Challenge Type Multiple Word Answers

Setting Up OTP Anywhere 9-5 ■ Customize Failure Counter

9.5.1 Setup Overview

Table 9–3 describes the tasks for customizing OTP usage. The table also provides information on where to get more details about each task. Table 9–3 Tasks in the OTP Setup Task Description Documentation Task 1 - Configure UMS Enable and configure User Messaging Service UMS for SMS delivery gateways on the SOA that the OAAM Server is configured to send messages through and the SMS delivery channel. UMS comes with a number of drivers that handle traffic for a specific channel. Configure UMS to use SMS for sending the one-time password. Refer to Configure UMS . Task 2- Set up UMS URLs and credentials. Set up UMS URLs and credentials so that OAAM can communicate with the UMS server via web services APIs to send the OTP code to the user via the challenge type. Refer to Section 9.5.3, Configuring UMS Server URLs and Credentials. Task 3 - Enable SMS challenge type. Enable the SMS challenge type so that it can be used to challenge the user if secondary authentication is required. Refer to Section 9.5.4, Enabling and Defining the OTP Challenge. Task 4 - Make sure out-of-the-box policies are available and active Make sure out-of-the-box policies are available and active. Refer to Section 9.5.5, Configuring Policies and Rules to Use OTP Challenge. Task 5 - Enable Registration and User Preferences and registration options Enable registration and user preferences. The user can use the pages for profile registration and resetting OTP profile. Refer to Section 9.5.6, Enabling Registration and Preferences. Task 6 - Set up the registration and preferences page input fields and validations Set up the registration and preferences page input fields for the user. Input properties includes maximum length for the email address the user can enter, validation for the email address field expression, and so on. Note: Any user facing strings need to be duplicated into resource bundle. Refer to Section 9.5.7, Customizing Registration Fields and Validations. 9-6 Oracle Fusion Middleware Administrators Guide for Oracle Adaptive Access Manager

9.5.2 Configure UMS

Ensure that the following prerequisites are met before configuring OTP for your application.

9.5.2.1 Install SOA Suite

Oracle SOA Suite must be installed outside of the OAAM domains. UMS is a part of SOA. For information, refer to the Oracle Fusion Middleware Installation Guide for Oracle SOA Suite and Oracle Business Process Management Suite.

9.5.2.2 Configure the UMS Driver

UMS must be configured for appropriate delivery gateways on the SOA that the OAAM Server is configured to send messages through. UMS Drivers connect UMS to the messaging gateways, adapting content to the various protocols supported by UMS. Drivers can be deployed or undeployed independently of one another depending on what messaging channels are available in a given installation.

9.5.2.2.1 Email Driver Configure the Email driver to a SMTP server. See the

Configuring the Email Driver section of Oracle Fusion Middleware Administrators Guide for Oracle SOA Suite and Oracle Business Process Management Suite for how to configure the Email driver.

9.5.2.2.2 SMPP Driver Short Message Peer-to-Peer SMPP is one of the most popular

GSM SMS protocols. User Messaging Service includes a prebuilt implementation of the SMPP protocol as a driver that is capable of both sending and receiving short messages. Configure the SMPP driver as described in the Configuring the SMPP Driver section of the Oracle Fusion Middleware Administrators Guide for Oracle SOA Suite and Oracle Task 7 - Define the properties of the challenge for the OTP Define the properties of the challenge for the OTP. For example, define the required field for registration and register the challenge processor that is handling the type of processor. Refer to Section 9.5.10, Customizing Challenge Page Messaging. Task 8 - Customize the Message Containing the One Time Password Customize the Message Containing the One Time Password Refer to Section 9.5.11, Customizing OTP Message Text. Task 9 - Configure OTP presentation The type of device is defined for the specific type of challenge. Refer to Section 9.5.12, Configuring OTP Presentation. Note: For SMS, unlike the Email driver that is deployed out-of-the-box, you need to deploy the SMPP driver first before modifying the configurations. Table 9–3 Cont. Tasks in the OTP Setup Task Description Documentation