Online authentication

Online authentication occurs when a user authenticates to Microsoft Windows via Digipass Authentication for Windows Logon, and the client computer can establish a connection to OneSpan Authentication Server Appliance via the network. OneSpan Authentication Server Appliance performs authentication in real time.

Figure: Digipass Authentication for Windows Logon online authentication

The user ID, password (optional), and one-time password (OTP) are sent to OneSpan Authentication Server Appliance for verification.

If the OTP credentials are valid, Digipass Authentication for Windows Logon receives the static Windows user password from OneSpan Authentication Server Appliance and uses it to authenticate to Microsoft Windows.

If offline authentication is enabled, OneSpan Authentication Server Appliance also sends (encrypted) offline authentication data to Digipass Authentication for Windows Logon. Offline authentication data is used for offline authentication when no connection to OneSpan Authentication Server Appliance can be established.

Digipass Authentication for Windows Logon and OneSpan Authentication Server Appliance communicate via SOAP using HTTPS.