mTAN number registration with IAK | | Register a phone number in the login process after verifying the username, password, and an IAK (initial activation key). Migration hint Use a Selection Step in the authentication flow with a Logical AND condition with the following sub-conditions: - Active Authentication Method for authentication method MTAN
- Logical NOT of the Has mTAN Token condition
- Has mTAN Activation Letter condition
Then use the following steps in the corresponding sub-flow: - User Data Edit Step to enter phone number
- MTAN Verification Step with IAK verification enabled
- Apply Changes step
|
mTAN registration: Allow phone number change | | Configure whether an already stored phone number can be changed or not during mTAN token registration. Migration hint Use the mTAN token self-management features (protected self-service flows) instead. The suggested solution is available only for logged-in users. The user must therefore first log in with the existing phone number and can then change the phone number in the mTAN token self-management. |
| | Migrate to mTAN as 2nd factor during the login process. Migration hint Use the following steps for token migration in the authentication flow: - mTAN Token Registration Step
- mTAN Verification Step
- Apply Changes Step
To show a confirmation page, use an Acknowledge Message Step with a corresponding Custom Step UI in the token migration sub-flow. |
Token migration: phone number normalization | | If enabled, the entered phone number is normalized before being validated and stored. Migration hint The normalization feature is always on and cannot be turned off. |
Token migration: phone number validation | | Check if a valid phone number was entered by the end-user. Migration hint In the mTAN Token Registration Step configure one or more validators in property Validators On Normalized. |
mTAN token self-management | | Management of registered phone numbers for authenticated users. This includes adding new numbers, deleting numbers, changing existing numbers and labels. Phone numbers may be masked. Migration hint To enable the self-service and display the list of registered numbers, configure User Self-Service Settings >> mTAN Number List. To enable and configure the single self-service actions (add, edit, delete) configure one or more of the following plugins in the list of Protected Self-Service Flows: - Default mTAN Token Registration Flow
- Default mTAN Token Edit Flow
- Default mTAN Deletion Flow
As an alternative to the above-mentioned default flows, you may manually configure each flow as a list of steps using a Self-Service Flow plugin. As a starting point, please refer to the plugin documentation to see what flow it uses internally. |
mTAN token self-management: phone number normalization | | If enabled, the entered phone number is normalized before being validated and stored. Migration hint The normalization feature is always on and cannot be turned off. |
mTAN token self-management: phone number validation | | Check if a valid phone number was entered by the end-user. Migration hint In the mTAN Token Registration Step configure one or more validators in property Validators On Normalized. |