License types

A license is necessary to functionally enable the OneSpan Authentication Server server module and certain client-side components.

There are two types of licenses available:

  • Evaluation license. Such licenses last for a limited length of time and allow you to evaluate the product (see Evaluation licenses).
  • Commercial license. These are full operating licenses used in production environments (see Commercial licenses).

Server licenses

OneSpan Authentication Server requires a license key for each instance. This license key is tied to the network location (IP address), where OneSpan Authentication Server is installed and listens for requests. It is stored in the OneSpan Authentication Server server component record.

If the license key is missing, invalid, or expired, administrative logons are still allowed for configuration and management purposes, but all other services, such as authentication, will be unavailable. A license key is required for all of the following:

  • SOAP
  • RADIUS
  • Authentication
  • Signature validation
  • Digipass Authentication for Windows Logon
  • EMV-CAP
  • HSM

The SEAL service does not require a server license and is activated by default.

Component licenses

Some client components—such as the Digipass Authentication Module products or Digipass Authentication for Windows Logon—require a license key to be loaded into their client component record. OneSpan Authentication Server, to which they connect, will otherwise reject all authentication requests from them.

SOAP and RADIUS clients

SOAP and RADIUS functionality must be enabled in the OneSpan Authentication Server license for these clients to be operative.

As of OneSpan Authentication Server 3.23, SOAP is by default enabled in all licenses. If your license was created prior to product version 3.23, you can contact OneSpan Support and request a free license upgrade.

Digipass Authentication for Windows Logon

DIGIPASS Authentication for Windows Logon is a pre-defined SOAP-based client component used for Digipass Authentication for Windows Logon. Client component records of this type require a valid client component license.

A client component record of this type with location default is automatically created during installation. If the client component used to serve an authentication request by a Digipass Authentication for Windows Logon client does not have a client component license, OneSpan Authentication Server falls back to the client component record with the default location. If the default client component record has no valid license loaded either, the authentication request is rejected.

OneSpan User Websites

IDENTIKEY User Websites is a pre-defined SOAP-based client component used for OneSpan User Websites clients. Unlike other SOAP clients it does require a valid license key in the client component record. However, it does not require SOAP authentication to be enabled in the OneSpan Authentication Server license.

DIGIPASS Gateway

DIGIPASS Gateway is a pre-defined SOAP-based client component used for DIGIPASS Gateway clients in the context of push notifications. Unlike other SOAP clients it does require a valid license key in the client component record. However, it does not require SOAP authentication to be enabled in the OneSpan Authentication Server license.

Evaluation licenses

Server licenses and client component licenses can be evaluation licenses.

An evaluation license allows you to use its full functionality for testing purposes until the evaluation period expires. At the end of the evaluation period, you need to either stop using the product or obtain a permanent commercial license.

Contact your distributor or the appropriate OneSpan reseller representative to acquire the licenses you will need. For your convenience, the evaluation serial number is embedded in the installation program. You will still need to obtain and load a license key.

Commercial licenses

With the purchase of a commercial license, the licensing process requires the maintenance reference, serial number, IP address, and other appliance-specific data to be registered on the OneSpan Customer Portal. This information identifies the product to OneSpan to issue a license key, which can be uploaded to make OneSpan Authentication Server fully operational.

Once OneSpan Authentication Server is licensed, full functionality is available permanently.