Change Password

The Orchestration SDK provides facilities for the user to change their password. The password was defined during the activation process.

The Orchestration SDK displays a virtual keypad or calls the password user authentication flow, where the user can enter the old password, and then define and confirm the new password. If an external user authentication by password has been configured the “User Authentication Flow” will be called.

A network request is required to check whether the entered old password is valid: an OTP is generated with the old password and validated on the Customer Application Server.

Change password workflow illustrates the change password workflow.

Change password workflow

New APIs are created for Swift users of the iOS SDK. For more information, refer to the Xcode API documentation on ChangePasswordDelegate for this workflow.

1. The user initiates the change password process using the Customer Mobile Application.

2. The Customer Mobile Application calls the startChangePassword method of the Orchestration SDK to change the user’s password.

3. The Orchestration SDK displays the virtual keypad or calls the password user authentication flow, where the user can enter their old password.

4. The Orchestration SDK generates a one-time password (OTP) with the old password, builds an orchestration command, and transmits it to the Customer Mobile Application using the onChangePasswordStepComplete method.

5. The Customer Mobile Application transmits the orchestration command to the Customer Application Server.

6. The Customer Application Server calls the orchestration-commands Web service of the OneSpan Trusted Identity platform by providing the orchestration command. A new orchestration command is returned as a result.

7. The Customer Application Server transmits the orchestration command to the Customer Mobile Application as a response to the previous request.

8. The Customer Mobile Application calls the execute method of the Orchestration SDK to continue the change password process (only if the OTP validation succeeded).

9. In case of successful user authentication, the Orchestration SDK displays the virtual keypad or calls the password user authentication flow, where the user can enter their new password.

10. If the password is not weak, the Orchestration SDK displays the virtual keypad or calls the password user authentication flow, where the user can confirm their new password.

11. The Orchestration SDK calls the onChangePasswordSuccess method to notify the Customer Mobile Application of the changed password.

12. The Customer Mobile Application notifies the user that the password has been successfully changed.

For more information about integrating this feature, see Change password.