¶ What Tokens are For
One of the new credential components with SystoLOCK is OTP, or One-Time-Password. This is also called "possession factor", meaning that this is something that you "have". If is implied here that the OTP comes from (is generated by) a device that you actually possess.
Tokens come in different shapes and forms, bust also employ different cryptographic algorithms to generate OTPs. While the form is definitely not that important, the underlying algorithms are.
¶ SystoLOCK Companion
SystoLOCK Companion is a fully OATH-compliant soft-token authenticator that also provides advanced functionality, such as Fast Login, Smart Login, Offline Login, etc., if used with SystoLOCK.
You can install SystoLOCK Companion for both mobile platforms here: https://systola.com/systolock/companion
It offers nearly touchless login, offline OTP functionality, self-provisioning and many more useful functions to boost productivity and login time.
SystoLOCK Companion should be considered first choice authenticator in SystoLOCK deployments. Only SystoLOCK Companion offers advanced features and enhanced ergonomics for SystoLOCK deployments.
¶ OATH Standards
OATH stands for Initiative for Open AuTHentiction. More information is available on their official site.
OATH should not be confused with OAuth, an open standard for access delegation used on the internet.
OATH defines three OTP-generating standards:
- HOTP: HMAC-based One-time Password Algorithm as defined in RFC 4226.
- TOTP: Time-based One-time Password Algorithm es defined in RFC 6238.
- OCRA: OATH Challenge-Response Algorithm as defined in RFC 6287.
SystoLOCK can work with any OATH-compatible tokens. Many vendors offer OATH tokens, alongside with their vendor-specific ones. A partial list of OATH-compliant OTP token vendors includes Vasco, Gemalto, Entrust, Yubico, SafeNet, Fortinet, and ActivIdentity. A more comprehensive list is available on the site of OATH Initiative.
 |
|---|
| A time-based token from Feitian |
¶ Other Soft-Tokens
Alongside with hardware tokens, described above, SystoLOCK is compatible with various soft-tokens, such as Google Authenticator, Authy, etc. Please, bear in mind that while these apps are convenient for web-based logins, most of them only implement a subset of the described standards and may lack needed functionality.
 |
|---|
| Google Authenticator and Authy |
Assisted SystoLOCK Logins are not available with these generic soft-tokens.