authUser (Command)

The authUser command can be used to send the following requests to OneSpan Authentication Server:

• Authenticate with Response-Only
• Authenticate with Challenge/Response
• Authenticate with Push Notification
• Authenticate with Secure Channel, i.e. authentication with the getChallenge and getSecureChallenge commands (see getChallenge (Command) and getSecureChallenge (Command)).
• Change server PIN

Parameters

CREDFLD_SERIAL_NO is not returned, if a static password (and not an authenticator) was used for the authentication.

The CREDFLD_CHALLENGE attribute is used as input parameter for 1-step challenge/response authentication. If a user initiates a 2-step challenge/response authentication with a request keyword, the authUser command generates a response and returns it via the CREDFLD_CHALLENGE attribute as output parameter. For more information about challenge/response authentication, refer to the OAS Authentication SDK Programmer's Guide, Section "User authentication: Challenge/response".

Example

Authentication request via response-only with server PIN and OTP (as cleartext combined password)

<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
  <SOAP-ENV:Header/>
  <SOAP-ENV:Body>
    <aut:authUser xmlns:aut="http://www.vasco.com/IdentikeyServer/IdentikeyTypes/Authentication" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
      <credentialAttributeSet>
        <attributes>
          <value xsi:type="xsd:string">jane.doe</value>
          <attributeID>CREDFLD_USERID</attributeID>
        </attributes>
        <attributes>
          <value xsi:type="xsd:string">1234703557</value>
          <attributeID>CREDFLD_PASSWORD</attributeID>
        </attributes>
        <attributes>
          <value xsi:type="xsd:unsignedInt">0</value>
          <attributeID>CREDFLD_PASSWORD_FORMAT</attributeID>
        </attributes>
        <attributes>
          <value xsi:type="xsd:string">SOAP Auth Client</value>
          <attributeID>CREDFLD_COMPONENT_TYPE</attributeID>
        </attributes>
      </credentialAttributeSet>
    </aut:authUser>
  </SOAP-ENV:Body>
</SOAP-ENV:Envelope>