Setting up OneSpan Authentication Server Appliance policies for Virtual Mobile Authenticator

Policies can be edited to use the following:

• primary Virtual Mobile Authenticator
• backup Virtual Mobile Authenticator
• Both

With backup Virtual Mobile Authenticator, restrictions are possible by time or number of uses. For more information about implementing Virtual Mobile Authenticator and its restrictions, refer to the OneSpan Authentication Server Appliance Product Guide, Section "Virtual Mobile Authenticator".

Setting up policies for primary Virtual Mobile Authenticator

To set up a policy for primary Virtual Mobile Authenticator

1. Log on to the OneSpan Authentication Server Administration Web Interface (see  Accessing OneSpan Authentication Server Appliance Configuration Tool and OneSpan Authentication Server Administration Web Interface).
2. Select POLICIES > List.
3. Select the policy where you want to enable Virtual Mobile Authenticator.
4. Switch to the Virtual DIGIPASS tab.
5. Click Edit.
6. Select a delivery method for Virtual Mobile Authenticator: Email, SMS, or Voice.

7. Select one of the following options as the request method:

   • Default. Use the setting of the parent policy.
   • None. Do not use primary Virtual Mobile Authenticator.
   • Keyword. Use the requestkeyword, with or without another item. The user needs to type the request keyword into the password field. This can be blank.
   • Keyword Only. Only the keyword will be accepted.
   • Password. Use the static password. The user needs to type the static password into the password field.
   • KeywordPassword. Use the requestkeyword followed by the static password. The user needs to type the request keyword followed by the static password into the password field. No separator characters or white spaces are allowed between them.
   • PasswordKeyword. Use the static passwordfollowed by the requestkeyword. The user needs to type the static password followed by the request keyword into the password field. No separator characters or white spaces are allowed between them.
8. If you have selected an option that includes the use of a request keyword, type it in the PVDP Request Keyword box.
9. Click Save.

Setting up policies for backup Virtual Mobile Authenticator

To set up a policy for backup Virtual Mobile Authenticator (Permitted, Not Mandatory)

1. Log on to the OneSpan Authentication Server Administration Web Interface (see  Accessing OneSpan Authentication Server Appliance Configuration Tool and OneSpan Authentication Server Administration Web Interface).
2. Select POLICIES > List.
3. Select the policy in which you want to enable Virtual Mobile Authenticator.
4. Switch to the Virtual DIGIPASS tab.
5. Click Edit.
6. Select a delivery method for Virtual Mobile Authenticator: Email, SMS, or Voice.
7. Select Yes – Permitted from the Enable Backup VDP list.
8. (OPTIONAL) Type the maximum number of uses. This will be calculated for each person using backup Virtual Mobile Authenticator.
9. Click Save.

To set up a policy for backup Virtual Mobile Authenticator (Permitted, Not Mandatory, Time-Limited)

1. Log on to the OneSpan Authentication Server Administration Web Interface (see Accessing OneSpan Authentication Server Appliance Configuration Tool and OneSpan Authentication Server Administration Web Interface).
2. Select POLICIES > List.
3. Select the policy where you want to enable Virtual Mobile Authenticator.
4. Switch to the Virtual DIGIPASS tab.
5. Click Edit.
6. Select a delivery method for Virtual Mobile Authenticator: Email, SMS, or Voice.
7. Select Yes – Time Limited from the Enable Backup VDP list.
8. Type a time limit (in days) in the Time Limit box. When the time period has passed (calculated from the first use), a user will no longer be permitted to use backup Virtual Mobile Authenticator.
9. (OPTIONAL) Type the maximum number of uses. This will be calculated for each person using backup Virtual Mobile Authenticator.
10. Click Save.

To set up a policy for backup Virtual Mobile Authenticator (Mandatory)

1. Log on to the OneSpan Authentication Server Administration Web Interface (see Accessing OneSpan Authentication Server Appliance Configuration Tool and OneSpan Authentication Server Administration Web Interface).
2. Select POLICIES > List.
3. Select the policy where you want to enable Virtual Mobile Authenticator.
4. Switch to the Virtual DIGIPASS tab.
5. Click Edit.
6. Select a delivery method for Virtual Mobile Authenticator: Email, SMS, or Voice.
7. Select Yes – Required from the Enable Backup VDP list.
8. (OPTIONAL) Type the maximum number of uses. This will be calculated for each person using backup Virtual Mobile Authenticator.
9. Click Save.

A backup Virtual Mobile Authenticator may also be enabled for individual users via each user record. Settings in the user record take precedence over the respective policy settings.