Maker–Checker Authorization Workflow

Figure: Maker–Checker authorization workflow

In the OneSpan Authentication Server Administration Web Interface, the maker administrator selects the operation that needs approval and designates a checker administrator. The system sends a notification via email (notification messages are customizable) to the checker administrator that there is a pending administrative operation. In case of approval, the maker administrator receives notification that the operation has been authorized and is ready for execution.

Administrators, other than the designated checker, can approve/reject pending operations, if they either have master administrator privileges with Access Data in All Domains assigned to them, or if they have administrative privileges within their respective domains or organizational units.