13.04.2013 Views

Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference - Vasco

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

<strong>Digipass</strong> <strong>Plug</strong>-<strong>In</strong> <strong>for</strong> <strong>SBR</strong> <strong>Administrator</strong> <strong>Reference</strong> Web Sites<br />

9.4 Form Fields<br />

9.4.1 User Self Management Web Site<br />

9.4.1.1 Registration – Main Pages<br />

User Registration (UR), <strong>Digipass</strong> Assignment (DA) and Password Synchronization (PS) are all<br />

implemented using a single invocation of the CGI program. This permits them to be carried out<br />

either separately or in any combination. You can choose to separate them in your customized<br />

web site or keep them together as you prefer.<br />

If Challenge/Response or a Virtual <strong>Digipass</strong> is used, the user will enter their User ID, static<br />

password and Serial Number into the main page without a <strong>Digipass</strong> Response. They will be<br />

directed to a challenge page, which is specified in the next topic, in which they should enter<br />

either a Response to the challenge or the OTP sent to their mobile phone. The following table<br />

applies only to the main page.<br />

The following posted <strong>for</strong>m fields must be used on the main page, according to the particular<br />

function and other conditions specified below:<br />

Table 40: Form Fields <strong>for</strong> Main Registration Page<br />

Form Field Name Visible<br />

Label<br />

(Default)<br />

Value(s) Required?<br />

dpcgi_operation “register” <strong>for</strong> User Registration, <strong>Digipass</strong> Assignment or<br />

Password Synchronization.<br />

dpcgi_success_page Relative or absolute URL of web page to go to if the<br />

function is successful.<br />

dpcgi_fail_page Relative or absolute URL of web page to go to if the<br />

function fails.<br />

dpcgi_challenge_page Relative or absolute URL of web page to go to if a<br />

challenge is returned <strong>for</strong> the user.<br />

UR PS DA<br />

Y Y Y<br />

Y Y Y<br />

Y Y Y<br />

(4) (1)<br />

dpcgi_userid UserId UserID in the <strong>SBR</strong> <strong>Plug</strong>-<strong>In</strong>. Y Y Y<br />

dpcgi_password Password Static password. Y Y Y<br />

dpcgi_serialno Serial<br />

Number<br />

dpcgi_response <strong>Digipass</strong><br />

Response<br />

<strong>Digipass</strong> serial number. Y<br />

<strong>Digipass</strong> response (without static PIN if there is one). (5) (2)<br />

dpcgi_newpin New PIN New static PIN (<strong>for</strong> Go 1/Go 3). (3)<br />

dpcgi_confirmpin Confirm New<br />

PIN<br />

Confirm the new static PIN. (3)<br />

dpcgi_usecombinedpwd “True” to send the password, serial number, response<br />

and PIN to the <strong>SBR</strong> <strong>Plug</strong>-<strong>In</strong> in one attribute.<br />

“False” to send the contents of the password field<br />

(1) If any users may self-assign a Challenge/Response <strong>Digipass</strong>, provide this <strong>for</strong>m field.<br />

(2) If any users may self-assign a Response Only <strong>Digipass</strong>, provide this <strong>for</strong>m field.<br />

© 2006 VASCO Data Security <strong>In</strong>c. 104

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!