Virtual Mobile Authenticator setup

There are three basic options available when implementing Virtual Mobile Authenticator with OneSpan Authentication Server:

• primary Virtual Mobile Authenticator only
• backup Virtual Mobile Authenticator with hardware or software authenticators
• Combination of primary Virtual Mobile Authenticator and backup Virtual Mobile Authenticator

Importing Virtual Mobile Authenticator records

Primary Virtual Mobile Authenticator records are provided in a DIGIPASS export file (DPX), with a DPX file key, similar as you would receive for regular authenticator records. Import them as you would import regular authenticator records.

A backup Virtual Mobile Authenticator does not have records of its own. Information about backup Virtual Mobile Authenticator is contained in the authenticator record that is being supplemented by the backup Virtual Mobile Authenticator.

Setting up the SMS gateway

The Message Delivery Component (MDC) service requires a third-party SMS gateway to send SMS messages to a user's mobile phone. This is not included in the OneSpan Authentication Server package.

If required, configure an ID and password for MDC to use when passing text messages to the SMS gateway.

Setting up the mail server

Setting up Message Delivery Component (MDC)

Message Delivery Component (MDC) is included in the OneSpan Authentication Server setup and can be installed during the installation of OneSpan Authentication Server. For more information about installing OneSpan Authentication Server, refer to the OneSpan Authentication Server Installation Guide for Windows or the OneSpan Authentication Server Installation Guide for Linux, respectively.

To configure MDC for Virtual Mobile Authenticator

1. Enable or disable delivery methods.
2. Create a profile for each SMS gateway used by MDC.
3. Configure the connection to the mail server.

Configuring OneSpan Authentication Server

If MDC is installed on a different machine than OneSpan Authentication Server, then OneSpan Authentication Server must be configured with the connection details.

To configure OneSpan Authentication Server for Virtual Mobile Authenticator

1. Start the OneSpan Authentication Server Configuration Utility.
2. Switch to the Scenarios tab.
3. Select the Authentication Scenario in the Available Scenarios list.

4. Switch to the General tab and configure the MDC service settings:

   1. If the MDC service is installed on a different server than OneSpan Authentication Server, adapt the values of MDC Server Address and MDC Server Port accordingly.

   2. (OPTIONAL) Enter the MDC Server Pool Size.

      This is the number of concurrent connections to the MDC service. Each connection is used to handle one message delivery and will be closed when completed.

   3. (OPTIONAL) Enter the MDC Server Timeout.

      This is the timeout (in seconds) for requests that are sent to the MDC service. This value should be longer than the connection timeouts configured for the respective gateways in the MDC configuration.

   4. Click OK to save the settings and exit the Configuration Utility.
5. Click Yes to confirm restarting the OneSpan Authentication Server service.

After configuring OneSpan Authentication Server, you will need to adapt the respective policies accordingly. For more information, see Configuring policies for Virtual Mobile Authenticator (for Virtual Mobile Authenticator) or Configuring policies for virtual signatures (for virtual signatures).