HID Cisco ASA and 4TRESS AAA Server - Manual (Page 12)

ActivIdentity 4TRESS AAA Web Tokens and Cisco ASA | Integration Handbook P 12
External Use | June 8, 2012 | © 2012 ActivIdentity
2.4 Procedure 4: Configure New Cisco Portal
PIN usage is dependent on the custom page deployed. It is possible to hide the Web soft token, and in this case,
it’s necessary to apply a Web soft token without use of a PIN. In this case, the PIN is replaced by the user’s LDAP
password. Please contact your ActivIdentity technical representative to obtain a sample page and to discuss the
following possible combinations of PIN usage:
• Username plus LDAP Password plus visible Web soft token plus PIN plus OTP generated by the
Web soft token.
• Username plus LDAP Password plus visible Web soft token without PIN plus OTP generated by the
Web soft token.
• Username plus LDAP Password plus hidden Web soft token without PIN plus OTP generated by the
Web soft token hidden in the page.
• Username plus visible Web soft token plus PIN plus OTP generated by the Web soft token.
Your ActivIdentity technical contact will send you images, the token applet, and the login portal page. The portal
page will be similar to the following illustration.
FIGURE 1: Sample Cisco ASA Portal