Enabling or disabling an authenticator

You can explicitly enable or disable an authenticator (setting the authenticator status). If an authenticator is disabled, it cannot be used for regular user operations, such as authentication, administrative logon, transaction data signature validation, or provisioning requests. However, a disabled authenticator can be manually assigned to a user. When authenticator records are imported, they are enabled by default.

Before you begin

• Ensure that you have administrative access to OneSpan Authentication Server Administration Web Interface.

• Ensure that you have the Update DIGIPASS privilege assigned.

Enabling or disabling an authenticator

The procedure to enable or disable an authenticator varies depending on whether you start from the Digipass tab or from the User tab.

To enable/disable an authenticator from the Digipass tab

1. Sign in to the Administration Web Interface.

2. Specify the authenticator by doing one of the following:

   • View the authenticator list via DIGIPASS > List and select the respective authenticator from the result list.

   • Locating the authenticator using extended search:

     1. Select DIGIPASS > Find/manage.

     2. Specify the search criteria according to your needs.

     3. Click SEARCH.

     4. Select the authenticator in the result list.

   • Locating the authenticator using fast search:

     1. Type the authenticator serial number in the FIND box on the main page.

     2. Select the DIGIPASS radio button.

     3. Click SEARCH.

     4. Select the authenticator in the result list.

3. Click ENABLE or DISABLE as required.

   The authenticator status of the selected authenticators is set accordingly.

To enable/disable an authenticator from the User tab

1. Sign in to the Administration Web Interface.

2. Select USERS > List.

3. Click on the user ID of the user to whom the authenticator is assigned.

   The User Properties page is displayed.

4. Switch to the Assigned DIGIPASS tab.

5. Select the authenticators to set the authenticator status.

6. Click ENABLE or DISABLE as required.

   The authenticator status of the selected authenticators is set accordingly.

Additional considerations

• The time of the last change to an authenticator's status is tracked separately from the authenticator record's general modification timestamp.

• If you enable or disable an authenticator license (multi-device licensing), the status of the linked authenticator instances may automatically change depending on the global Propagate DIGIPASS status setting.

• If you enable or disable an authenticator instance, the authenticator status of the respective authenticator license is not affected.

• If you disable an authenticator license, users cannot create new authenticator instances with that license.