Overview of the OneSpan Cloud Authentication Integration

With OneSpan Cloud Authentication you can integrate user registration, authenticator activation, and flows with remote authentication performed by a hardware authenticator or OneSpan Mobile Authenticator Studio, or a trusted device. Such a trusted device is a mobile application with an integration of the OneSpan Mobile Security Suite Orchestration SDK.

Preparing the integration of OneSpan Cloud Authentication

Integration of OneSpan Cloud Authentication with OneSpan Mobile Security Suite Orchestration SDK

To prepare the integration of OneSpan Cloud Authentication into your solution, proceed with the following steps:

• Download the WebApp Sample Code.

• Read the Orchestration SDK Integration Guide at Mobile Security Suite > Guides > Integration Guides.

• Download the relevant Orchestration SDK binary for Android and iOS, including the mobile application sample.

Integration of OneSpan Cloud Authentication with OneSpan Mobile Authenticator Studio

To be able to perform OneSpan Cloud Authentication Secure Channel and Push Notification-based operations, you need to integrate and customize OneSpan Mobile Authenticator Studio since this is the supported software authenticator for these operations. For integration and customization instructions, see the OneSpan Mobile Authenticator Studio product documentation.

Integration steps

To integrate OneSpan Cloud Authentication step-by-step

1. Implement the OneSpan Cloud Authentication user registration in your web application to start the authenticator provisioning.

2. Register your application for notification in the OneSpan Community Portal and optionally integrate the Orchestration SDK in your mobile application.

3. Implement OneSpan Cloud Authentication login and transaction in your web application to support OneSpan Cloud Authentication Secure Channel- and Push Notification-based operations.

   When implementing OneSpan Cloud Authentication, ensure to select the correct endpoints and request body values from the OneSpan Trusted Identity platform API:

   • For login operations with OneSpan Cloud Authentication, select LoginInput as the object type from the drop-down list of the POST /users/{userID@domain}/login endpoint.

   • For transaction operations, select TransactionValidationInput as the object type from the drop-down list of the POST /users/{userID@domain}/transactions/validate endpoint.