- 23 Oct 2024
- 4 Minutes à lire
- SombreLumière
- PDF
Step 3: post-activation
- Mis à jour le 23 Oct 2024
- 4 Minutes à lire
- SombreLumière
- PDF
...
<PostActivationbinding="false"cryptoAppIndex="1">
<OnlinePostActivation.../>
<!-- OR -->
<!--<OfflinePostActivation .../>-->
Viewtitle="First OTP">
<Fields>
<Fieldid="Challenge"name="Challenge"comment="Enter the challenge." />
</Fields>
<Labels>
<Labelid="ClipboardCopyHostCode"value="Server response copied to clipboard" />
<Labelid="ClipboardCopyResponse"value="Derivation code copied to clipboard" />
<Labelid="OnlineServerActivationWaitMessage"value="Activation confirmation, please wait..." />
<Labelid="ResultHostCode"value="Serverresponse:" />
<Labelid="ResultResponse"value="Your derivation code is:" />
<Labelid="SerialNumber"value="Serial number:" />
</Labels/>
<Dynamics>
<Dynamicid="ResultHostCode"class="generated" />
<Dynamicid="ResultResponse"class="generated" />
<Dynamicid="SerialNumber"class="text" />
</Dynamics>
<Errors>
<Errorid="ChallengeEmpty"value="The activation response does not include a challenge." />
<Errorid="ChallengeTooShort"value="The minimal length for the challenge is %_MinLength_%." />
<Errorid="ChallengeTooLong"value="The maximal length for the challenge is %_MaxLength_%." />
</Errors>
</View>
</PostActivation>
</StandardActivation>
Functional customization
StandardActivation > PostActivation: This element is used to configure the post-activation functionality.
binding: Enable device binding. This attribute is optional. The generated response will be an OTP (false) or a derivation code (true). The default value is false.
To share the same derivation data between several applications on the same iOS device, the application must use the same Bundle Seed ID. On other platforms, the derivation data is always shared.
cryptoAppIndex: Defines the index of the cryptographic application used to generate the response. This attribute is mandatory.
Post-activation mode
Post-activation can be done either in an online or in an offline process. Only one mode must be used.
Online post-activation
<PostActivationbinding="false"cryptoAppIndex="1">
<OnlinePostActivationdestroyOnFailure="false" displayMessageOnSuccess="false">
<URLmethod="GET"value= "http://MY_DOMAIN_NAME/..." />
<OnlinePostActivation>
...
...
</PostActivation>
StandardActivation > PostActivation > OnlinePostActivation
destroyOnFailure: Indicates whether Mobile Authenticator Studio must be destroyed if post-activation fails. The default value is false.
displayMessageOnSuccess: Used to specify if the server message must be displayed for a successful post-activation process. The default value is false.
StandardActivation > PostActivation > OnlinePostActivation > URL: This element must be used to define the URL from which to retrieve the activation data.
Masks for online post-activation URL lists the masks for the online post-activation URL.
Mask | Value | Advanced provisioning protocol required? | Standard provisioning protocol required? |
---|---|---|---|
%_RegistrationIdentifier_% | This is the identifier which will be used by the server to identify the user. This mask is mandatory. | Yes | Yes |
%_OTP_% | This is the generated OTP if the value attribute of the URL element contains the %_OTP_% mask. This mask is mandatory if derivation is false. | Yes | Yes |
%_DerivationCode_ | This is the generated derivation code. This mask is mandatory if derivation is true. | Yes | Yes |
%_Challenge_% | This is the used challenge if the application used to generate the response is in Challenge/Response mode. This mask is optional. | Yes | Yes |
%_Version_% | This is the Mobile Authenticator Studio version. This mask is optional. | Yes | Yes |
%_SerialNumber_% | This is the serial number. This mask is optional. | Yes | Yes |
%_UserIdentifier_% | This is the user identifier. This mask is optional. | Yes | Yes |
%_InitialVector_% | This is the initial vector. | Yes | No |
%_Nonce_% | This is the server nonce used with the advanced provisioning protocol. | Yes | No |
%_DeviceIdentifier_% | This is the unique identifier of the device (hexadecimal, 64 characters). This mask is optional. | Yes | Yes |
%_RootingStatus_% | This is the status indicating if the device is rooted. Possible values are true or false. | Yes | Yes |
Offline post-activation
<PostActivationbinding="false" cryptoAppIndex="1">
<OfflinePostActivationdisplaySerialNumber="false" responsePattern="XX-XX-XX"hostCodePattern="XX-XX.XX"
centered="false" />
...
...
</PostActivation>
StandardActivation > PostActivation > OfflinePostActivation
displaySerialNumber: Indicates whether the Mobile Authenticator Studio serial number is displayed. This attribute is optional. The default value is false.
responsePattern: Can be used to apply a display pattern to the generated response. This attribute is optional. The default value is No formatting.
hostCodePattern: Can be used to apply a display pattern to the generated host code. This attribute is optional. The default value is No formatting.
centered: Used to specify if the result must be centered or top-aligned. The default value is false.
For more information about the attributes of the PostActivation elements, refer to the Mobile Authenticator Studio Product Guide.
The system does not offer a scrollbar in centered mode. The page view may, however, be truncated if the content to be displayed is larger than the available screen size.
Graphical customization
StandardActivation > PostActivation > View: This element defines the graphical rendering of the post-activation functionality. The background of the element is not customizable.
title: The default value is PostActivation.
StandardActivation > PostActivation > View > Fields > Field:
id="Challenge": This is the field for the challenge if the application that generates the response is in Challenge/Response mode.
StandardActivation > PostActivation > View > Labels > Label:
id="ClipboardCopyHostCode": This message is displayed when the user copies the generated host code. It is displayed on Android devices only.
id="ClipboardCopyResponse": This message is displayed when the user copies the generated response. It is displayed on Android devices only.
id="OnlineServerActivationWaitMessage": This message is displayed while waiting for the server activation.
id="ResultHostCode": This is the label of the generated host code.
id="ResultResponse": This is the label of the generated response.
id="SerialNumber": This is the label of the Mobile Authenticator Studio serial number.
StandardActivation > PostActivation > View > Dynamics > Dynamic:
id="ResultHostCode": Can be used to customize the rendering of the generated host code.
id="ResultResponse": Can be used to customize the rendering of the generated response.
id="SerialNumber": Can be used to customize the rendering of the Mobile Authenticator Studio serial number.
StandardActivation > PostActivation > View > Errors >Error:
id="ChallengeEmpty": The activation response does not include a challenge.
id="ChallengeTooShort": The minimum challenge length is %_MinLength_%.
The %_MinLength_% mask is used by Mobile Authenticator Studio to replace the minimum length of the challenge in the error message.
id="ChallengeTooLong": The maximum challenge length is %_MaxLength_%.
The %_MaxLength_% mask is used by Mobile Authenticator Studio to replace the maximum length of the challenge in the error message.