MDL User Registration

The multi-device licensing (MDL) user registration operation enables a user to register an authenticator compliant with the MDL model for provisioning.

The MDL user registration operation can involve the following optional processes:

• Creating a user account in OneSpan Authentication Server after successful back-end authentication.
• Assigning a new authenticator license to the user if this user does not yet have an authenticator license matching the assigned policy limits.
• Generating the challenge for Activation Message 1.

The user registration operation is the first step in the MDL provisioning process. This operation returns Activation Message 1, which must be transferred to the authenticator to generate a device code. This operation is followed by the MDL device registration operation (see MDL device registration).

Activation Message 1 must be transferred to the authenticator. This can be done encoded as a QR code or a color QR code, which the user scans with the camera of the device.

OneSpan Authentication Server requires a successful user authentication before generating Activation Message 1 for the assigned authenticator license.

The following registration types are supported, based on the type of user authentication:

• Local authentication with a shared historical secret (static password)
• Dynamic User Registration (DUR) using a back-end system for authentication

Local authentication with a shared historical secret is a registration type that assumes that user accounts and static passwords have been pre-loaded into OneSpan Authentication Server.