What is a One Time Password

9-4 Oracle Fusion Middleware Administrators Guide for Oracle Adaptive Access Manager

9.5 Setting Up OTP Anywhere

This section contains details for advanced set up of OTP Anywhere and discusses the following topics: ■ Setup Overview ■ Configure UMS ■ Configuring UMS Server URLs and Credentials ■ Enabling and Defining the OTP Challenge ■ Configuring Policies and Rules to Use OTP Challenge ■ Enabling Registration and Preferences ■ Customizing Registration Fields and Validations ■ Customizing Terms and Conditions ■ Customizing Registration Page Messaging ■ Customizing Challenge Page Messaging ■ Customizing OTP Message Text ■ Configuring OTP Presentation Table 9–2 Quick Start for Enabling OTP Out of the Box Task Details 1 Enable OTP Anywhere Registration OTP Challenge is not enabled by default. It has to be enabled by setting the following properties to true: ■ bharosa.uio.default.register.userinfo.enabled Setting this property to true enables OTP profile in the registration flow ■ bharosa.uio.default.userpreferences.userinfo.ena bled Setting this property to true enables the OTP profile in User Preferences 2 Make SMS Challenge Type Available. Enable the SMS Challenge Type by setting the following property to true: bharosa.uio.default.challenge.type.enum.Challenge SMS.available This makes it possible for the policies to challenge using OTP via SMS. 3 Configure UMS URLs and Credentials. Set the following properties: ■ bharosa.uio.default.ums.integration.webservice - UMS Web service URL ■ bharosa.uio.default.ums.integration.parlayx.endp oint - UMS ParlayX URL ■ bharosa.uio.default.ums.integration.useParlayX=f alse - Configures use of Web service or parlayx API. Value is false by default preferred. ■ bharosa.uio.default.ums.integration.userName - UMS integration user name ■ bharosa.uio.default.ums.integration.password - UMS integration password Setting Up OTP Anywhere 9-5 ■ Customize Failure Counter

9.5.1 Setup Overview

Table 9–3 describes the tasks for customizing OTP usage. The table also provides information on where to get more details about each task. Table 9–3 Tasks in the OTP Setup Task Description Documentation Task 1 - Configure UMS Enable and configure User Messaging Service UMS for SMS delivery gateways on the SOA that the OAAM Server is configured to send messages through and the SMS delivery channel. UMS comes with a number of drivers that handle traffic for a specific channel. Configure UMS to use SMS for sending the one-time password. Refer to Configure UMS . Task 2- Set up UMS URLs and credentials. Set up UMS URLs and credentials so that OAAM can communicate with the UMS server via web services APIs to send the OTP code to the user via the challenge type. Refer to Section 9.5.3, Configuring UMS Server URLs and Credentials. Task 3 - Enable SMS challenge type. Enable the SMS challenge type so that it can be used to challenge the user if secondary authentication is required. Refer to Section 9.5.4, Enabling and Defining the OTP Challenge. Task 4 - Make sure out-of-the-box policies are available and active Make sure out-of-the-box policies are available and active. Refer to Section 9.5.5, Configuring Policies and Rules to Use OTP Challenge. Task 5 - Enable Registration and User Preferences and registration options Enable registration and user preferences. The user can use the pages for profile registration and resetting OTP profile. Refer to Section 9.5.6, Enabling Registration and Preferences. Task 6 - Set up the registration and preferences page input fields and validations Set up the registration and preferences page input fields for the user. Input properties includes maximum length for the email address the user can enter, validation for the email address field expression, and so on. Note: Any user facing strings need to be duplicated into resource bundle. Refer to Section 9.5.7, Customizing Registration Fields and Validations.