Use Case Scenario: User Login With OneSpan Cloud Authentication

Involved solutions:

• OneSpan Cloud Authentication (OCA)

• Mobile Authenticator Studio

About this scenario

This scenario simulates a user login workflow.

It uses a demo site designed for a technical audience to learn how the technology can be used in a realistic scenario.

Before you begin

For this scenario you need a pre-configured Mobile Authenticator Studio app installed on a mobile device.​ The app can be configured and downloaded from the OneSpan Cloud Authentication Technical Evaluation website (https://gs.onespan.cloud/te-oca-sample/mas).

You must have completed the user registration workflow (see Use case scenario: User registration with offline MDL activation).​

Walkthrough: User login

To log in with static password only

1. Sign in to the Community Portal and select the OneSpan Cloud Authentication Evaluation tile on the Demos > Interactive page.

   This will take you to the demo website at https://gs.onespan.cloud/te-oca-sample.

2. If required, type your Intelligent Adaptive Authentication tenant ID.

   You can find your tenant ID in the sandbox configuration page of your Community Portal account.

   You will not be prompted for the tenant ID if you append it to the URL, i.e. https://gs.onespan.cloud/te-oca-sample?t=tenant_id. The tenant ID is automatically added to the URL as long as you stay on the website.

3. Switch to the Login page.

4. Select Manual Login as the login method.

5. Select Password as the authentication method.

6. Type the password and username of the registered user.

7. Click either Login as User or Login as Admin.

   The demo website submits a message to /users/{userID@domain}/login and signs in the user in case of success.

To log in with an authenticator (OTP, PIN, serial number)

1. Sign in to the Community Portal and select the OneSpan Cloud Authentication Evaluation tile on the Demos > Interactive page.

   This will take you to the demo website at: https://gs.onespan.cloud/te-oca-sample.

2. Type your Intelligent Adaptive Authentication tenant ID.

   You can find your tenant ID in the sandbox configuration page of your Community Portal account.

3. Switch to the Login page.

4. Select Manual Login as a login method.

5. Select Authenticator as the authentication method.

6. Type the credentials:

   • The authenticator PIN code (optional).

   • The one-time password (OTP) created by the authenticator.

   • The authenticator serial number (optional).

   • The username of the registered user.

7. Click either Login as User or Login as Admin.

   The demo website submits a message to /users/{userID@domain}/login and signs in the user in case of success.

Additional considerations

• At various stages in the demo you can click Populate to fill in dummy data or recover data that you may have changed in previous steps of the workflow.

• After you successfully logged in as a regular user, you can switch to the User Board page, where you can inspect user details and sign transactions.

• After you successfully logged in as administrative user, you can switch to the Admin Board page, where you can simulate various administrative tasks.

Next steps

After completing this scenario, you can continue with the following:

• Use case scenario: Transaction signing

• Use case scenario: User administration

• Use case scenario: Authenticator administration