Configuring Dynamic User Registration (DUR)

Dynamic User Registration (DUR) allows to create a new user account automatically when the user credentials are validated using back-end authentication. The correct static password is sufficient to create a new user account.

DUR user information synchronization allows OneSpan Authentication Server to retrieve user information when a user account is created using DUR with an LDAP back-end server, by synchronizing the data from the LDAP back-end server to the respective user account data fields.

This topic provides a basic overview about configuring DUR and DUR user information synchronization.

Before you begin

• Ensure that your back-end server is operational.

• Ensure that you have OneSpan Authentication Server installed and configured for basic operation. This usually includes:

  • Importing authenticator records.
  • Creating client component records as required.

Configuring Dynamic User Registration (DUR) (Overview)

Configuring Dynamic User Registration (DUR)

1. Create a record for your back-end server in OneSpan Authentication Server (see Back-end authentication (Overview)).

2. (OPTIONAL) Specify the LDAP attributes to use for DUR user information synchronization.

   This step is required if you want to use DUR user information synchronization. It is only possible for LDAP back-end servers.

   You can specify the LDAP attributes:

   • Individually for each back-end server (via the Attribute Mapping section of the respective back-end server page).
   • Globally for all back-end servers in the global back-end settings (via the Attribute Mapping section on the BACK-END > Global Settingspage).

     If you do not specify the LDAP attributes in the back-end server record, OneSpan Authentication Server uses the values from the global back-end settings for the particular back-end server.

3. Prepare a new (or modify the existing) policy for your client component:

   • Policy > Back-End Authentication: If needed
   • Policy > Back-End Protocol: Value depending on your back-end server.
   • User > Dynamic User Registration: Yes

   • User > User Info Synchronization: Yes to enable DUR user information synchronization (OPTIONAL).

     This option is only effective, if you are using an LDAP back-end server.