CA Strong Authentication Administration Guide › Managing Global CA AuthMinder Configurations › Resolve Credential Types

Resolve Credential Types

The authentication requests that are presented to the CA AuthMinder Server must specify the type of credential that has to be used to process the request. In case of RADIUS and ASSP authentication requests, the input requests do not have the provision to specify the credential type, and therefore RADIUS uses One-Time Password and ASSP uses password as a default credential for authentication.

To support any password-based authentication mechanisms for RADIUS and ASSP, or to use the verifyPlain authentication function, you must create the Credential Type Resolution configuration. You can map the input request to any of the following password type credentials that CA AuthMinder supports:

• Password
• One-Time Password
• OATH OTP
• CA Auth ID OTP-OATH
• CA Auth ID OTP-EMV
• RADIUS OTP
• LDAP Password
• Native Token

Follow these steps:

1. Click the Services and Server Configurations tab on the main menu.
2. Verify that the CA Strong Authentication tab in the submenu is active.
3. Under the Miscellaneous Configurations section, click the Credential Type Resolution link to display the corresponding page.
4. Edit the fields in the section, as required.

   Create

   If you choose to create a new configuration, then:

   • Select the Create option.
   • Specify the Configuration Name of the new configuration in the field that appears.

   Update

   If you choose to update an existing configuration, then select the configuration that you want to update from the Select Configuration list.

   Copy Configuration

   Enable this option if you want to create or update the configuration by copying the existing configurations.

   Note: You can also copy from configurations that belong to other organizations that you have scope on.

   Available Configurations

   Select the configuration from which the settings will be copied.

   Resolve Plain to

   Choose the authentication mechanism that you want to map the incoming password type credential to.

   User Custom Attribute for Credential Type

   The custom attribute of the user that defines the credential type to be used to authenticate the user.

   Note: The user attributes that you provide here must match the attributes that you have specified for the user during user creation. FirstName, LastName, and TelNumber are examples of the user attribute that you can use.

5. Click Save.