Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference Field Listings
7.5 Policy Property Sheet
Note
Changes to Policy settings will not take effect immediately. They will take effect
when the SBR Plug-In is restarted, once the Policy change is available to the
SBR Plug-In in the data store. Alternatively, if there is no restart, the cache of
Policy settings will refresh from the data store after approximately every 15
minutes.
Table 34: Policy Fields
Field Name in
Administration
Interfaces
Description
Description This description can be entered to record the purpose of the Policy.
Inherits from Policy Contains the Name of the Policy from which settings will be inherited, referred to as the
'parent Policy'. Settings are inherited individually, depending on the value in the Policy field;
they inherit the parent Policy value in the following cases:
Choice lists/radio buttons – if the selected value is Default
Text fields – if the field is blank
Numeric fields – if the field is blank (not 0)
List fields – if the list is empty
The Show Effective Policy Settings... button can be used to display the result of
inheriting settings combined with settings on the current Policy.
Local Authentication Specifies whether authentication requests using the Policy will be handled by the SBR Plug-
In using Local Authentication (see the Authenticating Users section in the Product
Guide for more details on Local Authentication and Back-End Authentication).
When Local Authentication is used, there are two factors that determine whether Digipass
authentication is used – any Policy restrictions on Digipass Types and/or Applications that
can be used and whether the Digipass User account has any assigned Digipass that meet
the restrictions. For example, if the Policy requires a DP300 and the User just has a DP700,
they cannot use Digipass authentication under that Policy.
Options:
Back-End
Authentication
Default Use the setting of the parent Policy.
None The SBR Plug-In will not carry out Local Authentication under this
Policy. They may be handled using Back-End Authentication, or not
handled at all by the SBR Plug-In.
Digipass/Password The SBR Plug-In will always carry out Local Authentication under this
Policy, using Digipass authentication if possible, otherwise the static
password. Back-End Authentication may also be utilized.
Digipass Only The SBR Plug-In will always carry out Local Authentication under this
Policy, using Digipass authentication. If Digipass authentication is not
possible, the user cannot log in. Back-End Authentication may also
be utilized.
Specifies whether authentication requests using the Policy will be handled by the SBR Plug-
Inusing Back-End Authentication (see the Authenticating Users section in the Product
Guide for more details on Local Authentication and Back-End Authentication).
Options:
Default Use the setting of the parent Policy.
None Back-End Authentication will not be used.
If Needed The SBR Plug-In will utilize Back-End Authentication but only in
certain cases:
Dynamic User Registration
© 2006 VASCO Data Security Inc. 87