the process to finish the activation of the OneSpan Mobile Authenticator.