IM Input Additional Registration Field Definitions Examples

Implementing OTP Anywhere 11-19

11.10.3.3 Register Voice Challenge Processor

The properties to register the Voice challenge processor and mark service as available or unavailable are listed below.

11.11 Challenge Use Case

An example challenge scenario is presented below. 1. Oracle Adaptive Access Manager Server presents the user with the user name page. 2. The user submits his user name on the user name page. 3. Oracle Adaptive Access Manager fingerprints the user device and runs pre-authentication rules to determine if the user should be allowed to proceed to the password page. 4. The user is allowed to proceed to the password page and he enters his password. 5. The OAAM policies indicate that the user should be challenged. 6. The challenge checkpoint is run to determine the type of challenge to use KBA, Email, SMS, and so on. If SMS challenge is returned, the SMS Challenge Processor is loaded and used to generate and deliver an OTP to the user via SMS. 7. Once the SMS has been sent, the user is presented with a challenge page indicating that his OTP has been sent to him in an SMS. 8. User submits correct OTP to continue into application and complete the login flow. The OTP generated and sent to the user is only valid for one correct submission within a single HTTP session. If the users HTTP session expires and a new OTP will be generated and sent if he is challenged again in a later session. Table 11–28 Properties to register the Voice challenge processor Property Default Value Description bharosa.uio.default.challenge.type.enum.ChallengeVoice 4 Voice Challenge enum value bharosa.uio.default.challenge.type.enum.ChallengeVoice.name Voice Challenge Name of voice challenge type bharosa.uio.default.challenge.type.enum.ChallengeVoice.description Voice Challenge Description of voice challenge type bharosa.uio.default.challenge.type.enum.ChallengeVoice.processor com.bharosa.uio.proces sor.challenge.Challeng eVoiceProcessor Processor class for voice challenge type bharosa.uio.default.challenge.type.enum.ChallengeVoice.requiredInfo phone Required fields to challenge user with voice challenge type bharosa.uio.default.challenge.type.enum.ChallengeVoice.available false Availability flag for voice challenge type bharosa.uio.default.challenge.type.enum.ChallengeVoice.otp true OTP flag for voice challenge type 11-20 Oracle Fusion Middleware Developers Guide for Oracle Adaptive Access Manager