SSO installation appendix - SMS
About This Page
NOTE: Ubisecure product names were unified in autumn 2011. All products which started with term "Ubilogin" were renamed to start with term "Ubisecure". In documentation this name change is implemented retroactively, i.e., the new naming practice is used also when referring to old software versions which started with term "Ubilogin" at the time of their release.
Ubisecure SMS overview
This page and the page under, SMS installation process, are an appendix for the Installation - SSO. These pages describe the requirements and tasks for installing and configuring the SMS authentication method in an Ubisecure SSO Server system.Â
The result of the installation described is a working SMS authentication method in Ubisecure Server. You should first refer to the page Installation - SSO for instructions on installing Ubisecure SSO.
Ubisecure SMS is a one-time password over SMS authentication method for Ubisecure SSO Server. There are two ways to login using SMS, using username and password, or unregistered.
Username and password
When a user attempts to access a resource protected by Ubisecure:
- The user enters a username and password and presses next
- An SMS message is sent to the user's mobile phone containing an eight digit one-time password
- The user enters the one-time-password and presses next
- Authorization is performed according to the configuration of the Ubisecure SSO Server and the user is redirected to the target application and granted access if permitted
The user's telephone number is retrieved from the user account stored in the local Ubisecure Directory or in an external directory (AD, LDAP or SQL).
Unregistered
When a user attempts to access a resource protected by Ubisecure:
- The user enters a phone number
- An SMS message is sent to the user's mobile phone containing an eight digit one-time password
- The user enters the one-time-password and presses next
- Authorization is performed according to the configuration of the Ubisecure SSO Server and the user is redirected to the target application and granted access if permitted
Unregistered method can also be used in OAuth2 smt-mt-otp grant .Â
Related Pages
For installations using Active Directory
Integration with using Ubisecure SMS, please refer also the following guides for specific installation instructions.