Skip to main content

Software OTP

With Software OTP Provider, you can implement software-based two-factor authentication. The authenticator is a one-time password that the user must provide in addition to their login and password to get access to an application.

The one-time password is generated autonomously on a mobile device (a phone, a smartphone, or a tablet) with a dedicated application (for example, Axidian Key or Google Authenticator). The one-time password is generated based on two parameters: the secret key set at the authenticator registration stage, and the current time.

The authentication technology is based on a system where, for a given user secret key, only one valid one-time password exists at any given moment. Therefore, knowing the secret key, the server can verify the one-time password provided by the user. For the technology to work correctly, the time on the mobile device and on the authentication server must match (a deviation is allowed, and its value can be adjusted by the administrator).

Software OTP can be used for authentication in the following modules:

Provider ID
{0FA7FDB4-3652-4B55-B0C0-469A1E9D31F0}
Provider ID for NPS RADIUS Extension
{B772829C-4076-482B-B9BD-53B55EA1A302}

Prerequisites​

The provider requires Bsp Broker installed on the Axidian Access server.

Files for Bsp Broker are located at Axidian Access <version number>/Axidian Providers/Axidian Bsp Broker/<version number>.

  • AuthProviders.BspBroker-<version number>.x64.en-us.msi — the installation package of Bsp Broker for 64-bit operating systems.
  • AuthProviders.BspBroker-<version number>.x86.en-us.msi — the installation package of Bsp Broker for 32-bit operating systems.

Install the provider​

  1. Run the AuthProviders.SoftwareTOTP.Provider-<version number>.<bitness>.en-us.msi installation file located at Axidian Access <version number>\Axidian Providers\Axidian Software OTP Provider\<Version number> and follow the steps of the installation wizard.

    Important

    If several Core Servers are used in your infrastructure, install the provider on all the servers of the infrastructure.

  2. After the installation is complete, a system restart may be required. If the installation wizard prompts you to restart the system, confirm this action.

  3. To remove or restore the product, open the Control panel menu and use the standard procedure for the supported operating systems.

Policy template files are located at Axidian Access <version number>\Misc\ADMX Templates.

Forced authenticator verification​

You can configure forced authenticator verification for the authenticator registration.

  1. Go to Configuration → Authenticators and select Software TOTP from the list.
  2. In the General settings section, enable the forced verification. An additional confirmation window for entering the authentication data appears during registration.
  3. Enter the authentication data you have received and click Confirm.