Hi All,
I'm trying to distribute tokens in .SDTID format in bulk using the AMBA tool.
In the Soft token profile settings, I couldn't find any place to change the length of tokencode for Generic AES 128 type.
Is there any way we can change the length from 8 to 6?
Thanks Edward.
May I know of we can generate three types of .SDTID files (for eg: Android, iOS, Blackberry) and send it to the users in Bulk?
Or is there any other way we can reduce the token length.
Please note that our application (where we input the token) can only accept 6 digits.
All those devices can do 6 digit and handle .sdtid files.
You can generate one sdtid file profile that will fit on all three devices if you want and do one bulk run. Or do three, it is up to you. Just clear the device serial number field so there is no problem with 'token not intended for device' issues.
With 6 digit limit I'd use pinpad style, so the pin will be mathematically hidden in the 6 digit tokencode, and you can use 6 digit passcodes to logon.
Hi Edward,
How can we generate a custom profile that can fit in all the three (Android, iOS and Blackberry) profiles?
Hi Edward,
Really appreciate if you could help us soon with creating the custom profile. (A bundle of ios, blackberry, android and windows).
Please review the document on how to Add a Software Token Profile, with the following changes for your environment:
Now when your admins are assigning software token profiles, they can select the All_Devices profile for all of your devices.
Regards,
Erica
It does not have to be generic AES. As indicated earlier, pick any profile, as long as the basics about it meet your needs, such as ability to be a 6 digit token. Just clear the device serial number, and it can essentially work on any device.
Not with the generic profile. It is intended for -any- legacy device and some cannot recognize 6 digit operations, so only things that are 'common to all legacy devices' are allowed, and newer options are not allowed (30 second and 6 digit).
Just pick a profile that does allow it...there is not anything preventing you from using a different profile as long as the options are what you seek..... it is only the canned device serial number [device type] that may be present which would need to be cleared.