Symantec Access Management

http://aalab.ca.com/wp/?p=11

Problem

During provisioning ArcotID OTP credential on  mobile phone, an end user needs to input three fields

• Server URL
• User Identifier
• Activation Code

As the URL is a long string, normally it takes long time to input on mobile device,  easily leading to mistyping.

Solution

ArcotID OTP for iOS  supports linkify feature, which allows the Mail App or Browser to automatically bring up the AroctID OTP App via a special otp link. With the info supplied on the otp link, ArcotID otp will pre-fill the 3 fields properly.

For example, if we have the following activation info

• Server URL: https://my.test.com/iam/im/netepub/mobileactivation 
• User Identifier: newuser1
• Activation Code: 123

The otp link will be:
otp://p?u=https%3A%2F%2Fmy.test.com%2Fiam%2Fim%2Fnetepub%2Fmobileactivation&n=newuser1&c=1234

Once the otp link is ready, the link can be sent to the end user via Email.

After receiving the email on Mobile device (ie. iPhone), the end user touchs the otp link.

The Mail app will automatically bring up ArcotID OTP App with all the 3 fields being prefilled.

Limitation

Email App on some Android 4.x devices don’t support the OTP link properly.
To workaround this, we can put a HTTP link in the email, the HTTP link points to a jsp/php page which automatically redirect the browser to the OTP link, then the browser will bring up the ArcotID OTP with the fields pre-filled.