Configure Credential Types

Credentials A credential is a stored value (or values) that are used for user verification during authentication. are stored in devices and contain information used to authenticate users, and are linked to a credential type which defines the credential parameters leveraged during user authentication.

Credential types are provided in ActivID Appliance for all the different types of supported authentication tokens, as well PKI certificates.

Credential type parameters include adapter settings, customizable fields and validity settings.

You configure credential types using the ActivID Management Console.

Important: The credential type configuration is complex and requires an advanced understanding of the parameter requirements. It is strongly recommended that you contact HID Global Professional Services before modifying or creating credential types.

Create a Credential Type

Note: It is recommended that you create a new credential type based on a default type with the required adapter. Contact HID Global Professional Services for further information.
Prerequisites: To create a new credential type, you must be assigned the Create credential type permission.
  1. Log on to the ActivID Management Console as a Configuration Manager.

  2. Select the Configuration tab and, under Policies, select Authentication and then Credential Types.
  3. All existing credential types are listed in a paged table. The total number of credential types is given in the lower left corner.

    Each row corresponds to a credential type. It provides the following information in the different columns:

    • Code – the unique code identifying the credential type
    • Name – the name of the credential type
    • Credential Adapter – the credential adapter associated with the credential type

Launch the Credential Type Creation Wizard

  1. Click Add.

  2. Enter the main information for the Credential type:
    • Name – should be unique for ease of administration.
    • Code – a value is automatically generated but it can be changed. The code must be unique, a minimum of three characters, and a maximum of 10 characters. It cannot be changed once the credential type is created.
    • Description – (optional) content is free-format.
  1. Proceed to Define the Credential Adapter Settings.

Define the Credential Adapter Settings

  1. From the drop-down list, select the type of Credential Adapter that you want to create and define the corresponding parameters.
  2. Note: The available parameters depend on the chosen credential adapter.
  1. Click Next and Define the Customizable Fields.
Note: The Next button is only available if the validation constraints for all the parameters in the current tab are met.

Define the Customizable Fields

Note: The values for the Customizable Fields depend on the credential adapter requirements.
  1. If required, enter the search or data field content as required
  2. Click Next and Define the Validity Settings.

Define the Validity Settings

Note: The Validity Settings concern the external management of the credential type (for example, an application to manage the credential lifecycle).
  1. In the Status field, enter/edit the status category.

  1. In the Start Date (dd/mm/yyyy) field, enter/edit the valid start date of the credential type.

  2. In the End Date (dd/mm/yyyy) field, enter/edit the expiry date of the credential type.

  3. Click Save.

Note: The Save button is only available if the validation constraints for the parameters in the main section and in all tabs are met.

Edit a Credential Type

Note: It is recommended that you contact HID Global Professional Services before modifying the credential type settings.
Prerequisites: To edit a credential type, you must be assigned the Update credential type permission.
  1. Log on to the ActivID Management Console as a Configuration Manager.

  2. Select the Configuration tab and, under Policies, select Authentication and then Credential Types.
  1. Click the Code of the credential type that you want to edit.

  1. Edit the credential type settings as required in each tab.

    All the tabs are accessible and all settings can be modified except the:

    • Code
    • Credential Adapter
  1. Click Save to apply your changes.
  2. If you want to cancel the operation, click Back to List.

Delete a Credential Type

Prerequisites:
  • To delete a credential type, you must be assigned the Delete credential type permission.
  • Make sure the credential type is not used by any instances of credentials in the ActivID Appliance database. You will not be able delete the credential type if it is still in use.
  1. Log on to the ActivID Management Console as a Configuration Manager.

  2. Select the Configuration tab and, under Policies, select Authentication and then Credential Types.
  1. To delete one or more credential types, select the checkboxes to the left of the names and click Delete.

  1. Click Yes to delete the types, or No to cancel the operation.

See also:

Configure the Push-Based Validation Credential Type