Airlock 2FA Authentication Data Map
Description
Provides Airlock 2FA authentication information regarding the Auth Token ID device, as well as cooldown information of the authentication device.
The provided Auth Token ID information concerns the device from the Auth Token ID and is available as soon as the user has used or activated an Airlock 2FA device as a second factor for authentication in this session. Currently, the following values are provided:
- a2fa-auth-token-device-id: This key provides the device ID of the Airlock 2FA device.
- a2fa-auth-token-device-type: This key provides the device type of the Airlock 2FA device. It can have the following values:
- ios
- android
- hardware
- a2fa-auth-token-device-display-name: This key provides the display name of the Airlock 2FA device.
- a2fa-auth-token-device-enrollment-timestamp: Timestamp (as date-time object) of the point in time when the Airlock 2FA device was enrolled. This value can be used by template-based providers to format the timestamp into a specific date format.
- a2fa-auth-token-device-last-used-timestamp: Timestamp (as date-time object) of the point in time when the Airlock 2FA device was last used. This key is not supplied if no usage has been recorded, i.e. the device has never been used or was last used before 2026-05-19, when Futurae introduced usage recording. This value can be used by template-based providers to format the timestamp into a specific date format.
The cooldown information concerns the device that was used for authentication and is available as soon as the user has successfully used an Airlock 2FA device for authentication in this session. Unlike the Auth Token ID, which is also updated after registering a new device, the values provided here only concern the device used for the actual authentication. Currently, the following values are provided:
- a2fa-cooldown-auth-device: This key reports whether or not the Airlock 2FA device used during authentication is in cooldown. This key can have the following values:
- cooldown: the device is in cooldown
- active: the device is fully active
- a2fa-cooldown-ends: Timestamp (as date-time object) of the point in time when cooldown will end for the Airlock 2FA device that was used during authentication. If the Airlock 2FA device used for authentication is active (not in cooldown), this key is not supplied. This value can be used by template-based providers to format the timestamp into a specific date format.
The following key is always provided and reports what type of devices the user has in the account:
- a2fa-cooldown-devices: This key can have the following values:
- has_active: at least one active Airlock 2FA device is available
- all_cooldown: only Airlock 2FA devices in cooldown are available
- none: no Airlock 2FA devices are available
May be used by
FIDO Credential Selection Step FIDO Credential Selection Step Account Link Removal Initiation Step Account Link Removal Initiation Step Scriptable Validator Password Reset Step Password Reset Step Secret Questions Identity Verification Step Secret Questions Identity Verification Step Email Identity Verification Step Email Identity Verification Step Translated String Provider Cronto Authentication Step Cronto Authentication Step User Identification Step User Identification Step Rename Cronto Device Step Rename Cronto Device Step Public Self-Service OATH OTP Approval Step Public Self-Service OATH OTP Approval Step Airlock 2FA Mobile Only Authentication Step Airlock 2FA Mobile Only Authentication Step User Data Edit Step User Data Edit Step Stop User Representation Step Stop User Representation Step SSI Passwordless Authentication Step SSI Passwordless Authentication Step Set Context Data Step Set Context Data Step SSI Authentication Step SSI Authentication Step Enable FIDO Credential Initiation Step Enable FIDO Credential Initiation Step User Data Registration Step User Data Registration Step Missing Account Link Step Missing Account Link Step OAuth 2.0 Consent Step OAuth 2.0 Consent Step Device Token Registration Step Device Token Registration Step OAuth 2.0 Consents Delete Initiation Step OAuth 2.0 Consents Delete Initiation Step User Identification with FIDO Authentication Step User Identification with FIDO Authentication Step Boolean From Map Value Provider OTP Check via RADIUS Step OTP Check via RADIUS Step mTAN Token Edit Step mTAN Token Edit Step Remember-Me Reset Step Remember-Me Reset Step Airlock 2FA Authentication Step Airlock 2FA Authentication Step Cronto Device Reset Step Cronto Device Reset Step Terms Of Services Step Terms Of Services Step Template-based String Provider