Version 3.22 (October 2021)

A new syncTokenAndHost command has been added to the SOAP authentication interface that allows users to synchronize the device time or event counter of their authenticators with the authentication server.

This is useful for scenarios where an authenticator has not been used for a long period of time or the authenticator clock has drifted too far. The synchronization supports time- and event-based authenticator applications.

As of 3.22, OneSpan Authentication Server allows you to restrict the maximum number of assigned authenticators allowed per user for specific authenticator types.

The authenticator type limit is a string value (1024 characters) containing a list of comma-separated key/value pairs of authenticator type/limit and can be managed via a new user attribute, i.e. POLICYFLD_DP_TYPE_LIMIT.

The following commands of the SOAP administration interface have been extended to directly manage the authenticator type limit:

• POLICYCMD_CREATE

• POLICYCMD_GET_EFFECTIVE_POLICY

• POLICYCMD_UPDATE

• POLICYCMD_VIEW

• policyQuery

A new deleteFinishedTasks command has been added to the SOAP administration interface to remove old finished tasks. This allows you to clean up the task list and remove completed tasks regularly to maintain clarity and avoid performance issues with the task management.

The command takes the age in days of the finished tasks to be deleted as parameter. All finished tasks with an end date (completion) older or equal than this value will be deleted. The command schedules a server task itself that processes the server task table. If required, the cleanup task can be configured to recur on a daily or monthly basis.