OneSpan Authentication Server

Secure access and transactions by deploying multifactor authentication and transaction signing

Onespan logo

Onespan's IDENTIKEY Authentication Server is the next-generation centralized authentication server that supports DIGIPASS technology. It verifies authentication requests from individuals trying to access the corporate network or business applications.

IDENTIKEY Authentication Server supports the following primary functions:

  • DIGIPASS one-time password authentication
  • DIGIPASS signature validation

Authentication Servers Overview

Secure Access

Use strong authentication to secure access to corporate resources and banking applications.

Combine multiple authentication methods, including the latest behavioral and biometric authentication options, FIDO, push notification, Cronto; OATH and more.

transaction-onespan

Transaction Signing

Enable highly secure transaction signing with user-friendly Cronto® technology

Authentication-Lifecycle-OneSpan

Authentication Lifecycle

Simplify authentication lifecycle management via a single integrated system

cost-onespan

Low Cost of Ownership

Easily support new standards in application and network access security for most
major operating systems and platforms

high-availability-onespan

High Availability

Ensure business continuity – eliminate server downtime and service disruptions

effortless_onespan

Effortless Deployment

Deploy server solutions regardless of operating system or architecture

mobile-security-onespan

Mobile App Security

Take action to protect your institution, apps, and users against complex mobile threats resulting from a growing number of data breaches

compliance-onespan

Compliance

Fulfill strict regulatory requirements and prove due diligence to auditors

secure access

Secure Access

Provide secure access using multi factor authentication

OneSpan server solutions validate authentication requests to offer secure and seamless access to a variety of corporate resources, and online and mobile  applications. These solutions support OneSpan’s entire range of authentication solutions – from one-time password (OTP) hardware, FIDO and OATH tokens to mobile authenticators, including biometrics and Cronto. Our solutions enable organizations to safeguard sensitive data and transactions from unauthorized access and strengthen security defenses with ease and assurance.

Transaction Validation

Secure transactions, elevate trust, and combat sophisticated threats

OneSpan’s authentication server solutions offer highly secure transaction signature validation for banks and financial institutions. Optional support is available for EMV-CAP support and Hardware Security Modules (HSM) to validate the signature in a secure and tamper-proof environment. Confirming transactions or logging on has never been easier thanks to our patented Cronto technology.

secure transaction validation
gears

Authentication Lifecycle

Simplify operations with easy authentication lifecycle management

OneSpan server solutions provide you with all the tools necessary for complete authentication lifecycle management in one integrated system. Simplify lifecycle management with automation through rules, policies, workflows, and APIs for full customization.

Low Cost of Ownership

Leverage your IT investment

Our server solutions provide you with a cost-effective solution that leverages your IT investment and provides one centralized platform without any additional requirements for a separate server or database. 

IT investement
clock

High Availability

Ensure business continuity at all times

With OneSpan's on-premises server solutions, you don’t need to worry about server downtime and service disruptions. High reliability ensures that your users can get secure access to the system when they need it. Safeguard business continuity with a redundant infrastructure that supports load balancing and server replication.

Easy Deployment

Flexible, simple, and fast deployment that fits your needs

OneSpan's Authentication Server solutions can be customized and integrated into any existing application or environment, regardless of operating system and architecture. We help facilitate your authentication deployment with server platforms that scale to meet the needs of any size organization.

darts

IDENTIKEY Authentication Server supports the following authentication modules:

  • Corporate and Remote Access Clients: IDENTIKEY Authentication Server supports the RADIUS protocol (according to RFC 2865) for remote network access, such as VPNs.
  • Web Applications: IDENTIKEY Authentication Server provides support for web applications through an SDK based on the standard SOAP protocol. These applications may cover operational tasks such as authentication and signature validation, provisioning of Software DIGIPASS or administration of DIGIPASS Authentication for Microsoft ADFS.
  • DIGIPASS Authentication for Windows Logon: DIGIPASS Authentication for Windows Logon provides users with login access to Windows using a DIGIPASS authenticator. DIGIPASS Authentication for Windows Logon integrates seamlessly with the existing Windows logon system. The user ID is entered along with a one- time password generated by the DIGIPASS authenticator.
  • DIGIPASS Authentication for OWA (Outlook Web Access): The DIGIPASS Authentication for Microsoft Outlook Web Access module adds an extra security layer to remotely access confidential information over unsafe networks using OTPs.
  • DIGIPASS Authentication for Remote Desktop Web Access (RDWA): Remote Desktop Web Access (RD Web Access) enables users to access RemoteApp and Desktop Connection through the ‘Start’ menu on a computer that is running Windows 7 or through a web browser. VASCO’s DIGIPASS Authentication integrates with the Web Access interface that runs on an IIS webserver, and directs all authentication validation requests towards the IDENTIKEY Authentication Server.
  • DIGIPASS Authentication for Microsoft ADFS: This is an add-on authentication module for Microsoft Active Directory Federation Services (ADFS) and provides strong authentication using a DIGIPASS authenticator. DIGIPASS Authentication for Microsoft ADFS contains an ADFS authentication provider that can be used as an additional authentication method. This allows for authentication against AD as the primary authentication, and authentication via a DIGIPASS authenticator as the additional authentication.
  • DIGIPASS Authentication for Citrix Web Interface (CWI): VASCO’s DIGIPASS Authentication integrates with Citrix Web Interface for XenApp and XenDesktop without undermining the existing functionality. At customer login, IDENTIKEY Authentication Server validates the submitted user credentials. Once validated, the user is granted access to all authorized applications.