OneSpan Risk Analytics Presentation Service offers three different ways of authentication:

• Basic authentication via PBKDF2 password hash
• Authentication with back-end/domain authentication domain credentials with OneSpan Authentication Server
• Authentication via OpenID Connect

PBKDF2 password hash authentication

For the authentication via PBKDF2 password hash, the user parameters and password policies (password strength, threshold for the number of attempts, inactivity) are stored directly in the OneSpan Risk Analytics database.

Back-end/domain authentication

For back-end/domain authentication with OneSpan Authentication Server, OneSpan Risk Analytics users use their own back-end/domain authentication credentials as for other applications. With this, OneSpan Risk Analytics users avoid having to remember multiple passwords because they can use their DIGIPASS hardware or software authenticators to secure their access and at the same time still comply with bank security requirements.

For authentication via back-end/domain credentials, OneSpan Authentication Server must be installed.

To authenticate with OneSpan Authentication Server (if this option is enabled and configured), open Risk Analytics Presentation Service and click Sign in as OAS user if this method is not the default authentication method. On the Sign in as OAS user page, users must enter the domain, user name, and static password. The password is administrated in OneSpan Authentication Server.

To enable the authentication method with OneSpan Authentication Server, the OAS authentication method must be enabled and several parameters must be configured in the OneSpan Risk Analytics Presentation Service web.config file.

OpenID Connect authentication

To authenticate via OpenID Connect (if this option is enabled and configured), open Risk Analytics Presentation Service and click Sign in as OpenID user if this method is not the default authentication method. On the Sign in as OpenID user page, click SIGN IN WITH OPENID. In the corresponding fields of the user login form, enter your user name or email and password and click Log In.

To enable the authentication method with OpenID Connect, the OpenId authentication method must be enabled and several parameters must be configured in the OneSpan Risk Analytics Presentation Service web.config file.