Cronto Engine Handler
Description
Cronto functionality using the CrontoEngine implementation.
May be used by
Default Disable Cronto Device Flow Transaction Approval Cronto Message Provider Cronto Authentication Step Cronto Token Service Rename Cronto Device Step Cronto Letter Order Condition Apply Cronto Device Disabling Apply Cronto Device Enabling Cronto Device Reset Step Cronto Letter Order Step Enable Cronto Device Initiation Step Cronto Report Strategy Cronto Device Removal Possible Cronto Activation Step Cronto Message Provider Default Enable Cronto Push Flow Has Cronto Device Cronto Device List Cronto Public Self-Service Approval Step Cronto Self-Services (Legacy) Cronto Token Controller Apply Cronto Push Disabling Default Disable Cronto Push Flow Has Cronto Account Apply Cronto Push Enabling Cronto Letter User Event Listener Delete Cronto Device Initiation Step Enable Cronto Push Initiation Step Cronto Device Selection Step Default Enable Cronto Device Flow Apply Cronto Device Renaming Default Cronto Device Renaming Flow CrontoSign Swiss Push Activation Step Cronto Approval Stealth Step CrontoSign Swiss Push Activation Possible Disable Cronto Push Initiation Step Default Cronto Login Message Provider Disable Cronto Device Initiation Step Apply Cronto Device Deletion Default Cronto Device Removal Flow Main Authentication Settings Cronto Transaction Approval Step Cronto Self-Service Approval Step Loginapp Cronto Activation Required Cronto Activation Possible
Properties
Maximum Number Of Activated Devices (
maximumNumberOfActivatedDevices) Description
The maximum number of devices that a user can have activated simultaneously.
Attributes
Integer
Optional
Default value
8
Default Allowed Platforms (
defaultAllowedPlatforms) Description
Defines the platforms for which an activation letter can be used per default. This can always be changed by an administrator for an individual letter.
Currently, the following platform codes are supported:
- 0: stand-alone Cronto device
- 1: iOS
- 2: Android
- 3: Windows phone
- 4: Blackberry
- 5: rooted iOS
- 6: rooted Android
Attributes
String
Optional
Default value
01234
Platform Blacklist (
platformBlacklist) Description
Blacklist of blocked platform types. If a type is on this list, it can not be used for login or transaction signing and new devices of this type cannot be activated, independent of the allowed platforms in the activation letter.
Currently, the following platform codes are supported:
- 0: stand-alone Cronto device
- 1: iOS
- 2: Android
- 3: Windows phone
- 4: Blackberry
- 5: rooted iOS
- 6: rooted Android
Attributes
String
Optional
Challenge Token Lifetime [s] (
challengeTokenLifetime) Description
The lifetime in seconds of a challenge token. After the lifetime of a challenge token has expired, no successful validation with this token is possible anymore and the token is deleted upon the next verification request.
Attributes
Integer
Optional
Default value
300
Enable Push Notifications (
enablePushNotifications) Description
If this option is selected, push notifications are enabled for users with a device that supports this feature.
Attributes
Boolean
Optional
Default value
false
Bank URL Index (
bankUrlIndex) Description
Index of the bank URL hard-coded in the CrontoSign application.
Attributes
Integer
Optional
Push Notifications Reminder Period (
pushNotificationsReminderPeriod) Description
Number of Cronto device usages required before a user is asked again whether push notifications should be activated for this device. A value of "1" means that the user is asked upon every login.
Attributes
Integer
Optional
Default value
3
Service Code (
serviceCode) Description
The Cronto Service Code used to generate the Cronto challenges. If the value is empty the Service Code of IAM will be used. Normally there is no need to overwrite this property.
Attributes
String
Optional
Sensitive
Push Notification Sender (
pushNotificationSender) Description
Plugin responsible for sending Cronto push notifications.
Attributes
Plugin-Link
Optional
Assignable plugins
Token Data Provider (
tokenDataProvider) Description
Plugin to load tokens from persistence.
Attributes
Plugin-Link
Mandatory
Assignable plugins
Default Number of Letter Usages (
defaultNumberOfActivations) Description
Defines how many times an activation letter can be used per default to activate devices or apps. This can always be changed by an administrator for an individual letter.
Attributes
Integer
Optional
Default value
8
Default Letter Validity Time (
defaultLetterValidityTime) Description
Defines how long (how many days) an activation letter can be used per default to activate devices or apps. This can always be changed by an administrator for an individual letter. If no value is set, the validity is not limited.
Attributes
Integer
Optional
Selectable As Auth Method (
selectableAsAuthMethod) Description
Disable to prevent CrontoSign from being selected as active authentication method.
Attributes
Boolean
Optional
Default value
true
Selectable As Next Auth Method (
selectableAsNextAuthMethod) Description
Disable to prevent CrontoSign from being selected as the next authentication method (migration).
Attributes
Boolean
Optional
Default value
true
Enable On-Screen Activation (
enableOnScreenActivation) Description
If enabled, allows users to register Cronto devices with an on-screen activation cryptogram. This is typically the case when users do not have activation letters. If on-screen activation with a letter must be possible, enable "Enable On-Screen Activation With Letter".
On-screen activation is only possible in two situations: (1) during credential migration and (2) when activating an additional device.
Attention: make sure that such an activation can only be accessed by strongly authenticated users. For this, the "Strong Authentication Tag" must be configured on the following plugins (if used):- Cronto Activation Step
- Cronto Activation Possible
- Cronto Activation Required
Attributes
Boolean
Optional
Default value
false
Enable On-Screen Activation With Letter (
enableOnScreenActivationWithLetter) Description
If enabled, allows users who have a Cronto activation letter to register Cronto devices with the activation cryptogram from the letter being displayed in the browser.
Attention: make sure that such an activation can only be accessed by strongly authenticated users (refer to the documentation of "Enable On-Screen Activation")
Attributes
Boolean
Optional
Default value
false
Available Printing Options (
availableOrderOptions) Description
If several different ways of printing the letter are needed (for example to print locally or via the central printer, or to also order a device), then these printing options can be defined. The printing options allow to define separate printing task for different printing options.
Attributes
String-List
Optional
Default value
[default]
Options Resource Key Prefix (
optionsResourceKeyPrefix) Description
If this property is defined, the order options are assumed to be resource key and are used together with the prefix defined here to display a translated version of the options. If left empty, the options are displayed as defined above.
Attributes
String
Optional
Default value
cronto-order-option.
Default Printing Options (
defaultOrderOptions) Description
Defines the default order options for a new letter (what will be set for a new letter).
Attributes
String-List
Optional
Default value
[default]
YAML Template (with default values)
type: CrontoEngineHandler
id: CrontoEngineHandler-xxxxxx
displayName:
comment:
properties:
availableOrderOptions: [default]
bankUrlIndex:
challengeTokenLifetime: 300
defaultAllowedPlatforms: 01234
defaultLetterValidityTime:
defaultNumberOfActivations: 8
defaultOrderOptions: [default]
enableOnScreenActivation: false
enableOnScreenActivationWithLetter: false
enablePushNotifications: false
maximumNumberOfActivatedDevices: 8
optionsResourceKeyPrefix: cronto-order-option.
platformBlacklist:
pushNotificationSender:
pushNotificationsReminderPeriod: 3
selectableAsAuthMethod: true
selectableAsNextAuthMethod: true
serviceCode:
tokenDataProvider: