Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference Active Directory Schema
2 Active Directory Schema
2.1 Schema Extensions
The following tables document the changes required by Digipass Plug-In for SBR to the Active
Directory schema when AD is used as the data store.
2.1.1 Added Object Classes
Table 1: Custom Active Directory Object Classes
Attribute Type Location Explanation
vasco-UserExt Aux.
Class
vasco-DPToken Class Unassigned – Optional
User record Extra VASCO attributes are added to an Active Directory
User record via an 'auxiliary class' vasco-UserExt on the
User class.
Assigned – with User
record
The vasco-DPToken class is used to store Digipass
attributes. It is also a container, in which vasco-
DPApplication records for that Digipass are stored.
Upon assignment to a User, the Digipass record is stored
in the same location as the User.
vasco-DPApplication Class Within Digipass record This class is used to store Digipass Application attributes,
such as Server PIN and expected OTP length.
vasco-Policy Class Digipass Configuration
Container
vasco-Component Class Digipass Configuration
Container
vasco-BackEndServer Class Digipass Configuration
Container
2.1.2 Added Attributes
Table 2: Custom Active Directory Object Attributes
Name Class
vasco-SerialNumber vasco-DPToken
vasco-TokenType vasco-DPToken
vasco-ApplicationNames vasco-DPToken
vasco-ApplicationTypes vasco-DPToken
vasco-LinkVascoDigipassToUserExt vasco-DPToken
vasco-TokenAssignedDate vasco-DPToken
vasco-GracePeriod vasco-DPToken
vasco-EnableBVDP vasco-DPToken
vasco-BVDPExpiryDate vasco-DPToken
vasco-BVDPUsesLeft vasco-DPToken
vasco-DirectAssignOnly vasco-DPToken
vasco-AdditionalAttribute vasco-DPToken
vasco-SerialNumber vasco-DPApplication
vasco-ApplicationName vasco-DPApplication
vasco-ApplicationNumber vasco-DPApplication
Policy attributes. Attributes will commonly be shared via
inheritance.
Component attributes include the License Key for SBR
Plug-In Components.
Information required for connection to back-end servers.
© 2006 VASCO Data Security Inc. 16