Dynamic User Registration (DUR)

Dynamic User Registration (DUR) allows to create a new user account automatically when the user credentials are validated using back-end authentication. The correct static password is sufficient to create a new user account. DUR saves the administrative work of manually creating or importing a user account.

DUR is typically used together with the following features:

• auto-assignment. OneSpan Authentication Server selects a random authenticator and assigns it to the new user account as it is created..

  If maker–checker authorization is enabled, assigning an authenticator requires the approval of a checker administrator. In that case, auto-assignment is not available.

• self-assignment. This allows new users to assign an authenticator to their accounts as part of their logon process.

For more information about authenticator assignment features, see Assigning authenticators to users.

To control the creation of new accounts, DUR can be used with the following features:

• Windows name resolution. This prevents that more than one user account is created for the same Windows user account, when they use different user ID formats to authenticate.
• Windows group check. This allows a staged creation of user accounts and assignment of authenticators.

A typical DUR process using auto-assignment and Windows group check is illustrated in Figure: Dynamic User Registration (Process).

Figure:  Dynamic User Registration (Process)