Creating Multiple Credential Issuance Profiles and Authentication Policies

Products

• CA Advanced Authentication - Strong Authentication (AuthMinder / WebFort)

Issue/Introduction

Document discusses briefly the Creation an additional ArcotOTP (TOTP) credential and linking the Issuance Profile to a specific Authentication Policy. The excerpts below deal with TOTP only.   Other tokens such as HOTP etc can be created and linked using the guidance in this document.

Environment

Release : 9.1

Component : AuthMinder(Arcot WebFort)

Cause

Not Applicable.

Resolution

The two TOTP Profile/Policy combinations that are used in this scenario are as follows:

Issuance Profiles linked to Autentication Policy to allow Multiple Credentials

Issuance Profile is iTOPT1    (

Authentication Policy is aTOPT1

Issuance Profile is iTOPT2    (

Authentication Policy is aTOPT2

The Profiles and Policies mentioned above need to be created using the Global Admin Console and as shown in the screen shots below. Note that in the example below the string “TOTP1” in Issuance related “Usage Type” should also be in Authentication “Usage type for Verification” to create a Issuance to Authentication linkage. Only iTOPT1 and aTOPT1 screens are shown below, similar setting can done for iTOTP2 and aTOTP2 and linkage configured.

 

Additional Information

None.