CA AuthMinder UNIX Installation Guide › Understanding the Basics › Plugging Into AuthMinder

Plugging Into AuthMinder

AuthMinder provides the following authentication methods out-of-the-box:

• ArcotID

  ArcotID PKI is a CA-proprietary secure software credential that provides two-factor authentication. An ArcotID PKI is a small data file that by itself can be used for strong authentication to a variety of clients such as, Web or Virtual Private Networks (VPNs).

  See "ArcotID PKI Key Concepts" for more information on ArcotID PKI.

• Password

  A regular credential, where the user is issued a username and a password to log in to the system.

• One-Time Password

  One-time password is another credential generated by AuthMinder Server. An OTP can be numeric or an alpha-numeric string. It is also possible to configure the number of times it can be used.

• OATH-Compliant One-Time Password

  One-time passwords that are complaint to Open Authentication (OATH) standards. AuthMinder supports both counter-based OATH OTPs (HOTPs) and time-based OATH OTPs (TOTPs).

• Question and Answer

  Question and Answer (also known as QnA) is a challenge-response authentication mechanism. Users authenticate to AuthMinder Server by providing correct answers for the questions they are asked. These Questions and Answers are set by the users themselves during registration.

• ArcotOTP

  ArcotID OTP is compliant to the OATH, Europay, MasterCard, and VISA (EMV) standards. If your application is integrated with ArcotID OTP, then it accepts the user’s password as an input and generates passwords (also known as passcodes) on the users’ device. The user, then, submits this generated passcode to authenticate to your Web application. Based on the authentication result, the user is granted access to the protected application or denied access.

  Passcode generation is an offline process, which means that your application need not be connected to AuthMinder for generating passcodes.

• LDAP Username-Password

  AuthMinder supports LDAP authentication, where the user credentials in the directory service are used to authenticate users.

You can issue one or more of these credentials to your users. You can also issue multiple credentials of the same type. For example, you can issue two password credentials, an ArcotID PKI credential, and a QnA credential for a single user.

If you want to extend the default authentication mechanisms, then AuthMinder provides you the flexibility to do so by writing Plug-Ins.