---
title: "Score-based authentication"
slug: "oas-pg-score-based-authentication-3-28"
updated: 2025-07-04T10:04:30Z
published: 2025-07-07T13:58:21Z
canonical: "docs.onespan.com/oas-pg-score-based-authentication-3-28"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onespan.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Score-based authentication

Score-based authentication extends authenticator responses to include scoring information. A score-based response includes the status of the hosting platform or the Digipass SDK usage context. The response can be based on different criteria that are grouped in three categories:

- Platform. Criteria linked to the platform that hosts the application, e.g. the jailbreak or rooting status.
- User. Criteria linked to the person that is using the application, e.g. the password protection status.
- Context. Criteria linked to the current usage of the application, e.g. the geolocation information.

The list of criteria that is considered as relevant to calculate the score in a particular situation is determined by the application that integrates the Digipass SDK.

OneSpan Authentication Server does not fully support score-based authentication. It can verify an OTP value to be valid, even with a score-based authenticator application. However, if OneSpan Authentication Server detects a score warning, it will reject the OTP (even an otherwise valid one). You can detect this case in the error stack information included in the respective audit message, e.g. "{Error Code: '(-140)' ; Error Message: 'Serial VDS1010000-1 Application APP 1 RO OTP Incorrect - Operation Successful with Platform & User Warning'}".