Single Sign-On Service › SSO Getting Started Guide › SSO Using Advanced Authentication and Provisioning for a Sensitive Application › Configure and Apply an Authentication Scheme

Configure and Apply an Authentication Scheme

The authentication schemes that correspond to the advanced authentication flows are preconfigured in the CSP console. These authentication schemes are:

• For ArcotID OTP Only: ARCOTOTP_MOBILE_ONLY_AUTH_SCHEME
• For ArcotID OTP with Risk: RISK_AND_ARCOTOTPMOB_ AUTH_SCHEME
• For ArcotID PKI Only: ARCOTID_ONLY_AUTH_SCHEME
• For ArcotID PKI with Risk: RISK_AND_ARCOTID_ AUTH_SCHEME

You establish a one-to-one correspondence between an authentication method that is configured in the User Console and an authentication scheme in the CSP console. The authentication method and authentication scheme work together to protect access to the specified application.

The authentication scheme protects the authentication URL that is specified for a given authentication method. To apply the authentication scheme, assign the authentication scheme to a realm and then include the realm in a policy.

Follow these steps:

1. Configure a realm and a rule for the resource.
2. Add rules to the tenant policy.