New Device Cookie
Description
Configures the cookie used for detecting a login from a new device.
May be used by
Properties
Cookie Name (
cookieName) Description
The name of the cookie that is used to detect whether a login from a new device happened.
If this name is changed, the IAM Loginapp mapping on Airlock Gateway has to be reconfigured to pass-through this cookie.
Attributes
String
Optional
Length <= 30
Length >= 1
Validation RegEx: [a-zA-Z0-9_]+
Default value
AL_LoginFromNewDevice
Key (
key) Description
The key used to encrypt the cookie. Must be 32 Bytes encoded as Base64 String.
One can, for example, generate a random base64 string with 256 bits (32 bytes) using OpenSSL as follows: openssl rand -base64 32
If this value is changed, all previously used devices are forgotten.
Attributes
String
Mandatory
Sensitive
Length <= 44
Length >= 44
Validity (
validity) Description
Time period during which previous logins are considered. If a user's most recent login on a device is older than the configured validity period, the device is treated as new for that user.
Attributes
String
Optional
Default value
365d
Example
10d
Example
8h
Example
2d 12h
YAML Template (with default values)
type: NewDeviceCookie
id: NewDeviceCookie-xxxxxx
displayName:
comment:
properties:
cookieName: AL_LoginFromNewDevice
key:
validity: 365d