English
- English
- French

TID Local Authentication (Policy)

18 Oct 2024
2 Minutes to read

Share
Dark
Light

TID Local Authentication (Policy)

Updated on 18 Oct 2024
2 Minutes to read

Share
Dark
Light

Article summary

Did you find this summary helpful?

Thank you for your feedback

The following is an overview of the relevant default settings of local authentication with Intelligent Adaptive Authentication.

Parent policy: Identikey Local Authentication
Applicable mode(s):
- Create
- Update

Parameter name	Default value	Description
TID Local Authentication—Default parameter settings
appl_type	Response-Only	Application Type This controls which authenticator application type (e.g. Response-Only, Challenge/Response) may be used. Possible values: Default. Use the setting of the parent policy. No Restriction. Any type of authenticator application may be used. Response Only. Only authenticator applications of type RO (Response-Only) or MM (multi-mode) may be used. Challenge/Response. Only authenticator applications of type CR (Challenge/Response) or MM (multi-mode) may be used. Signature. Only authenticator applications of type SG (Signature) or MM (multi-mode) may be used. Multi-Mode. Only authenticator applications of type MM (multi-mode) may be used.
pvdp_req_method	None	Request Method The method by which a user has to request a Virtual Mobile Authenticator login. The request is made in the password field during login. The request will be ignored if the user does not have a Virtual Mobile Authenticator assigned. Possible values: Default. Use the setting of the parent policy. None. Do not use primary Virtual Mobile Authenticator. Keyword. Use the request keyword, with or without another item. The user needs to type the request keyword into the password field. This can be blank. Keyword Only. Only the keyword will be accepted. Password. Use the static password. The user needs to type the static password into the password field. KeywordPassword. Use the request keyword followed by the static password. The user needs to type the request keyword followed by the static password into the password field. No separator characters or white spaces are allowed between them. PasswordKeyword. Use the static password followed by the request keyword. The user needs to type the static password followed by the request keyword into the password field. No separator characters or white spaces are allowed between them.
initial_window	1 hour	Initial Time Window This controls the maximum allowed time variation between an authenticator and the host system, the first time that the authenticator is used. The time is specified in hours. This Initial Time Window is also used directly after a Reset Application operation, which can be used if it appears that the internal clock in the authenticator has drifted too much since the last successful login. This only applies to time-based authenticators when verifying an OTP. In either case, after the first successful login, the initial time window is no longer active.
event_window	10 events	Event Window This controls the maximum allowed number of event variations between an authenticator application and the host system during login. This only applies to event-based authenticator applications and always applies for OTP verification. For signature validation, it depends on the online signature level setting whether the event window is used or not.

Was this article helpful?

What's Next

TID Local Authentication with Static Password (Policy)