PIN Change

For PIN change, the following form fields must be used on the PIN Change page and posted to the User Self-Management Website servlet (action="pinchange"):

PIN Change form fields
Form field name Visible label Description
username User Name Required. The user name for logging on to User Self-Management Website. The maximum length is 255 characters.
password Static Password Optional. The password for logging on to User Self-Management Website. The maximum length is 128 characters.
response Digipass Response Required. The response as calculated by the authenticator (without the static PIN if there is one).
currentpin Current PIN

Required. The current static PIN that is to be changed.

A current PIN does not exist if the administrator had to reset the server PIN of that authenticator.

newpin New PIN Required. The new static PIN. The maximum length is 8 characters.
confirmpin Confirm New PIN Required. The new PIN, re-entered in this field. Must be the same as the value entered in New PIN.
commit Change PIN Required. The button to submit data entered by the user to OneSpan Authentication Server.
replay_token <hidden> Required. Internally used form field to prevent re-transmission of form data.

Authenticator PIN change process

  1. The user navigates to the PIN Change page.
  2. The user enters their user name.
  3. (OPTIONAL) The user enters their static password.
  4. The user enters the authenticator response as displayed in the device (without any PIN).
  5. The user enters the current PIN (if any) and the new PIN, and confirms the new PIN.