TextPad PinPad QuestionPad Virtual Authentication Types

Using Virtual Authentication Devices 10-5

10.4 Authenticator Composition

An authenticator is comprised of a number of elements. These elements are combined at runtime to produce the Authenticator for display on the client side.

10.5 Virtual Authentication Device Properties

Details on the virtual authentication device properties are provided in this chapter for your reference.

10.5.1 Property Files Used in the Authenticators Configuration

Virtual authentication devices uses the following files: ■ bharosa_server.properties - file where custom properties would be added for virtual authentication devices, KeySet definitions used in the KeyPad and PinPad devices, and configuration properties that are not localized translated. ■ client_resource_locale.properties - files to be created by the administrator customizing the application to contain locale-specific properties such as translated displayed messages. The locale identifier consists of at least a language identifier, and a region identifier if required. For example, the custom properties file for US English is client_resource_en_US.properties.

10.5.2 TextPad Authenticator Properties

Table 10–3 lists the TextPad Authenticator Properties Table 10–2 Elements of an authenticator Element Description Personalized Image An image selected by the user during registration. This is stored in the user repository in OAAM. Authenticator Frame An image that forms the frame of the authenticator. It contains graphics to represent user controls. Timestamp, Phrase and Keyset Image elements that are generated to build the personalization of the authenticator. HTML Controls A set of JavaScript controlled HTML elements for data entry and submission of data. Note: Many of the properties related to the virtual authentication devices are in resource bundles so that they are capable of being localized. If the default value is in a resource file, then the override value should be placed in the client override file for resource bundle values client_resource.properties. 10-6 Oracle Fusion Middleware Developers Guide for Oracle Adaptive Access Manager

10.5.3 PinPad Authenticator Properties

Table 10–4 lists the PinPad Authenticator Properties

10.5.4 QuestionPad Authenticator Properties

Table 10–5 lists the QuestionPad Authenticator Properties Table 10–3 TextPad Authenticator Properties Feature Property Default BG Can be application specific bharosa.uio.appId.DeviceTextPad.default.image = textpad_bgUIO_BG.jpg Password Frame File Can be application specific bharosa.uio.appId.password.DeviceTextPad.frame = Challenge Frame File Can be application specific bharosa.uio.appId.challengeType.DeviceTextPad.frame = Note: Challenge type can be any configured challenge type ChallengeQuestion, ChallengeEmail, and others Registration Frame File Can be application specific bharosa.uio.appId.register.DeviceTextPad.frame = textpad_bgTP_O_ preview.png User Preferences Frame File Can be application specific bharosa.uio.appId.userpreferences.DeviceTextPad.frame = textpad_bgTP_ O_preview.png Table 10–4 PinPad Authenticator Properties Feature Property Default BG Can be application specific bharosa.uio.default.DevicePinPad.default.image = pinpad_bgUIO_BG.jpg Password Frame File Can be application specific bharosa.uio.appId.password.DevicePinPad.frame = Challenge Frame File Can be application specific bharosa.uio.appId.challengeType.DevicePinPad.frame = Note: Challenge type can be any configured challenge type ChallengeQuestion, ChallengeEmail, and others Registration Frame File Can be application specific bharosa.uio.appId.register.DevicePinPad.frame = pinpad_bgPP_v02_frame_ preview.png User Preferences Frame File Can be application specific bharosa.uio.appId.userpreferences.DevicePinPad.frame = pinpad_bgPP_ v02_frame_preview.png Table 10–5 QuestionPad Authenticator Properties Feature Property Default BG Can be application specific bharosa.uio.appId.DeviceQuestionPad.default.image = textpad_bgUIO_BG.jpg Challenge Frame File Can be application specific bharosa.uio.appId.challengeType.DeviceQuestionPad.frame = Note: Challenge type can be any configured challenge type ChallengeQuestion, ChallengeEmail, and others Using Virtual Authentication Devices 10-7

10.5.5 KeyPad Authenticator Properties

Table 10–6 lists the KeyPad Authenticator Properties

10.5.6 Frame Design and Element Positioning

The following sections outline the visual elements that are within the virtual authentication device visual display for each device and the unique security features of each authentication device. Each virtual authentication device has its own unique security features. Some of these features can be enabled and disabled by editing the configuration properties in the bharosa_server.properties. For visual display, important terms are: ■ Enter Key Hotspot - Link area allowing user to submit data entered in the authentication device. ■ Phrase - Personalized phrase assigned to the user at the time of registration. The phrase allows the user to ensure they are on their intended web site. ■ Timestamp - Timestamp of when the image was generated, allowing the user to ensure the authentication device is current.

10.5.6.1 Background Images

For the background images to be displayed in the virtual authentication device, set the following property: vcrypt.user.image.dirlist.property.name=bharosa.image.dirlist bharosa.image.dirlist=imagePath If any of the images are to be edited, make sure not to increase the physical dimensions or change the aspect ratio of the sample images because distortions will occur.

10.5.6.2 KeysSets

A KeySet is the configuration that defines what character keys are present on the virtual authentication device. KeySets are used by the KeyPad and PinPad virtual authentication devices. Table 10–6 KeyPad Authenticator Properties Feature Property Default BG Can be application specific bharosa.uio.appId.DeviceKeyPadFull.default.image = keypad_bgUIO_BG.jpg Password Frame File Can be application specific bharosa.uio.appId.password.DeviceKeyPadFull.frame = Challenge Frame File Can be application specific bharosa.uio.appId.challengeType.DeviceKeyPadFull.frame = Note: Challenge type can be any configured challenge type ChallengeQuestion, ChallengeEmail, and others Registration Frame File Can be application specific bharosa.uio.appId.register.DeviceKeyPadFull.frame = alphapad_bgkp_O_ preview.png User Preferences Frame File Can be application specific bharosa.uio.appId.userpreferences.DeviceKeyPadFull.frame = alphapad_ bgkp_O_preview.png