Device Tokens allow to bind a mobile app (or other REST clients) to an IAM account and use the involved device token as a non-user-interactive first or second authentication factor.
It is thought for the following scenario:
- Initial authentication: The HTTP client authenticates using username, password, and a 2nd factor (e.g. MTAN).
- Device Token registration: The HTTP client generates a key pair and associates the public key with the user account.
- Following logins: Dependent on the configuration, HTTP clients authenticate either using the device token step as the first factor or using username, password, and device token step as the second factor.
Further information and links
- Please refer to Device tokens - REST authentication API for further details.