Configuring External Passcode Validation

Users can log on with external passcodes generated by a third-party passcode provider such as RSA SecureID passcode.

To allow this kind of authentication, you need to make sure that the following prerequisites are met:

• The system that generates external passcodes is configured properly.

• The developers have implemented a policy script containing the validatePasscode(config, context, result, username, passcode) function.

  The function has to use the validatePasscode(...) method, and the policy script has to define when the validation is successful and when the user authentication fails. For more details how to develop this kind of script and what methods you can use, see Related Information.

• The otp.use.external.passcode.validation property is enabled for TOTPLoginModule.

  You can set this property in SAP NetWeaver Administrator as a login module option or in the policy script. For more details about how to set options for TOTPLoginModule, see Related Information.