Advanced Authentication Service › Getting Started with Advanced Authentication › Configuring Advanced Authentication › How to Configure Advanced Authentication › Configure and Apply an Authentication Scheme

Configure and Apply an Authentication Scheme

Authentication schemes corresponding to the advanced authentication flows are preconfigured in the CSP Console. These authentication schemes are as follows:

• For the ArcotID OTP Only flow: ARCOTOTP_MOBILE_ONLY_AUTH_SCHEME
• For the ArcotID OTP with Risk flow: RISK_AND_ARCOTOTPMOB_ AUTH_SCHEME
• For the ArcotID PKI Only flow: ARCOTID_ONLY_AUTH_SCHEME
• For the ArcotID PKI with Risk flow: RISK_AND_ARCOTID_ AUTH_SCHEME

You establish a one-to-one correspondence between an authentication method configured in the User Console and an authentication scheme in the CSP Console. The authentication method and authentication scheme work together to protect access to the specified application.

The authentication scheme protects the authentication URL that is specified for a given authentication method. To apply the authentication scheme, you assign the authentication scheme to a realm and then include the realm in a policy.

Important! You can also use these steps to apply an authentication scheme for protecting the User Console.

Follow these steps:

1. Configure a realm and a rule for the resource.
2. Add rules to the tenant policy.
3. Configure an authentication scheme for the User Console.