changeBackendPassword (Command)
  • 21 Jan 2025
  • 1 Minute à lire
  • Sombre
    Lumière
  • PDF

changeBackendPassword (Command)

  • Sombre
    Lumière
  • PDF

The content is currently unavailable in French. You are viewing the default English version.
Résumé de l’article

The changeBackendPassword command serves to change the user's static Active Directory password with a configured back end of OneSpan Authentication Server. The user must authenticate in OneSpan Authentication Server using local authentication, for this operation to succeed.

If password randomization is enabled in OneSpan Authentication Server, the effective policy used by OneSpan Authentication Server must not apply password proxying for the changeBackendPassword SOAP command. Otherwise, this will lead to a user with a randomized password being able to change the password.

Parameters

  changeBackendPassword input parameters
Parameter nameData typeDescription
componentTypeStringRequired. Specifies the component to which the password change is applied.
userUserInputRequired. The user input information (see UserInput (Data type)). This specifies the user who changes the password.
credentialCredentialInputRequired. The credential parameters used to authenticate the user.
newStaticPasswordStringRequired. The new password to be set for the user.
  changeBackendPassword output parameters
Parameter nameData typeDescription
statusCommandStatusResponse

Required. The error stack, if applicable, which indicates that the command has not completed successfully. This also includes the result and status codes returned by the command.

resultChangeBackendPasswordResultOptional. The returned information about user and user credentials.

UserInput (Data type)

  UserInput (Data type)
Element nameData typeDescription
userIDStringThe user ID.
domainStringOptional. The user domain.

CredentialInput (Data type)

  CredentialInput (Data type)
Element nameData type

Description

staticPasswordStringThe current static password of the user.
responseStringThe one-time password (OTP) sent by the user to obtain the challenge necessary for changing the back-end password.
serialNumberStringThe serial number of the authenticator used for changing the back-end password.
pinStringThe user's current server PIN.
pinChangePinChangeThe parameters to be used when changing the PIN.
challengeStringThe challenge entered by the user to change the back-end password.
challengeKeyStringThe key that is used to refer to the challenge that is generated by OneSpan Authentication Server.
requestHostCodeRequestHostCodeEnumeration

Possible values:

  • No
  • Optional
  • Required

The default input value is No.

PinChange (Data type)

  PinChange (Data type)
Parameter nameData typeDescription
currentPinStringRequired. The user's current PIN.
newPinStringRequired. The new PIN, to be set by the user.

ChangeBackendPasswordResult (Data type)

  ChangeBackendPasswordResult (Data type)
Element nameData type

Description

userUserOutput

The returned user information.

credentialCredentialOutputThe returned information about the user credentials.

UserOutput (Data type)

  UserOutput (Data type)
Element nameData typeDescription
userIDStringThe resolved user ID.
domainStringThe user domain.
orgUnitStringOptional. The organizational unit of the user.

CredentialOutput (Data type)

  CredentialOutput (Data type)
Element nameData typeDescription
serialNumberStringThe serial number of the used authenticator.
hostCodeStringThe host code. This is returned only if the corresponding attribute field was specified in the authentication request and the authentication has been successful.
challengeStringThe challenge used by the end user to generate the response.

Example

 

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
  <soapenv:Header/>
  <soapenv:Body>
    <aut:changeBackendPassword xmlns:aut="http://www.vasco.com/IdentikeyServer/IdentikeyTypes/Authentication">
      <componentType>SOAP-LocalAuth</componentType>
      <user>
        <userID>user_pws</userID>
        <domain>MASTER</domain>
      </user>
      <credential>
        <staticPassword>Test1234</staticPassword>
      </credential>
      <newStaticPassword>newPass1</newStaticPassword>
    </aut:changeBackendPassword>
  </soapenv:Body>
</soapenv:Envelope>

Cet article vous a-t-il été utile ?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.
ESC

Ozzy, facilitant la découverte de connaissances grâce à l’intelligence conversationnelle