Vasco Digipass token - policy parameters
This table lists the policy parameters specific to Vasco Digipass token credentials.
In addition to the policy parameters defined in this table, the policy parameter defined in the table in the chapter All credential types is also valid for Vasco Digipass token credentials.
Name | Data Type, Values | Default | Description |
---|---|---|---|
maxCredFailureCount | Data type: int (>0) or -1 | 3 | Maximum number of login failures before a password is definitely locked. If set to "-1", the max. failure counter is disabled. |
sendingMethod | Data Type: Comma-separated list of enums Values: any subset of PDFstore, Print, Email, HTMLemail, PDFemail, SMS_SMTP, PDFstream, None | None | Defines a fallback list of different methods of how a credential should be communicated to the user (if the first method fails for some reason, the second is tried, and so on). Method "Email" will fail if the user has no e-mail address or the address is invalid. Method "SMS_SMTP" will fail if the user has no mobile number or the mobile number is invalid. All methods (except None) will fail if the corresponding template is missing or one or more of the mandatory placeholders are empty. If sendingMethod was not defined at all, nevisIDM takes the default value. The default value has no fallbacks. Special sendingMethod for GUI: "PDFstream"This sendingMethod cannot be part of a fallback list. If "PDFstore" is configured, the following additional parameters can be defined:
SMS_SMTP.smtp.port: Port of the SMTP server. SMS_SMTP.message.from (mandatory): Sender of the SMS message. It has to be a valid e-mail address. SMS_SMTP.message.to (mandatory): Receiver of the SMS message. It has to contain the "${phonenumber}" placeholder. For example: ${phonenumber}@sms.mycompany.ch .SMS_SMTP.message.subject (mandatory): Subject of the e-mail sent to the SMTP gateway.
|
tmpLockingDuration | Data type: long | 60000 | Duration of the temporary locking in milliseconds. Use a tmpLockingDuration of at least 30000 since the exact duration cannot be guaranteed below this value. |
tmpLockingMode | Data type: String Values: strict, threshold | strict | strict: when the first temporary locking period is over, the user can try to log in only once before the next temporary locking period activates. threshold: the user can always try "tmpLockingThreshold" times to log in before the next temporary locking period activates. |
tmpLockingThreshold | Data type: int (>0) or -1 | 2 | Number of login failures before the Vasco Digipass token credential is temporarily locked. If set to "-1", the temporary lock is disabled. |