System administrator accounts

A new administrator account is created after running the OneSpan Authentication Server Setup Wizard (see OneSpan Authentication Server Appliance Installation and Maintenance Guide).

Disabling the default sysadmin user account

We recommend to disable the built-in sysadmin account after the new administrator account has been created. The new administrator account can then be used to log on to the OneSpan Authentication Server Appliance Configuration Tool and Administration Web Interface.

To disable the default sysadmin user account

1. Log on to the Configuration Tool with the new system administrator user account (see Accessing OneSpan Authentication Server Appliance Configuration Tool and OneSpan Authentication Server Administration Web Interface).
2. Select Settings > Authentication.

3. To disable the sysadmin user account, clear Enabled in the Sysadmin User section.

   Select Enabled again to enable the sysadmin user account. When enabling the sysadmin user account you will be prompted to type and confirm a new password.

   

   Figure: Disabling the sysadmin user account

Creating additional administrator accounts

Additional administrator accounts may be required. Typically, administrator accounts are created in the master domain. The administrative privileges of such accounts apply throughout all domains if they also have the Access data in all domains administrative privilege. It is also possible to create an administrator account for a specific domain only. The administrative privileges of such accounts will only apply to the domain in which they are created.

To create an administrator account

1. Log on to the OneSpan Authentication Server Administration Web Interface (see Accessing OneSpan Authentication Server Appliance Configuration Tool and OneSpan Authentication Server Administration Web Interface).
2. Select USERS > Create.
3. Type a user ID for the administrator.
4. Type the name of the master domain.
5. Type a static password twice to prevent typing errors.
6. Click Create.
7. Select Click here to manage.
8. Switch to the Admin Privileges page.
9. Click Edit.

10. Assign the necessary administrative privileges by selecting the respective privilege name.

    To access the Configuration Tool, assign the Appliance Administration privilege. Note that this is the only privilege required to access the Configuration Tool, all other privileges are used to configure access to OneSpan Authentication Server.

11. Click Save.