Scenario: User Login

This scenario uses the workflow tree illustrated in User login workflow tree.

User login workflow tree

Before you begin

Ensure that you have completed the steps described in Scenario: User registration.

Walkthrough: User login

Walkthrough: User login

1. Use the following URL to start the login process:

   https://your_instance_url/openam/XUI/?realm=/&service=OneSpan-XUI-Adapative-Authentication-User-Login-Sample-Tree#login

2. Enter your user name and click LOG IN.

3. The User Login service checks the browsing context and analyzes the risk of the end-user login. If no step-up authentication is configured in Risk Analytics Presentation Service, the outcome will be Accept or Decline, depending on the risk score.

   However, because of the rules defined in the course of the product setup, the User Login service will challenge you by sending a remote authentication request to your trusted device.

4. The trusted device receives a notification prompting for step-up authentication. Alternatively, you can also scan the Cronto image with the Adaptive Authentication Services (AAS) mobile demo app. The Cronto image contains the same request information.

5. The Adaptive Authentication Services (AAS) mobile demo app handles the orchestration command, displays the event details, and prompts you to pass the challenge.

6. When the login process is completed, the Adaptive Authentication Services (AAS) mobile demo app indicates that the event was successfully authenticated, and the browser is redirected to the success URL.

7. In Risk Analytics Presentation Service, select SUPERVISE & INVESTIGATE > Latest Events, and review the event.

   

   User login event in Risk Analytics Presentation Service

You can modify the ForgeRock Login node and add attributes for additional configuration options. For more information about these configuration options, see Integrating end-user login and event validation via notification.

Additional considerations

The workflow tree uses the following sample nodes:

• OneSpan Sample Error Display

• OneSpan Sample Store Command

The OneSpan Sample nodes are provided and included in the OneSpan Authentication for ForgeRock package for demonstration purposes only. You should not use these nodes in production environments, but replace them with your own node implementations.

Next steps

After completing this scenario, you can continue with Scenario: Validate transaction event and Scenario: Validate non-monetary events.