Software authenticators

Software authenticators are software versions of authenticators that provide authentication and signature functions for mobile devices and web browsers. They generate a one-time password (OTP) or electronic signature in the same way as hardware authenticators (see Hardware authenticators).

A software authenticator may be installed as an authenticator application on an existing non-OneSpan platform (such as a computer, smartphone, or other mobile device). This effectively makes the device emulate a hardware authenticator. The user then accesses the installed authenticator application to obtain a one-time password or electronic signature.

To be ready for use, a software authenticator requires:

  • Software installed on the client device
  • A unique activation code

Once installed on a host device, software authenticators need to be activated via an activation code. Once activated, the device can then be used to generate OTP values and electronic signatures. Software delivery and activation of the software authenticator is done during the provisioning process (see Software authenticator provisioning).

A software authenticator typically supports the following authenticator application types:

  • Response-Only
  • Challenge/Response
  • Signature

Software authenticator types

The following software authenticator types are supported by the Provisioning function in OneSpan Authentication Server:

Mobile Authenticator Studio

Mobile Authenticator Studio is a customizable mobile app facilitating two-factor authentication as well as e-signature generation to address the security risks of mobile and online applications. It is available for Android and iOS mobile devices.

OneSpan Mobile Authenticator

OneSpan Mobile Authenticator is a two-factor authenticator for one-time password (OTP) generation. The OTP displayed by the OneSpan Mobile Authenticator app can be used as back-up authentication mode when the push notifcation–based authentication does not succeed.The app is activated with a color QR code, and can be protected either with fingerprint recognition or a PIN code, depending on the available mobile device functionalities. It can contain multiple authenticator instances and can be installed on several mobile devices, allowing the use of multiple devices for the logon process. For more detailed information, refer to the OneSpan Mobile Authenticator Getting Started Guide.

The OneSpan Mobile Authenticator app is used for push notification–based authentication (see Push notifications via the OneSpan Mobile Authenticator app and Push notification–based authentication). For detailed information about the push notification solution, required components, and its setup with OneSpan Authentication Server, refer to the Push Notification Solution Guide.

OneSpan Mobile Security Suite

OneSpan Mobile Security Suite is a software development kit (SDK) to natively integrate application security, two-factor authentication, and electronic signatures into mobile applications developed by OneSpan customers. It consists of a library of dedicated APIs to strengthen mobile application security and facilitate mobile transactions across multiple user devices. Mobile Security Suite supports Android, iOS, and Windows Phone. For more detailed information, refer to the OneSpan Mobile Security Suite documentation suite.

Hybrid authenticators: Digipass 760

Digipass 760 is a hybrid device, composed of a hardware and a software component.