NSD1173 - Document Revision History

Fact

Product:
Nordic Edge One Time Password Server
The Pledge client (mobile security token client)

Prerequisites

This article describes the profile enrollment process for the Pledge client. It describes two different scenarios, self administration and centralized administration, typically a IT-service desk.

There are also two different states of the self administration page and the centralized administration page. The first state enables single profile support (the most common one) and the second state enables multiple profile support.

When do I need to enable multiple profile support?
If you're planning to use more than one device you should enable multiple profile support.
For example, if you use two different cell phones or if you're using your cell phone and Pledge Desktop on your computer, you need to enable multiple profile support.
Multiple profile support is supported from OTP Server version 3 and later.

Install and configure the Pledge Profile Enrollment web application on Tomcat

The Tomcat will now deploy the web archive into a directory called PledgeEnrollment under the webapps directory.

/*----------------------Settings section start------------------------------------------------------------------*/
// OTP Server settings
String otpServerHostaddress = "localhost"; //The OTP Server IP address
String otpServerPortNumber = "3100"; //The OTP Server portnumber
String attributeContainingOATHKey = "carLicense"; //The attribute that contains the Pledge OATH key in the user database
String addKeyPrefix = "0x"; //Use 0x for backwards compatible mode with older versions of the OTP Server
String multipleProfileSupport ="false"; // True enables support for multiple profiles
String nativeClientName = ""; // For developers: Sets the native client name used by the OTP Server

//Nordic Edge Pledge Web Service
String pledgeWSUserAccount = "myPledgeFactoryAccount"; //The Nordic Edge Pledge Factory Web Service user name
String pledgeWSUserPassword = "myPledgeFactoryAccountPassword"; //The Nordic Edge Pledge Factory Web Service password

// Help Desk enrollment configuration
String groupAttributeName = "memberOf"; //The name of the LDAP attribute that contains the group or role values, memberOf for AD
String supportGroupName = "Domain Admins"; //Value containing the name of the support (Help desk) group object. This has to be a CN value

// Language and culture support
String language = "en"; //"sv" for Swedish. "en" for English. NOTE: The current browser language settings is used if 'language' is set to ""
String country = "US"; //"SE" for Sweden. "US" for United States.

// Proxy settings (to be configured if proxy is used)
String proxySet = ""; //proxySet = "true" to enable proxy configuration
String http_proxyHost = "proxy.name.com"; // http proxy host
String http_proxyPort = "3128"; // http proxy port
String https_proxyHost = "proxy.name.com"; // https proxy host
String https_proxyPort = "3128"; // https proxy port
String proxyUsername = ""; // The proxy user name (if any)
String proxyPassword = ""; // The proxy password (if any)

/*----------------------Settings section end------------------------------------------------------------------*/

Redirect the application in the ..webapps\PledgeEnrollment\index.jsp

Index.jsp gives the option to configure the application URL. Configure this file, unless you don't want to use the full path to the page in the URL

Running the Pledge Profile Enrollment Web Application

1. Scenario 1 -  The self service profile enrollment

Figure: The single profile supported page

If multiple profile support is enabled, the page below will turn up instead of the one above.


Figure: The multiple profile supported page

If the logon is successful, a Pledge profile ID is created (below).

On your mobile device (if you use the Pledge Desktop application: On your computer):

Now it's time to test the profile if you as an adminstrator has access to the users mobile device.

Disclaimer

The Origin of this information may be internal or external to Nordic Edge. Nordic Edge makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Nordic Edge makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.