Password-only Authentication Step Password-only Authentication Step Flow Continuation Step Flow Continuation Step Mandatory Password Change Step Mandatory Password Change Step Cronto Letter Order Step Cronto Letter Order Step Red Flag Raising Step Red Flag Raising Step Enable Cronto Device Initiation Step Enable Cronto Device Initiation Step Ticket String Provider Delete FIDO Credential Initiation Step Delete FIDO Credential Initiation Step Airlock 2FA Delete Devices Step Airlock 2FA Delete Devices Step OAuth 2.0 SSO Step OAuth 2.0 SSO Step Selection Step for Public Self-Service Selection Step for Public Self-Service OAuth 2.0 Client Registration Step OAuth 2.0 Client Registration Step Airlock 2FA Public Self-Service Approval Step Airlock 2FA Public Self-Service Approval Step Selection Step for User Self-Registration Selection Step for User Self-Registration User Identification Step (Public Self-Service) User Identification Step (Public Self-Service) Airlock 2FA Usernameless Authentication Step Airlock 2FA Usernameless Authentication Step Start User Representation Step Start User Representation Step Cronto Activation Step Cronto Activation Step Airlock 2FA Activation Step (with additional Activation) Airlock 2FA Activation Step (with additional Activation) Complete Migration Step Complete Migration Step Template-based Username Transformer Cronto Message Provider Set Authentication Method Step Set Authentication Method Step SSI Verification Step SSI Verification Step OAuth 2.0 Consent Grant Initiation Step OAuth 2.0 Consent Grant Initiation Step SMS Identity Verification Step SMS Identity Verification Step Unlock User Step (Public Self-Service) Unlock User Step (Public Self-Service) Email Change Verification Step Email Change Verification Step Email OTP Transaction Approval Step Email OTP Transaction Approval Step Email OTP Authentication Step Email OTP Authentication Step Device Token Identity Verification Step Device Token Identity Verification Step Delete mTAN Number Initiation Step Delete mTAN Number Initiation Step Remember-Me Token Generating Step Remember-Me Token Generating Step Airlock 2FA Activation Letter Order Step Airlock 2FA Activation Letter Order Step Airlock 2FA Device Deletion Initiation Step Airlock 2FA Device Deletion Initiation Step Email Message Provider Cronto Public Self-Service Approval Step Cronto Public Self-Service Approval Step Scriptable Step Scriptable Step Scriptable Step Username Password Authentication Step Username Password Authentication Step Selection Step for Self-Service Selection Step for Self-Service Risk Assessment Step Risk Assessment Step FIDO Credential Display Name Change Step FIDO Credential Display Name Change Step Role-based Tag Acquisition Step Role-based Tag Acquisition Step Transaction Approval Parameter Step Transaction Approval Parameter Step Airlock 2FA Recovery Trusted Session Binding Step Airlock 2FA Recovery Trusted Session Binding Step Select mTAN Token Step Select mTAN Token Step Device Token Authentication Step Device Token Authentication Step Matrix Public Self-Service Approval Step Matrix Public Self-Service Approval Step Voluntary Password Change Step Voluntary Password Change Step Username Generation Step Username Generation Step Transforming Value Map Provider Login From New Device Step Login From New Device Step User Lock Step User Lock Step Acknowledge Message Step Acknowledge Message Step Remote Event Subscriber (Loginapp) Password Change Self-Service Step Password Change Self-Service Step Abort Step Abort Step User Role Assignment Step User Role Assignment Step Email Event Subscriber (Loginapp) Delete Cronto Device Initiation Step Delete Cronto Device Initiation Step Vasco OTP Public Self-Service Approval Step Vasco OTP Public Self-Service Approval Step Delete All Device Tokens Step Delete All Device Tokens Step Enable Cronto Push Initiation Step Enable Cronto Push Initiation Step mTAN Transaction Approval Step mTAN Transaction Approval Step Cronto Device Selection Step Cronto Device Selection Step Matrix Self-Service Approval Step Matrix Self-Service Approval Step mTAN Authentication Step mTAN Authentication Step FIDO Transaction Approval Step FIDO Transaction Approval Step Representation SSO Ticket Identifying Step Representation SSO Ticket Identifying Step OATH OTP Authentication Step OATH OTP Authentication Step Email Verification Step Email Verification Step Email Notification Step Email Notification Step Email Notification Step Delete OAuth 2.0 Session Initiation Step Delete OAuth 2.0 Session Initiation Step Never Migrate Step Never Migrate Step mTAN Public Self-Service Approval Step mTAN