Authenticators

An authenticator is a device for providing one-time password (OTP) and electronic signature functionality to a user.

An organization can provide its users with authenticators to ensure that the users log in to secure systems via strong authentication. The authenticator provides the OTP values and the users can use these OTP values instead of or in addition to a static password for the logon. With devices that support this functionality, authentication transactions can be performed via Secure Channel feature of OneSpan Authentication Server and authenticators (see Secure Channel ).

In addition, an authenticator can also be used to sign transaction data. Here, the user manually enters key details of the transaction into the authenticator or, with devices that support this functionality, scans an image—either a QR code or a color QR code—provided on the transaction page, and receives a signature. The user then enters that signature into a transaction confirmation page to confirm that the transaction is authorized.

Virtual Mobile Authenticator is a mechanism where an OTP is generated by the server and sent to the user's mobile phone or email account. In this case, a physical authenticator device is not needed.

A software authenticator may be installed as an authenticator application onto an existing non-OneSpan platform (such as a computer, smart phone, or other mobile device). It can be used to generate an OTP or a signature in the same way as a physical hardware authenticator.