The policy option for Mobile app push authentication is located in the OOBA -Push section in the "MobileID/Time-Based" policy

Enable OOBA (Out-of-Band Authentication)

 To enable or Disable Out-of-Band Authentication 

OOBA URL

In DualShield 6, OOBA registration and verification functions are provided by the DualShield SSO service. In a DualShield system in which there are multiple DualShield SSO servers, e.g. one in the frontend and one in the backend, then you must specify the SSO server that is to be used for OOBA by entering the FQDN of the SSO server in this entry.

Registration Authentication

  •  Always ask the user to verify the password when registering a new device

When a user attempts to register a device for OOBA, password authentication is required.

  • Only ask the user to verify if the link session timed out

When the registration link has timed out, password authentication is required.

Registration Session Timeout

Defines the timeout period of the registration link.

Logon Request Timeout

Defines the timeout period of the logon request.

Enforce Local Authentication

If this option is enabled, then users must be verified by the specified local authentication in order to approve a push authentication request

Local Authentication Method

Define the local authentication method to be used to verify the user 


  • No labels