Create a 2-Step Challenge/Response Template

To set up the logon page for 2-step Challenge/Response logons

1. Back up the existing logon page.

2. Copy over the existing page with the supplied logon page in %PROGRAMFILES%\OneSpan\Digipass Authentication for OWA Forms\Templates\OWAF VERSION\logon.aspx.

   -OR-

   modify the existing page with OneSpan code.

   Modifying the existing page with custom OneSpan code should only be used as an alternative if copying over the templates does not work. This might be the case because the logon page was modified by Microsoft, e.g. with a patch. In that case, you need to modify the page manually: compare the template with the original file and merge the Digipass sections into the original file.

   Make sure you insert the OneSpan code in the correct location in the file. Refer to the example logon file delivered with the Digipass Authentication Module to find out where the OneSpan code needs to go in your custom logon page.

3. On the Authentication page of the Configuration Center, specify the HTML site for 2-step Challenge/Response.

   You can use the example Challenge_template.html page, which is located in %PROGRAMFILES%\OneSpan\Digipass Authentication for OWA Forms\Templates\Common. You can modify this template, or use the example template as is.

   The Challenge/Response template must be correctly labeled for the used character encoding, which is configured in the related site configuration. The template must contain a number of keywords which the extension will replace with the appropriate HTML code.

   These fields are:

   • DPEXT_FORM_METHOD. This is replaced with the configured form method. The replaced content represents the value of the method attribute of the HTML form.

   • DPEXT_FORM_ACTION. This is replaced with the configured logon submit URL path and query strings. The replaced content represents the value of the action attribute of the HTML form.

   • DPEXT_PASSWORD_FIELD_NAME. This is replaced with the configured password field name and has to be the value of the name attribute of the corresponding HTML form field.

   • DPEXT_CHALLENGE_TEXT. This string is replaced with the challenge issued.

   • DPEXT_HIDDEN_FIELDS. This is replaced with any fields submitted from the logon page and has to be part of the HTML form.

   These fields may appear more than once in the file, and each instance will be replaced.