Unregistered SMTP authentication method configuration

System Requirements

• Ubisecure SSO version 6.x or later
• Access to an SMTP mail server

Configuring the Unregistered SMTP Method

SMTP methods are configured in Ubisecure SSO Server in a similar way to other authentication methods.
To configure the SMTP method in Ubisecure SSO:

1. Open the Ubisecure Management application.
2. Select Global Method Settings and click the New Method... button.

3. Add New Method window opens.
   Give the method a title (external name visible to end users) and name (name for internal use).
   Set the title to Unregistered SMTP (This text is shown to end users on the login screen. Consider "Login using email code")
   Set the name to ubikey.smtp.unregistered
   Set the method type to SMTP Unregistered. The Method Class is automatically selected.
   A directory needs to be selected only if the Directory User Mapping is required. i.e. If the email address will be used to look up an existing user from a connected user repository.
   Press OK.

   Figure 1. Adding a new unregistered SMTP method to Ubisecure SSO

4. In the Main page of the new method, select the Enabled checkbox to activate the new method.

5. Add the following lines to the Configuration String field:

   mail.smtp.port={Your mail server port}
   mail.smtp.host={your mail server hostname}
   mail.smtp.from={this is the address users see the mail is coming from} 

   When using SMTP unregistered method for smtp-otp unregistered grant, the otp timeout can be optionally configured to the method by adding the following line to configuration string.

   Policy.oauth.otp.timeout=(timeout in minutes)

   When an OTP is sent from the interactive login screen via the user interface, validity time (timeout) is always 10 minutes. 

6. Configure UI Text and email text
   The variable {challenge} will be replaced with the text to be displayed on the email. The message used can be set using the tag SMTP_UNREGISTERED_TEXT in the localization files, for example uas.properties. Please refer to the Login UI Customization Guide

   Listing 1. Customizing and localizing message text

   SMTP_HEADER = Your one time password for entry
   SMTP_TEXT = Your one time password is {0}

   Configure remaining UI text and to match system, branding and language requirements.

7. The method is now installed. Complete the configuration and access control.

After completing these settings, Ubisecure Server is configured to use unregistered SMTP as an authentication method.

Configuring Ubisecure Unregistered SMTP for Users and Web Applications

After installing and configuring the unregistered SMTP authentication method for the Ubisecure Server, use Ubisecure Management to configure the authentication method for an application. The unregistered SMTP method must be enabled at the system, site and application levels. An access control group should be created for users of this method and added to the Allowed To settings of the target application.

For detailed instructions for configuring authentication methods, please refer to the page SSO Management.

Logging In First Time with the Unregistered SMTP Authentication Method

Ubisecure Server sends an eight digit one-time password to the user email address through the configured mail server.

The user receives an email containing an eight digit code. The number must be entered in the One-Time Password field.

If the number is correct, login succeeds.