Manage soft token authenticators

Available soft token authenticators

The following soft token authenticators are available on IDaaS:

• Entrust Soft Token. Entrust Soft Token (ST) is an authenticator for Entrust platforms. When assigned in IDaaS, users must provide a challenge response generated by the Entrust ST application. Users on connected mobile devices can also use Push Notification, which prompts authentication automatically in the app.

• SDK Soft Token. A custom mobile soft token app that generates a one-time password (OTP) to allow users to access applications.

• Legacy Token. A custom mobile soft token app that generates a one-time password (OTP) to allow users to access applications.

• Google Authenticator. A soft token app that generates one-time passwords (OTP) for application access. The default display name is Google Authenticator, but you can change it in Customize email templates. The updated name appears throughout IDaaS, including in Modify Google authenticator settings.

About soft token authenticators

Users can have multiple soft tokens. For example, users with multiple mobile devices can add a soft token to each device.

Administrators can assign soft tokens to users using the following methods:

• Automatically assign a soft token. If the user has an email address, the user receives an email with instructions to activate their Entrust ST token. For more information, see Manage General settings.
• Add a soft token to a user's profile.

Users can also add soft tokens to their accounts.

note

Before assigning soft token authenticators to users, review the authenticator settings and update them as needed. For more information, see Modify Entrust Soft Token (ST) authenticator settings.

Topics in this section

📄️Modify Entrust Soft Token authenticator settings

Review the Entrust Soft Token authenticator settings, and edit them as required. Changes made to these settings apply to all assigned Entrust Soft Tokens in your account.

📄️Assign and activate Entrust Soft Token authenticators

Use this procedure to assign Entrust Soft Tokens to users and activate them when needed.

📄️Unlock an Entrust Soft Token app

If a user enters an incorrect sign-in PIN too many times in the Entrust Soft Token app, the app is locked. To complete this procedure, the user must provide the PIN Reset code shown in their Entrust Soft Token app.

📄️Modify Google authenticator settings

Use this procedure to review and update Google Authenticator policy settings in IDaaS.

📄️Activate a Google authenticator

Use this procedure to assign and activate Google Authenticator for a user. Before you begin, ensure the user has access to a mobile device with a Google Authenticator application installed.

📄️Synchronize a soft token authenticator

If a user cannot authenticate with a soft token, there might be clock drift between the user's mobile device and IDaaS. Use Synchronize to realign the token. Before you begin, ask the user to confirm that the mobile device clock and carrier time are synchronized.

📄️Manage soft tokens

Use this procedure to enable, disable, view, or delete Entrust Soft Token and Google authenticators. You can also review details such as creation date, last used date, state, type, and push support.

📄️Edit a token label

Use this procedure to update a soft token label in IDaaS. Updating labels is useful when users have multiple soft tokens, because labels are easier to recognize than serial numbers. For example, labels such as My Phone and My Tablet are easier to identify quickly.

📄️Manage soft token SDKs

Use this procedure to configure a custom soft token SDK in IDaaS. After you configure SDK credentials, you can add custom push messages.