The configuration and creation of the "Digipass for Mobile" app is handled by OneSpan (Vasco). This section only describes the configuration that is specific to Airlock IAM.
OneSpan (Vasco) Digipass Configuration
It is important that the Digipass configuration be as secure as possible. In particular, secure hash functions should be chosen and the OTP application should generate long OTPs to prevent brute-forcing of transaction list requests.
The following XML templates contain parameters [iam-host] and [iam-mapping]. These are typically the hostname of the Airlock Gateway and the entry path of the IAM mapping.
Important: all requests to Airlock IAM must be configured as POST requests.