provisioningExecute SOAP Request Structure

A provisioningExecute SOAP request typically uses the following format:

<SOAP-ENV:Envelope
xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:PROV-TYPES="http://www.vasco.com/IdentikeyServer/IdentikeyTypes/Provisioning">
<SOAP-ENV:Body>
  <PROV-TYPES:provisioningExecute>
    <cmd>PROVISIONCMD_REGISTER</cmd>
    <attributeSet>
      <attributes>
        <valuexsi:type="xsd:string">DP4Mobile Provisioning Sample Client</value>
        <attributeID>PROVFLD_COMPONENT_TYPE</attributeID>
      </attributes>
      <attributes>
        <valuexsi:type="xsd:string">testuser</value>
        <attributeID>PROVFLD_USERID</attributeID>
      </attributes>
      <attributes>
        <valuexsi:type="xsd:string">master</value>
        <attributeID>PROVFLD_DOMAIN</attributeID>
      </attributes>
      <attributes>
        <valuexsi:type="xsd:string">1.Password</value>
        <attributeID>PROVFLD_STATIC_PASSWORD</attributeID>
      </attributes>
      <attributes>
        <valuexsi:type="xsd:string">336619</value>
        <attributeID>PROVFLD_CUSTOM_ENCRYPT_PWD</attributeID>
      </attributes>
    </attributeSet>
  </PROV-TYPES:provisioningExecute>
</SOAP-ENV:Body>

The SOAP body element should only contain a provisioningExecute element (line 7). This element is defined in the namespace prov. Therefore, the prov namespace needs to be declared in the Envelope element as an attribute.

A valid provisioningExecute request must follow these additional rules:

• The provisioningExecute element should contain only one AttributeSet element.
• The provisioningExecute element should contain only one cmd element.
• The AttributeSet element should contain zero or more provisioning attributes elements.

Each attribute element should contain the following sub-elements:

• attributeID (required). The attribute identifier. The supported credential attribute identifiers are listed in SOAP authentication (Overview).
• value (required). The attribute value. This element also requires the specification of the value type using the following attribute definition xsi=type=”xsd:type.

• attributeOptions (optional). This element provides directive information about how OneSpan Authentication Server should handle the attribute value during request processing. Following options are supported for this element:

  • NULL. Indicates that the specified attribute should be set to zero.
  • NEGATIVE. Used for search criteria to say NO when searching for a specific attribute.
  • MASKED. Used to indicate OneSpan Authentication Server to mask the attribute value (e.g. when auditing the SOAP request).

To set an attribute option, add the option element in the attributeOptions element and give the option element the value true.

To set the MASKED option, add the following:

<attributeOptions><masked>true</masked></attributeOptions>