Page Comparison

...

1. In Ubisecure SSO Management, configure a new method of the type Unregistered SMS. In these screenshots, the name of the method is ubikey.sms.5

2. Add the URL of the SMS service to the configuration string. A GET request will be made to this address. If HTTP Response 200 is received, the message is deemed to have been sent successfully. {mobile} will be replaced with the phone number and {challenge} with the text to be shown in the message, including instructions and code.

   Code Block
   theme RDark title Configuration String setting for SMS service
   smsUrl=http\://sms-sending-service.example.com/sendsms.asp?to\={mobile}&message\={challenge}

   
   

3. Enable the method ubikey.sms.X on a site
4. Create a group called Unregistered SMS Users, assign membership based on the ubikey.sms.5 method just created.
5. Create an agent of type OAuth 2.0 in that site
   

6. Activate the agent using the following metadata. sms-mt-otp is disabled by default and can be used only if specified in the metadata. Because this flow is direct from the application to the server, without a user agent (browser), no return_uri is required

   Code Block
   theme RDark title Metadata for phone number verification by SMS
   {"grant_types":["http://globalsign.com/iam/sso/oauth2/grant-type/sms-mt-otp"]}

   
   

7. Press Activate to generate a client_id and secret required to make and verify requests. Save the client_id and secret safely in the calling application. An activated agent will look like this:
   
8. Select the Allowed To tab and Add the group Unregistered SMS Users.
9. An authorization policy is not required. If used, attributes sent in the Authorization policy will appear in the id_token received in the verification response.

...