Installation guide

Celestix HOTPin Appliance Installation Guide Page | 38
 Allow users to login with HOTPin OTP – enable login with a
HOTPin token code (OTP).
 Allow QR code authentication – enable QR codes that
client software can use for login.
 Response host address – optional setting to specify
the user website's IP address. The QR login feature will
use whatever address is entered into the browser when
the QR code is created; this field will override the
browser URL and is used in deployments where client
software would not be able to resolve the address
otherwise. For example, if a NetBIOS name is part of the
URL.
Note: If HOTPin high availability is deployed, the
address specified above must match the primary server
address.
 Allow users to login with Active Directory – enable AD
authentication for user site access. If users set up their own
accounts, they will be assigned a HOTPin user name from the
AD authentication property specified in the Create and Edit
User Accounts|Default HOTPin user name field.
Important: If AD is not selected, then users cannot create
their own accounts. AD is required to
authenticate valid domain users.
 Create and Edit User Accounts – enable account provisioning/editing
functions.
 Create new user accounts – users with valid AD accounts can
create HOTPin accounts. An account can be created to use with
either client software or token providers.
 Edit user account information – users can change account
information; if disabled, users can view account information.
Must be enabled to allow users to edit token provider/client
software option.
 Allow users to select token provider when creating/editing
accounts – if disabled, the Default token provider option below
will be assigned. If enabled, you will need to tell users if they
should select an option different from the default. See User
Login Information.
 Default token provider – designates the option that will display
when users view/create accounts. If users can edit their token
provider/client software option, they can change to any option
from the list. If editing is disabled, the method specified here will
be assigned to all user generated accounts. The none option
indicates that client software will be used to generate token
codes. Only one token code generation method can be
assigned to a HOTPin account.
Note: External keys cannot be assigned through the user
site; administrators must assign them through the
web UI.
 Default HOTPin user name – select the AD property that
HOTPin will assign, or indicate User Defined if only HOTPin
authentication will be used.
 Download and Configuration – enable client software setup functions.