View Device Data

View the user’s authentication logs before you take any action to change a device’s status or resolve a problem with authentication. Before you change any device settings, see View Authentication Logs for a Specific User.

Click the corresponding link for the user’s device in the Device Id column of the search results form.

You cannot modify the user information and settings in this page. Use the links displayed below the data to perform an action.

User and Device Information

The following table lists the fields in the User and device information:

Item	Description
User ID	The user’s assigned identifier.
Group	The groups to which the user belongs.
Device Serial Number	The identifier for the user’s device.
Mini Token PIN status (Available for Mini Tokens only)	Whether or not the PIN code for the Mini Token is set.
Authentication	The authentication mode set for the user (Dual or Single).
Server	The name of the ActivID AAA Server.
Gate	The gate name through which the user is authorized access.
Tries	The number of times the user attempted to authenticate unsuccessfully within the set limit (for example, 4/5).
Locked	Whether or not the user’s device is manually locked by an administrator or a Help Desk Operator. The field displays Yes or No.
Temporary Password	Whether or not a temporary password is assigned to the user. The field displays temporary password or LDAP emergency password.
Until	The validity period for a temporary password, if applicable.
SMS	Whether or not the SMSBackup is configured on the user’s device. The field displays Yes or No.
SMS Until	The validity period for the SMSBackup, if applicable.
First Connection	The time and date of the user’s first connection to the server.
Last Connection	The time and date of the user’s most recent (last) connection.

Status Indicators

The following table lists the Status indicators:

Icon	Description
	If the icon at the beginning of the line of data is green, then the user can connect to the server. A server icon (with an X across it) at the beginning of the line of data indicates that the Web Help Desk cannot contact to the server.
	If the icon is red, then the user cannot connect to the server. The possible reasons for a red icon are: The user exceeded the maximum number of unsuccessful attempts permitted for authenticated access. Look at the Tries column to see if this is the case. For more information, see Tries. An Administrator used the Help Desk to manually lock the user’s device. The user cannot authenticate, but is still in the database and still has a device assigned. Look at the Locked column to see if this is the case. For more information, see Locked. The user has not yet set a PIN code for an assigned Mini Token (AT/AE/OE) when the Mini Token PIN policy is set to ‘PIN before’ or ‘PIN after’. In either case, use the Unlock and reset number of tries link at the bottom of the page to fix the problem (only if you are have the rights to grant access to the user). If in doubt as to the current status, click on the Refresh link to display updated information.
or	If the icon at the beginning of the line of data is green with a B or red with a B, then the help desk, respectively, has connected to or cannot connect to the backup replica of a primary/backup server pair.
or	If the icon at the beginning of the line of data is green with a P or red with a P, then the help desk, respectively, has connected to or cannot connect to one of the servers in the server pool.

Links

The following table lists the Links:

Link	To...
New search	Perform a new search.
Authentication logs	View the user’s authentication logs.
SMSBackup	Enable SMS backup.
Synchronization	Synchronize the device.
Manual locking	Manually lock the device. Note: Do not unlock a user’s device unless you know why it was locked and whether or not you should permit the user authenticated access.
Temporary Password	Enable a temporary password.
Unlock and reset number of tries	Unlock a device and reset the number of PIN tries to zero (0).
Unlock PIN code (not available for Mini Tokens)	Unlock the device’s PIN code.
Set PIN Code (Available for Mini Tokens only)	Set the PIN code for a Mini Token.
Unassign device from user	Unassign the device from the user (not for soft tokens). Note: Only if device assignment functions are enabled.
Assign additional device to user	Assign the device to the user who already has devices assigned. Note: Only if device assignment functions are enabled Note: HID Approve Secure Tokens cannot be assigned to a user. They must be enrolled by the user using the Self Help Desk function.
Refresh	Refresh the data for the selected user.

Options Available that Depend on Rights

The following table lists the options available with specific rights:

If...	Then...
You do not have the rights to manage a specific user.	Only three options display: New search, Refresh, and Authentication logs.
You are viewing data for a software token.	The Unlock PIN code option is not available.
You do not have the rights to activate SMS backup (as configured in AAA Server Administration Console), or The user does not have a mobile telephone configured in the LDAP directory.	The SMSBackup option is not available.