Public Self-Service Approval Step FIDO Passwordless Authentication Step FIDO Passwordless Authentication Step Failure Step Failure Step SMS Event Subscriber (Loginapp) Set Authentication Method Migration Step Set Authentication Method Migration Step SSO Ticket Authentication Step SSO Ticket Authentication Step Remember-Me User Identifying Step Remember-Me User Identifying Step OAuth 2.0 Session Reset Step OAuth 2.0 Session Reset Step Username Password with FIDO Authentication Step Username Password with FIDO Authentication Step mTAN Verification Step mTAN Verification Step User Identification By Data Step (Public Self-Service) User Identification By Data Step (Public Self-Service) Vasco OTP Device Activation Vasco OTP Device Activation Airlock 2FA Message Provider On Behalf Login Identity Propagation Legacy ID Propagation Adapter SSI Issuance Step SSI Issuance Step SSI Issuance Step Apply Changes Step Apply Changes Step Migration Selection Step Migration Selection Step Tag Removal Step Tag Removal Step Password Letter Order Step Password Letter Order Step Airlock 2FA Activation Trusted Session Binding Step Airlock 2FA Activation Trusted Session Binding Step FIDO Public Self-Service Approval Step FIDO Public Self-Service Approval Step Flow Continuation Token Consumption Step Flow Continuation Token Consumption Step Airlock 2FA Activation Step Airlock 2FA Activation Step SAML 2.0 SP User Identifying Step SAML 2.0 SP User Identifying Step CrontoSign Swiss Push Activation Step CrontoSign Swiss Push Activation Step Airlock 2FA Device Edit Initiation Step Airlock 2FA Device Edit Initiation Step Cronto Approval Stealth Step Cronto Approval Stealth Step User Persisting Step User Persisting Step Set Password Step Set Password Step mTAN Self-Service Approval Step mTAN Self-Service Approval Step FIDO Authentication Step FIDO Authentication Step Airlock 2FA Transaction Approval Step Airlock 2FA Transaction Approval Step Phone Number Verification Step Phone Number Verification Step Realm Assignment Step Realm Assignment Step Airlock 2FA Push Event Subscriber (Loginapp) FIDO Self-Service Approval Step FIDO Self-Service Approval Step OAuth 2.0 Client Persisting Step OAuth 2.0 Client Persisting Step Airlock 2FA Device Edit Step Airlock 2FA Device Edit Step Disable Cronto Push Initiation Step Disable Cronto Push Initiation Step Disable Cronto Device Initiation Step Disable Cronto Device Initiation Step HTTP Basic Authentication Step HTTP Basic Authentication Step Delete Remember-Me Device Initiation Step Delete Remember-Me Device Initiation Step SSI Self-Registration Issuance Step SSI Self-Registration Issuance Step SSI Self-Registration Issuance Step Integer From Map Value Provider OAuth 2.0 Consent Deny Initiation Step OAuth 2.0 Consent Deny Initiation Step Disable FIDO Credential Initiation Step Disable FIDO Credential Initiation Step mTAN Message Provider Account Link Linking Initiation Step Account Link Linking Initiation Step Vasco OTP Authentication Step Vasco OTP Authentication Step User Unlock Step (Self-Registration) User Unlock Step (Self-Registration) OATH OTP Activation Step OATH OTP Activation Step String From Map Value Provider Selection Step Selection Step Certificate Credential Extraction Step Certificate Credential Extraction Step Date And Time From Map Value Provider Cronto Transaction Approval Step Cronto Transaction Approval Step Vasco OTP Self-Service Approval Step Vasco OTP Self-Service Approval Step Cronto Self-Service Approval Step Cronto Self-Service Approval Step Matrix Checking Step Matrix Checking Step Send Email Link Step Send Email Link Step Send Email Link Step Date From Map Value Provider Kerberos Authentication Step Kerberos Authentication Step No Operation Step No Operation Step Airlock 2FA Self-Service Approval Step Airlock 2FA Self-Service Approval Step Conditional Value Map Provider Legacy Email OTP Authentication Step Legacy Email OTP Authentication Step FIDO Registration Step FIDO Registration Step Secret Questions Provisioning Step Secret Questions Provisioning Step mTAN Token Registration Step mTAN Token Registration Step User Identification By Data Step User Identification By Data Step
Properties
Airlock 2FA Settings (
airlock2faSettings) Description
Settings of Airlock 2FA. It is recommended to use the same settings everywhere. Otherwise, the values provided by this data map can seem inconsistent.
Attributes
Plugin-Link
Mandatory
Assignable plugins
YAML Template (with default values)
type: Airlock2FAAuthenticationDataValueMapProvider
id: Airlock2FAAuthenticationDataValueMapProvider-xxxxxx
displayName:
comment:
properties:
airlock2faSettings: