Authentication

In OneSpan Cloud Authentication (OCA), you can integrate different types of user authentication in your solution. Your users can authenticate:

• With a static password
• An offline one-time password (OTP)
• With Push Notification Message that is pushed from a server to a user and is displayed on an end-user device, e.g. a mobile device. Push notifications are received by a particular app. This must be registered on the corresponding server to receive notifications. Notifications can be sent at any time, the users do not have to be actively using the app at that time. messages (see Push Notification-based authentication)
• Based on the OneSpan Secure Channel feature (see Secure Channel-based authentication)
• With FIDO-based authentication (see FIDO-based authentication).

Various authenticators are supported for the different types of authentications.

Overview supported authenticators

Authentication type	Supported authenticators
Offline OTP	Hardware: authenticators with Response-Only support Software: Mobile Authenticator Studio
Push Notification-based	Software: Mobile Authenticator Studio Mobile Security Suite Orchestration SDK
Secure Channel-based	Hardware: authenticators with Cronto image support Software: Mobile Authenticator Studio Mobile Security Suite Orchestration SDK
FIDO-based	Hardware: UAF authenticator FIDO2 authenticator

For more information about the integration of user authentication with OneSpan Cloud Authentication, see the OneSpan Cloud Authentication Integration Guide.