Chat now with support
Chat with Support

Enterprise Single Sign-On 9.0.2 - One Identity Enterprise Access Management Console Administration Guide

Preface Overview Authenticating to EAM Console and Managing Protection Modes Searching the Directory Tree Managing administrators Managing Security Profiles
Managing time slices Managing Password Format Control Policies Managing User Security Profiles Managing Access Point Security Profiles Managing Application Security Profiles Defining Security Profiles Default Values Managing User and Access Point Security Profiles Priorities
Managing directory objects
Managing applications Managing users Managing access points Managing representative objects Managing clusters of access points Selecting a domain controller
Importing/Exporting security profiles and directory objects Managing smart cards Managing SA server devices Managing RFID tokens Managing biometrics Managing Mobile Devices Enabling the public key authentication method Managing Emergency Accesses Managing audit events Managing reports Customizing configuration files Creating scripts Basic syntax of regular expressions Listing audit events and error codes Correspondence between profiles and administration rights Report Models and Parameters List Custom Group Files Format

Creating/Modifying configuration profiles

Creating/Modifying configuration profiles

Creating a configuration profile

  1. In the Smart Card panel, click the Configuration tab.
  2. In the Smart card type drop-down list, select the wanted type of smart card.
    • The Configurations area displays the existing configuration profiles.
  3. Click New.
    • A new entry appears in the Configurations area.
  4. Type a name for this new profile, and fill in the Global, Personalization, Temporary Card and PIN Format tabs.

    		NOTE: Make sure that you use a different name for each configuration profile.

    These tabs allow you to set:

    • The PIN renewal period (default value is 300 days): once this time has elapsed, the user must enter a new PIN for authentication purposes.
    • Default PIN: this value will be used when assigning the smart card.
    • PIN change on next login: this value is the default value used when the smart card is assigned with this profile.
    • The number of attempts to enter the correct PIN before the card is blocked: this value is used during the customization of the card. It cannot be changed subsequently without reformatting the card.
    • An expiry date (number of days after the assignment) for the card: this expiry date can be changed after the customization procedure.
    • The default values used during the assignment of a loan card (number of days before the loan card expires, behavior of the principal card if it is delivered whereas the user has a loan card).
    • A PIN format policy, which defines presentation requirements. The default PIN number must comply with these requirements.
  5. Click Apply.
    • The new configuration profile is created.

Modifying a configuration profile

  1. In the Smart Card panel, click the Configuration tab.
  2. In the Smart card type drop-down list, select the wanted type of smart card.
    • The Configurations area displays the existing configuration profiles.
  3. Select a configuration profile and fill in the Global, Personalization, Temporary Card and PIN Format tabs.
  4. Click Apply.
    • The default values displayed upon the assignment of a smart card associated with this configuration profile are modified.

 

Renaming a configuration profile

Renaming a configuration profile

 

  1. In the Smart Card panel, click the Configuration tab.
  2. In the Smart card type drop-down list, select the wanted type of smart card.
    • The Configurations area displays the existing configuration profiles.
  3. Select a configuration profile and click Rename.
  4. Type the new configuration profile name and press the Enter key.

NOTE: Make sure that you use a different name for each configuration profile.

Deleting a configuration profile

Deleting a configuration profile

  1. In the Smart Card panel, click the Configuration tab.
  2. In the Smart card type drop-down list, select the wanted type of smart card.
    • The Configurations area displays the existing configuration profiles.
  3. Select a configuration profile and click Rename.

 

Modifying authentication parameters of an assigned smart card

Modifying authentication parameters of an assigned smart card

Subject

You can change the authentication parameters of a smart card. Through the Directory panel, you can configure dynamically the following:

  • The fact that the smart card PIN must be changed on the next login.
  • The smart card expiry date.
  • The principal smart card behavior, if a loan card is in use.

Procedure

  1. In the tree structure of the Directory panel, select the user for which you want to change smart cards authentication parameters.
  2. In the Smart Card tab, select the wanted smart card.
  3. In the Management area of the Information tab, select or clear the check boxes depending on your requirements, to change the PIN on next connection, to change the smart card expiry date, and to enable/disable the automatic unlocking of the principal smart card when the user authenticates using a loan card.

NOTE: The Automatically re-enable main card when next presented check box is available only if you have selected a loan card.
Related Documents