+1 for hardware token. When we need to send SMS and Email through token2 api, we can add a option to the existing SMS OTP and Email OTP authenticators rather than creating a new authenticator for sending SMS and Email.
On Fri, May 6, 2016 at 10:01 AM, Kanapriya Kuleswararajan < [email protected]> wrote: > Hi Malaka > > We can go with hardware based two factor authinticator with token2. But It > seems like hardware token need be purchased and the secret keys will be > sent upon delivery confirmation. > > FYI > > > > Kanapriya Kuleswararajan > Associate Software Engineer > Mobile : - 0774894438 > Mail : - [email protected] > > On Fri, May 6, 2016 at 9:57 AM, Rajjaz Mohammed <[email protected]> wrote: > >> +1, >> >> Since we already covered most of the methods(SMS, Email, Google App) >> related to OTP. it will better if we include hardware token also so i think >> we need to get hardware. >> >> On Thu, May 5, 2016 at 8:00 PM, Malaka Silva <[email protected]> wrote: >> >>> Hi Kanapriya, >>> >>> Can't we pretty much cover the same requirement with SMS OTP, Google >>> TOTP authenticators? Shall we go for a hardware based two factor >>> authinticator with token2? >>> >>> On Thu, May 5, 2016 at 4:37 PM, Kanapriya Kuleswararajan < >>> [email protected]> wrote: >>> >>>> Hi All, >>>> >>>> I have planned to create Token2 Provisioning connector and Two Factor >>>> IS authenticator. >>>> >>>> Token2 [1] is a simple hosted two factor authentication provider >>>> designed to protect primarily Web based applications (e.g. member area of a >>>> CMS based website). >>>> >>>> It is providing various security solutions, such as hardware token, a >>>> mobile application, TOTPRadius server and Token2 API >>>> >>>> In the authenticator, I am going to choose Token2 Mobile OTP [2]. >>>> >>>> - By using Token2 API , can create user. >>>> >>>> >>>> - In the response we can get the user_id and QR Image url and >>>> mapping those in user claims by association. >>>> >>>> >>>> - With the user_id and Token2 API , can generate and send the OTP >>>> by mail or sms and authenticate the user. >>>> >>>> >>>> - With the QR Image URL , can scan the QR image and authenticate >>>> the user. >>>> >>>> Herewith I have attached the provisioning and authenticator diagram. >>>> >>>> >>>> >>>> >>>> >>>> Please let me know if there's any suggestion that I should work on. >>>> >>>> [1] https://token2.com/?content=about >>>> [2] https://token2.com/?content=mobileapp >>>> >>>> >>>> Thanks >>>> Kanapriya Kuleswararajan >>>> Associate Software Engineer >>>> Mobile : - 0774894438 >>>> Mail : - [email protected] >>>> >>> >>> >>> >>> -- >>> >>> Best Regards, >>> >>> Malaka Silva >>> Senior Tech Lead >>> M: +94 777 219 791 >>> Tel : 94 11 214 5345 >>> Fax :94 11 2145300 >>> Skype : malaka.sampath.silva >>> LinkedIn : http://www.linkedin.com/pub/malaka-silva/6/33/77 >>> Blog : http://mrmalakasilva.blogspot.com/ >>> >>> WSO2, Inc. >>> lean . enterprise . middleware >>> http://www.wso2.com/ >>> http://www.wso2.com/about/team/malaka-silva/ >>> <http://wso2.com/about/team/malaka-silva/> >>> https://store.wso2.com/store/ >>> >>> Save a tree -Conserve nature & Save the world for your future. Print >>> this email only if it is absolutely necessary. >>> >>> _______________________________________________ >>> Architecture mailing list >>> [email protected] >>> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture >>> >>> >> >> >> -- >> Thank you >> Best Regards >> >> *Rajjaz HM* >> Associate Software Engineer >> Platform Extension Team >> WSO2 Inc. <http://wso2.com/> >> lean | enterprise | middleware >> Mobile | +94752833834|+94777226874 >> Email | [email protected] >> LinkedIn <https://lk.linkedin.com/in/hmohammedrajjaz> | Blogger >> <http://wso2experience.blogspot.com/> | WSO2 Profile >> <http://wso2.com/about/team/mohammer-rajjaz/> >> > > > _______________________________________________ > Architecture mailing list > [email protected] > https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture > > -- Kathees Software Engineer, email: [email protected] mobile: +94772596173
_______________________________________________ Architecture mailing list [email protected] https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
