---
title: Set up OneSpan
description: Before using OneSpan nodes in your PingOne Advanced Identity Cloud environment, you must set up:
component: auth-node-ref
version: latest
page_id: auth-node-ref:cloud:onespan-setup
canonical_url: https://docs.pingidentity.com/auth-node-ref/latest/cloud/onespan-setup.html
keywords: ["Nodes & Trees", "Journeys", "Authentication", "OneSpan"]
page_aliases: ["auth-node-onespan-setup.adoc"]
section_ids:
  auth-node-onsepan-tenant-setup: OneSpan tenant setup
  auth-node-onespan-aux-setup: PingOne Advanced Identity Cloud service setup
---

# Set up OneSpan

Before using OneSpan nodes in your PingOne Advanced Identity Cloud environment, you must set up:

* [OneSpan tenant setup](#auth-node-onsepan-tenant-setup)

* [OneSpan Configuration auxiliary service](#auth-node-onespan-aux-setup).

## OneSpan tenant setup

This section gives you a brief introduction to set up your OneSpan tenant and get started with using OneSpan in PingOne Advanced Identity Cloud.

**For OneSpan IAA and RA users**:

1. Create a [OneSpan Developer Community account](https://community.onespan.com/user/registration).

2. Log in to the community portal and register a [OneSpan Trusted Identity Platform Sandbox](https://community.onespan.com/trusted-identity-platform-sandbox-registration).

3. Set up a mobile application integrated using the [Mobile Security Suite documentation](http://community.onespan.com/documentation/mobile-security-suite). To get stated, install the [OneSpan Mobile IAA Demo App](https://gs.onespan.cloud/downloads) on your phone.

4. Configure the [Risk Analytics Presentation](https://sdb.tid.onespan.cloud/riskui/Login) service.

**For OneSpan OCA Users**:

1. Create a [OneSpan Developer Community account](https://community.onespan.com/user/registration).

2. Log in to the community portal, and register a [OneSpan Trusted Identity Platform Sandbox](https://community.onespan.com/trusted-identity-platform-sandbox-registration).

3. Install a mobile application to act as the Digipass authenticator by doing one the following:

   * Download a sample MAS app from the [demo site](https://gs.onespan.cloud/te-oca-sample/), and then customize and build your own [Mobile Authenticator Studio (MAS)](https://community.onespan.com/documentation/onespan-cloud-authentication/guides/integration-guide/developer/configuring-mobile-authenticator-studio) app.

   * Download OneSpan Mobile Authenticator from [Google Play Store](https://play.google.com/store/apps/details?id=com.vasco.digipass.es\&hl=en_US\&gl=US) or [Apple App Store](https://apps.apple.com/us/app/onespan-mobile-authenticator/id1172835583#?platform=iphone).

   |   |                                                                                                                                                 |
   | - | ----------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | To use the mobile authenticator from Apple App Store or Google Play Store, you need to configure a mobile authenticator license in your tenant. |

## PingOne Advanced Identity Cloud service setup

You must set up OneSpan Configuration service in your PingOne Advanced Identity Cloud environment before configuring and using OneSpan journeys.

![OneSpan Configuration Service](_images/onespan-aux-service.png)

1. In your AM admin UI navigate to REALMS > your realm.

2. Click Service Management in the dashboard.

3. Click Add a service and select OneSpan Configuration from the dropdown list.

4. Enter the following configuration details about the new service:

   * OneSpan IAA username: Username for the OneSpan tenant

   * OneSpan IAA Environment: Type of environment for the OneSpan tenant

   * Application Reference: A descriptive value for the integrated application

   * ASP Public Key: Application service provider's public key

   * ASP Private Key: Application service provider's private key

   * Custom URL: URL to be used for OneSpan API calls when the IAA Environment parameter is set to CUSTOMIZED

5. Click Create.

After configuring the service, you can configure and use OneSpan authentication nodes.