Digipass Authentication for Citrix Web Interface Overview
1.1.2
Response Only login
Users log in via the current login page with their username and One Time Password (OTP).
1-Step Challenge/Response login
A random challenge - of a length configured for all users - is displayed on the login page. Users log in with their username and Digipass response to the displayed challenge.
This requires modification of the current login page used by the web site.
2-Step Challenge/Response login
After the login page, the IIS 6 Module redirects users to a ‘Challenge page’ where a random challenge – of the length required by the user’s Digipass – is displayed. The user must enter a response to the challenge in order to complete the login.
A Challenge page template must be used with this feature. A default template is provided. It can be used without modification or it can be customized to match your preferred look and feel.
Virtual Digipass login
Users logging in with a Virtual Digipass use a similar process to the 2-step Challenge/Response login. If the user has a Primary Virtual Digipass assigned, or requests use of the Backup Virtual Digipass feature during the first step, an OTP will be sent to the user’s mobile phone via text message. The user is then redirected by the IIS 6
Module to the Challenge page to enter the OTP.
This uses the same Challenge template used in the 2-step Challenge/Response login.
Server Connection Management
The IIS 6 Module provides flexibility in managing connections to multiple primary and/or backup Authentication
Servers. This allows redundancy and load sharing over multiple Servers.
1.1.2.1
Connection Profiles
Two connection profiles are available:
Primary
The Server(s) to which the IIS 6 Module will first attempt to connect. The Primary Authentication Server(s) take the majority of the data load. Load sharing may be implemented over all Primary Authentication Servers.
Digipass Authentication for Citrix Web Interface Guide 7
