Authentication Methods (Push, OTP, IVR)

---

The Auth Proxy server supports the following authentication methods for login. Community administrators configure which methods are permitted:

• Push Authentication

• Interactive Voice Response (IVR)

• Passcodes (OTP, Password and OTP, OTP and Password)

• Default Login Methods (RADIUS only): Push, Phone

Login with Push

When enabled, users authenticate to their RADIUS or LDAP client by sending a push notification to their mobile device using the 1Kosmos Mobile Application. Instead of entering a password, users enter the keyword push, which triggers a push notification to their 1Kosmos mobile app. Users authenticate the push notification using their enrolled biometrics, such as a fingerprint or face scan.

• To enable, check the Login with Push box.

• To disable, uncheck the Login with Push box.

Login with Interactive Voice Response (IVR)

When enabled, users authenticate their RADIUS or LDAP client using IVR on their mobile device. They provide their identifier (username for RADIUS, or distinguishedName for LDAP) along with the keyword phone in the password field. This initiates a phone call to the user's registered number, where they are prompted to press a specified button on the IVR to authorize authentication.

Login with passcodes (OTP)

Administrators enable and define which one-time passcode (OTP) combinations can be used. Select from the following options:

• Not supported — users cannot log in using passcodes.

• Prompt for OTP only — when prompted for a password, the user provides only the 6-digit passcode.

• Prompt for Password and OTP — the user provides the password with the 6-digit passcode appended to the end. Example: MyP@ssw0rd873174.

• Prompt for OTP and Password — the user provides the password with the 6-digit passcode prepended before it. Example: 873174MyP@ssw0rd.

Default Login Methods (RADIUS only)

When no credentials are provided over RADIUS, the system can automatically trigger an authentication method:

• Push — sends a push notification to the user's biometrics-enabled device through the 1Kosmos Mobile Application; the user approves with their enrolled biometrics.

• Phone — initiates a phone call to the user's registered number using IVR; the user follows the IVR instructions to approve.