CA CloudMinder Advanced Authentication › Strong Authentication Mechanisms › ArcotID OTP › ArcotID OTP Application

ArcotID OTP Application

To enable end users to authenticate using an ArcotID OTP credential, CA CloudMinder provides the ArcotID OTP application, which must be installed on the end user’s device. To support a wide variety of application environments, the ArcotID OTP application is available in the form of a desktop client and a mobile application:

• The desktop client is available in the Downloads section of the CA Support site at https://support.ca.com. You can download it and provide it to your end users.
• Mobile users can download the mobile client application for free from App Store or Google Play. A single ArcotID OTP application can be used with multiple accounts to access different applications and web portals.

  Important: User names exceeding 50 characters can create OTP generation errors.

If an end user has enrolled for ArcotID OTP authentication, a typical authentication flow using ArcotID OTP is as follows:

1. An end user tries to access a protected resource, and is prompted for the user name and ArcotID OTP.
2. The end user opens the ArcotID OTP application on their device, authenticates to it using their PIN, and generates an OTP.
3. The end user then reads the OTP that is generated, switches back to the browser, and provides the user name and OTP on the login page.

   Upon successful authentication, the end user is allowed to access the resource.

For information about the flow that is invoked if an end user has forgotten their ArcotID OTP PIN, see Forgot My PIN Flow.