---
title: "Step 1. Configure the Auth Server"
slug: "dpo-oob-step-1-configure-the-auth-server"
updated: 2026-10-27T20:13:12Z
published: 2026-10-27T20:13:12Z
canonical: "docs.onespan.com/dpo-oob-step-1-configure-the-auth-server"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onespan.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Step 1. Configure the Auth Server

If you created one universal app, similar to OneSpan Passport, to handle OOB authentication for your apps, then perform this step.

Otherwise, skip this step. It is better security-wise for your client apps to hardcode the registration and authentication endpoints and ignore the URLs embedded in the QR code and push notifications.

Use the Admin Console to enter the endpoints used by the second device to register and authenticate the user. These are the same endpoints used for registration and authentication when there is only one device. If you are using the Digipass S3 API Server, these URLs are automatically created when you install the API Server. Typical URLs are

- https://<load-balancer-hostname>.<domain-name>:<port>/nnlgateway/nnl/reg
- https://<load-balancer-hostname>.<domain-name>:<port>/nnlgateway/nnl/auth

The Auth Server encodes these URLs into QR codes and push notifications. If you have multiple tenants, make sure you assign unique URLs otherwise you cannot guarantee in which tenant a user will be registered.

1. Login to the Admin Console and, if needed, switch to the desired tenant. Navigate to the out-of-band properties, **Configuration > Authentication Methods > Out of Band**.
2. Update **Registration URL** and **Authentication URL** with the OOB registration and OOB authentication URLs, respectively.