Device Binding

For device binding, the following form fields must be used on the Device Binding page and posted to the User Self-Management Website servlet (action="devicebinding"):

Device Binding form fields

Form field name	Visible label	Description
username	User Name	Required. The user name for logging on to User Self-Management Website. The maximum length is 255 characters.
derivationcode	Derivation Code	Required. The derivation code used to bind the Mobile Authenticator Studio application to the device. The maximum length is 128 characters.
commit	Bind Device	Required. The button to submit data entered by the user to OneSpan Authentication Server.
replay_token	<hidden>	Required. Internally used form field to prevent re-transmission of form data.

Device binding process

1. The user navigates to the Device Binding page.
2. The user enters their user name.
3. The user enters the derivation code they have received from the administrator.
4. The user clicks Bind Device.