Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference Web Sites
9.4.1.5 Login Test – Challenge Page
The user enters their response to the challenge or the OTP sent to their mobile phone to
complete the login test.
The following posted form fields must be used on the challenge page:
Table 44: Form Fields for Login Test Challenge Page
Form Field
Name
Visible Label
(Default)
Value(s) Required?
dpcgi_operation “testlogin” for Login Test. Y
dpcgi_success_page Relative or absolute URL of web page to go to if the
function is successful.
dpcgi_fail_page Relative or absolute URL of web page to go to if the
function fails.
dpcgi_userid UserID User ID in the SBR Plug-In. Y
dpcgi_response Digipass Response Digipass response. Y
dpcgi_challenge Challenge Digipass challenge returned to the user. Y
Note
If you make dpcgi_challenge a visible form field, make sure that it is not
modifiable. An alternative is to make it a hidden form field, while also
displaying the challenge in HTML text rather than as a form field.
9.4.2 OTP Request Site
9.4.2.1 Request Page
The request page must contain the following fields:
Table 45: Form Fields for OTP Request Page
Name Type
Username text Visible
Password Password Visible
dpcgi_operation “VDPrequest” Hidden
dpcgi_vdp_success_page Name of “OTP was sent” Page Hidden
dpcgi_vdp_fail_page Name of “OTP not sent” Page Hidden
dpcgi_vdp_wrongtoken_page Name of “Not a Virtual Digipass” Page Hidden
© 2006 VASCO Data Security Inc. 109
Y
Y