PIN Change
For PIN change, the following form fields must be used on the PIN Change page and posted to the User Self-Management Website servlet (action="pinchange"):
Form field name | Visible label | Description |
---|---|---|
username | User Name | Required. The user name for logging on to User Self-Management Website. The maximum length is 255 characters. |
password | Static Password | Optional. The password for logging on to User Self-Management Website. The maximum length is 128 characters. |
response | Digipass Response | Required. The response as calculated by the authenticator (without the static PIN if there is one). |
currentpin | Current PIN |
Required. The current static PIN that is to be changed. A current PIN does not exist if the administrator had to reset the server PIN of that authenticator. |
newpin | New PIN | Required. The new static PIN. The maximum length is 8 characters. |
confirmpin | Confirm New PIN | Required. The new PIN, re-entered in this field. Must be the same as the value entered in New PIN. |
commit | Change PIN | Required. The button to submit data entered by the user to OneSpan Authentication Server. |
replay_token | <hidden> | Required. Internally used form field to prevent re-transmission of form data. |
Authenticator PIN change process
- The user navigates to the PIN Change page.
- The user enters their user name.
- (OPTIONAL) The user enters their static password.
- The user enters the authenticator response as displayed in the device (without any PIN).
- The user enters the current PIN (if any) and the new PIN, and confirms the new PIN.