Deleting a User Account

Deleting a user account is possible only if you have the required administrative privileges. You can only delete user accounts within your administrative scope.

If the target user account has authenticators assigned, they are unassigned and become available again. Authenticator instances are deleted.

Removable user data, i.e. custom user attributes, stored reports, and offline authentication data, will be deleted.

Before you begin

• Ensure that you have administrative access to the OneSpan Authentication Server Administration Web Interface.
• Ensure that you have the Delete User privilege assigned.

Deleting a user account

To delete a user account

1. Log on to the Administration Web Interface.

2. Locate the user account with one of the following methods:

   • Via the extended search:

     1. Select USERS > Find/manage.
     2. Specify the search criteria according to your needs.
     3. Click SEARCH.

   • Using the fast search:

     1. Type the user ID of the relevant user account in the FIND box on the main page.
     2. Select the USERS radio button.
     3. Click SEARCH.
   • Via the USERS > List tab.

3. Specify the user account to be deleted by doing one of the following:

   • Select the checkbox of the relevant user account. You can also select several checkboxes to delete several user accounts in one step.
   • Access the relevant user account directly, and switch to the User Account tab.

4. Select Delete from the Other Actions list menu.

   A confirmation window appears.

5. (OPTIONAL) Specify a successor user.

   The successor user takes ownership of all items assigned that cannot be deleted and may prevent the deletion of the target user, e.g. reports, tasks, or pending operations.

   The successor must be an administrative user account in the same domain as the user to be deleted.

6. If required, specify a checker administrator.

   This is only required if maker–checker authorization is enabled. In that case, type the checker administrator in the Checker box, using the user@domain format.

   Select the Execute the operation automatically after approval checkbox if you want the operation to be executed automatically upon approval by the checker administrator.

7. Click YES to confirm the operation.

   If maker–checker authorization is enabled, a respective pending operation is created for this action. Otherwise, the user account is deleted.

Additional considerations

• The target user, successor user, and checker administrator must all be different user accounts.
• If the target user has non-removable items assigned and you do not specify a successor user, the operation will fail.
• To ensure proper access to the transferred items after the deletion, the successor user should have the same administrative privileges as the user account to be deleted.

Additional tasks

• If maker–checker authorization is enabled, the command is not completed immediately, but must be authorized by another administrator, i.e. the checker administrator (see Approving a pending operation).
• After the pending operation has been approved by the checker administrator, you can complete it (see Executing an approved pending operation). If you selected the Execute the operation automatically after approval checkbox, the pending operation will be completed automatically on your behalf upon approval by the checker administrator.