Time synchronization

Mobile Authenticator Studio may use the device time to compute OTPs and e-signatures. Because the device time is susceptible to modifications by user and/or network interactions, it is possible to synchronize the time used by the application with the time on the authentication server. This is necessary for the validation of time-based OTPs and e-signatures. The actual device time is not affected by this functionality.

The synchronization can take place in online or offline mode.

• Online synchronization

  Mobile Authenticator Studio submits an HTTP request to the server to obtain its time in seconds since Epoch. This reference is used to calculate the difference between server and device time.

  Online synchronization is available if the feature has been enabled in the Mobile Authenticator Studio configuration file.

• Offline synchronization

  The application prompts the user to enter the GMT time used by the server in that particular moment. The user needs to obtain the server time through a different channel, e.g. a website or a phone call. From this time, the authenticator application calculates the difference between server and device time.

  Offline synchronization is available if the feature has been enabled in the Mobile Authenticator Studio configuration file.