Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference Audit Messages
Message
Code
I007003 A RADIUS Access-Reject has been
issued.
I007004 A RADIUS Accounting-Response has
been issued.
I008001 A Digipass has been moved for
assignment to a user.
I008002 A user-to-user link has been removed
due to assignment of a Digipass.
I009001 A Virtual Digipass One Time Password
has been delivered.
Description Notes
The SBR Plug-In has rejected an Access-Request.
The SBR Plug-In has acknowledged an Accounting-Request.
Note however that unless the request is forwarded to a
RADIUS Server, no processing is carried out by the SBR
Plug-In.
Upon assignment of a Digipass to a User, if the Digipass is
not already in the same location (Organizational Unit) as
the User, it is moved to that location.
If a Digipass User Account is linked to another in order to
share the Digipass, it must not have a Digipass assigned
itself. If a Digipass is assigned, the link will be broken.
The MDC successfully delivered a text message via the
HTTP gateway, as reported by the gateway. The audit
message may contain further details from the gateway.
Note that depending on the gateway, it may still be
possible for delivery to fail after the gateway has reported
success.
I010001 User authentication was not handled. The SBR Plug-In decided not to handle an authentication
request due to Policy and/or Digipass User Account
settings. The main reasons why this may occur are: the
effective Local Authentication and Back-End
Authentication settings were both None; the User failed
the Windows Group Check, using the Pass requests for
users not in listed groups back to host system option.
Note that the 'effective' settings are the effective settings
of the Policy, unless the Digipass User Account overrides
the Policy.
I010002 A stored password change was
unhandled.
I011001 A Digipass Grace Period has been ended
by the use of a One Time Password.
I011002 A Backup Virtual Digipass expiration
date has been set due to the first
request for a Virtual One Time
Password.
I011003 A Backup Virtual Digipass time limit has
been expired by the use of the normal
One Time Password.
The SBR Plug-In decided not to handle a password change
request due to Policy and/or Digipass User Account
settings. The main reasons why this may occur are: the
effective Local Authentication and Back-End
Authentication settings were both None; the User failed
the Windows Group Check, using the Pass requests for
users not in listed groups back to host system option.
Note that the 'effective' settings are the effective settings
of the Policy, unless the Digipass User Account overrides
the Policy.
The first time that an assigned Digipass is used
successfully to log in, if a Grace Period is still active, it is
ended immediately. They must continue to use their
Digipass to log in after that point.
A User has requested a Backup Virtual Digipass OTP for the
first time, when the effective Backup VDP Enabled
setting is Yes – Time Limited and they did not already have
an Enabled Until date set on their Digipass. At this time,
they are given the Time Limit from the Policy by adding it
to the current date.
A User who has been using Backup Virtual Digipass has
used their normal OTP login using the Digipass again.
When the effective Backup VDP Enabled setting is Yes –
Time Limited, using the normal OTP login ends their time
limit immediately. This is done by setting the Enabled
Until date on their Digipass to the current date.
An administrator action is required to reset their Enabled
© 2006 VASCO Data Security Inc. 171