aXsGUARD Identifier 3.0.2.0 Product Guide v1.5
DIGIPASS User Accounts
Further management possibilities with User Accounts are listed below. For explanations of the User property fields,
please refer to the
aXsGUARD Identifier Administration Reference Guide
.
16.2.2
Importing User Records
Multiple User Accounts can be imported into the aXsGUARD Identifier in a comma separated values (.csv) text file
through the User/Import screen of the Administration Web Interface. Details for structuring the comma separated
values within a text file are listed in the
aXsGUARD Identifier Administration Reference Guide
, 'Importing users
using Comma Separated Value Files' section.
16.2.3
Dynamic User Registration
When the aXsGUARD Identifier receives an authentication request for a user without a DIGIPASS User Account, it
can check the credentials with the back-end authenticator (e.g. RADIUS). If the authentication is successful with
the back-end authenticator, the aXsGUARD Identifier can create a DIGIPASS User Account automatically for the
User. This process is called
Dynamic User Registration
(DUR) and can be enabled via the Administration Web
Interface. For more information on
Dynamic User Registration
, see section
DUR is commonly used with Auto-Assignment, so that the new account is immediately assigned a DIGIPASS. For
more information on Auto-Assignment, please see section
16.2.4
LDAP User Synchronization
LDAP User Synchronization
supports automatic creation and updating of User Accounts on the aXsGUARD
Identifier from records stored on one or more LDAP Servers. Synchronization needs to be configured in the
Configuration Tool, by defining a Synchronization Profile for your specific LDAP Server(s). For more information,
please see section
16.3
Linked User Accounts
Normally, a DIGIPASS record can only be assigned to one User Account (see section
). However, if someone
has two DIGIPASS User Accounts, for example an administrative account and a 'normal user' account, the
accounts can be linked to share a DIGIPASS device. The DIGIPASS record for the device is assigned to one
account, to which the other account is then linked (see image below).
©
2009 VASCO Data Security
97
