Advanced Identity Cloud

OneSpan Auth Assign Authenticator node

The OneSpan Auth Assign Authenticator node assigns VIR10 authenticator to the user when:

  1. There’s a VIR10 authenticator available in the tenant, and

  2. The user isn’t assigned a VIR10 authenticator.

The node fails when it can’t find an unassigned VIR10 authenticator or encounters a node process exception.

The node first retrieves the user data. If the user is assigned an authenticator, the node loops through the authenticator list to determine if the user is assigned a VIR10 authenticator. If the user isn’t assigned a VIR10 authenticator, it assigns the first unassigned VIR10 authenticator to the user.

Compatibility

Product Compatible?

Advanced Identity Cloud

Yes

PingAM (self-managed)

Yes

Ping Identity Platform (self-managed)

Yes

Inputs

This node requires the following inbound data:

Description Attribute name Source

Username

As specified in the property

Shared state

Delivery mode

As specified in the property

Shared state

Dependencies

This node uses input from OneSpan Auth VDP User Registration node and any other node that collects the VOTP delivery method.

Configuration

The configurable properties for this node are:

Property Usage

IAA Domain

The domain in which the user account resides. In a sandbox, the domain is the same as your tenant name.

Outputs

There are no outputs from this node.

Outcomes

Success

User is successfully assigned to the VR10 authenticator.

Error

OS_Auth_VDPUserRegisterNode Exception, Date ostid_error_message OneSpan Auth Assign process.

Errors

This node logs an error message with the key ostid_error_message and the reason why assigning a VIR10 authenticator wasn’t successful.

Troubleshooting

If this node logged an error, review the log messages for the transaction to find the reason for the exception.

Examples

OneSpan VOTP User Registration

This example describes an authentication journey to register a user for VOTP authentication, and assign a VIR10 authenticator:

  1. In the initial login page, the user enters their username and the required VDP delivery information, such as their virtual email or phone number.

  2. The OneSpan VDP User Register node determines if there’s an unassigned VIR10 authenticator available in the tenant. It also determines if the user isn’t already assigned a VIR10 authenticator.

  3. If the user hasn’t been assigned a VIR10 authenticator, the OneSpan Auth Assign Authenticator node assigns a VIR10 authenticator to the user.

  4. The OneSpan Sample Error Display node displays the error if the VIR10 authenticator assignment failed. It lets you retry assigning VIR10 authenticator.