In order for the MobileID app to work, you will need to be able to add a token to the phone. In the page titled Basic setup for testing of OTP - MID, we demonstrated how to create the token, display and scan the QR code, on the DualShield Management Console.
Obviously the end users will not have access to the DMC, therefore we need to be able to send a link via SMS or email in order to push the token to the phone.
This can only be achieved by setting up the DualShield Provisioning Server and Message Gateway: If you have not already done this then use the follwing guides to set up these components:
Setup of Provisioning server: Provisioning Service Portal [PSP]
Setup of the Message Gateways: Message Gateways [MC-MG]
Once these two components have been set up, there are two methods of provisioning. One is manual the other is automatic.
Locate the users account on the DMC and list the tokens. From the token list, clip on corresponding drop down arrow of the token you whish to push and choose push in the menu that comes up and choose the method you wish the end user to receive the token.
The token can also be pushed out automatically at the time of it being created. This will need to be enabled in the policy settings.
Select MobileID/Time-based from the categories:
You now need to edit the policy:
Under Token Provisioning, choose 'Automatically Provision token' from the drop down.
Under 'Token Activation select from the three available option settings;
This option allows the system administrator to determine the action to be taken when a token is created or assigned to a user.
For the purposes of this example I have selected 'Automatically activate the token when created or assigned'.
Under Token/Client Deployment select 'Automatically push' and choose the appropriate delivery methods: