Credential Management

To find VIP credentials, select Credentials from the navigation bar at the top of the page. The Manage Credentials page displays the number of credentials in the system as of the last data refresh (typically around 11:59:59 pm UTC). From this page, you can:

Export all credentials to a CSV file. Select this option to export information about all credentials to a CSV file. The CSV file will include information about all credentials in the system at the time that you selected this option.
View all credentials. Select this option to view information about all end users in the system at the time you selected this option.
Find credentials based upon specific search criteria. Select this option to search for one or more credentials based on a specific set of search criteria.
To find VIP credentials based upon specific search criteria:

 Enter the credential ID in the search field of the Manage Credentials page and click the arrow next to the entry field.
To narrow your search, select the applicable filter attributes within the left pane.

Under each filter name, you may select multiple options that are identified with checkboxes, but only a single option within filters that designate time periods.
Click Apply Filter to view the credentials that meet your search criteria.

The Search page returns all credentials that meet your criteria. The page includes the following details for each credential:

Credential ID: The unique ID associated with this credential.

Credential Type: Whether the credential is a VIP Security Token, VIP Security Card, VIP Access for Mobile, VIP Access Desktop, SMS, Voice Call, Email, or other credential type.

Credential State: Whether the credential is in an enabled, disabled, locked, new, or inactive state. If the credential is disabled, the reason is also listed.

User ID: A list of IDs for each user to which the credential is assigned.

User State: Whether the assigned user or users are in an enabled, disabled, or locked state.

Last Validated: The date and time that the credential was last used to authenticate, even if the authentication attempt failed.

You can also enable or disable a credential Enabling and Disabling a Credential State, or generate a temporary security code Generating a Temporary Security Code for this credential.

Click Edit Details to see additional details about a specific credential, including:

Validation Type: Whether the credential was validated by HOTP Event-Based, Vasco Time-Based, Server Security Code-Based, HOTP Time-Based, SMS/Voice/Email/Service-generated, SecurID, OATH Challenge Response (OCRA) Type, or Dual (OATH Challenge Response (OCRA) & Time-based.

Credential Issued By: The Org Name and Org Unit of the account (jurisdiction hash) that uploaded and bound the credential.

Expires: The date and time that the credential expires, if applicable.

PIN: If a User PIN is associated with the credential, it appears here, obscured.

You can also change the credential state Editing a Credential State.

You must have the Customer Credential (Generate) role to generate temporary security codes.

Note: To generate a security code for a Locked credential, you must first change the credential state to Enabled.

Search for the credential as described in Finding a Credential.

Select Generate Temporary Security Code for your target credential ID.

Within the pop-up screen, confirm the expiration and usage (the default settings reflect your current VIP policy settings).

To change the expiration date and time, select Customize.

To change the usage, select either Multiple Use or One-Time Use.

Multiple Use: This option allows the security code to be used multiple times before it expires.

One-Time Use: This option allows the security code to be used only once before it expires.

Select Generate.

Another pop-up screen displays the temporary security code.

Note: Alternatively, you can generate a temporary security code by selecting Edit Details for your target credential ID, and then selecting Generate within the Temporary Security Code pane.

To edit the expiration or usage of an existing temporary security code, see Editing an Existing Temporary Security Code.

To easily enable or disable the credential state for a single credential:

Search for the credential as described in Finding a Credential.

Select either Disable Credential or Enable Credential for your target credential ID, depending upon the current credential state.

Within the pop-up screen, confirm the action, and a confirmation message will appear at the top of the page.

Note: Alternatively, you can change the current credential state to another credential state by selecting Edit Details for your target credential ID, and then selecting Edit within the Credential pane. See Editing a Credential State.

Change a credential state when the credential is lost or stolen, damaged, locked, or compromised. You can also return a credential to the Enabled state if a previously-lost credential is found, or if the credential is Locked and you need to generate a temporary security code. Follow these steps to change the credential state:

Search for the credential as described in Finding a Credential.

Select Edit Details for your target credential ID.

Select Edit within the Credential pane.

Select the new credential state from the drop-down menu within the Credential pane.

Select Save.

To change the expiration or usage of an existing temporary security code:

Search for the credential as described in Finding a Credential.

Select Edit Details for your target credential ID.

Select Edit within the Temporary Security Code pane.

To change the expiration period, specify the end date and time.

If applicable, select a new usage mode.

Select Save.

Reset a credential if VIP security codes are not allowing successful account Sign In. To reset a credential:

Search for the credential as described in Finding a Credential.

Select Edit Details for your target credential ID.

Select Reset within the Credential pane.

Enter two consecutive security codes.

Select Reset again.

To verify an SMS, Email, or Voice phone number:

Search for the credential as described in Finding a Credential.

Select Edit Details for your target credential ID.

Select Check for the specific SMS, Email, or Voice credential within the Credential pane.

Enter the security code sent to the assigned phone number or email address.

Select Check again.