Authentication

On the Authentication page, you can configure the authentication settings of Digipass Authentication for OWA Basic.

Configuring authentication settings

Enable OWA Basic authentication

Select this option to allow the Digipass Authentication Module to intercept authentication requests using the authentication server.

Timeout (in min)

Specify the session timeout in minutes. After this period of time, users need to re-authenticate if no HTTP requests have been submitted.

If a static password was used in the logon (rather than an OTP), the session may not appear to time out, as both browser and IIS can cache and automatically replay a password to reconnect. However, if an OTP was used in the logon, the session will time out as expected, as the OTP cannot be reused.

Replace user names with user attributes

Select this option to replace each user ID with a user attribute. If this option is not selected, each user ID will be left unmodified. There are three possible results:

• Setting enabled and user attribute set: The user ID set in the attributes for the relevant Digipass user account will be passed to the website.

• Setting enabled and user attribute not set: The user ID entered during logon will be passed to the website.

• Setting disabled: The user ID entered during logon will be passed to the website.

Replace passwords with user attributes

Select this option to replace each user’s password with a user attribute. There are three possible results:

• Setting enabled and user attribute set: The password set in the attributes for the relevant user account will be passed to the website.

• Setting enabled and user attribute not set: The password entered during logon will be passed to the website.

• Setting disabled: The password entered during logon will be passed to the website.

  The stored password will override the password entered during logon if Stored Password Proxy is ON and the user has a stored password.

Attribute group

Type the attribute group name to use. Each user attribute is set based on an attribute group name. This allows multiple Digipass Authentication Modules to use different values for the same user attributes without confusion.

This option is not typically required for Outlook Web Access/Outlook on the web.

HTML file

Specify the HTML page that will be presented to a user if their logon is rejected by the Digipass Authentication Module.

The browser used for the logon attempt may either display the page immediately or pop up the logon dialog. If the logon dialog is popped up, clicking Cancel will cause the failed logon page to be displayed.

Realm

Specify the realm. The realm is usually the computer, system, etc. that is being logged on to. If the realm property is set in IIS, its value will appear in a standard basic authentication logon dialog box displayed by the browser when IIS requests user logon details.

This option is not typically required for Outlook Web Access/Outlook on the web, as Exchange does not use the Realm property.