Home / Integration plugins / VASCO IDENTIKEY SMS OTP Integration

+

Send SMS OTP codes from VASCO IDENTIKEY

When a user signs in with a VASCO IDENTIKEY on-demand code, the code is sent by SMS through SMSEagle, your own hardware SMS gateway. The request stays in your local network, with no cloud SMS provider.

OTP codes never touch a third party

IDENTIKEY’s MDC module normally hands SMS delivery to a cloud provider. Point it at SMSEagle instead: the tokencode request stays on your local network and the code is sent from your own device over the cellular network.

Works in isolated and air-gapped networks

Cloud SMS delivery needs outbound internet access from your authentication server. SMSEagle sends messages on-premises over its own cellular connection, delivering on-demand tokencodes even in fully offline installations.

Predictable cost, no vendor dependency

Cloud SMS OTP is billed per message, often at premium authentication rates. SMSEagle sends over a standard SIM at local carrier rates – no per-message fees, no external contract.

How it works

1

Login attempt

A user authenticates to an agent with their username and on-demand PIN through IDENTIKEY.

2

Tokencode request

IDENTIKEY’s MDC module sends the on-demand tokencode and mobile number to SMSEagle over HTTP.

3

Code delivery

SMSEagle delivers the code over its own cellular connection, not through a third-party service, as an SMS to the user’s own phone.

Set up in about 10 minutes

Enable SMS delivery in the IDENTIKEY MDC settings and enter the SMSEagle address, and codes are sent by SMS.

SMSEagle sends VASCO IDENTIKEY one-time codes by SMS from your own device, with no cloud SMS provider.

Works on any phone

An SMS code needs no app: people receive it on any mobile phone.

Every code sent is recorded

SMSEagle records every code it sends, together with its status, so you can check whether it was received.

Logins work even if one device fails

Two SMSEagle devices can work as an HA cluster: if one fails, the other takes over sending codes.

SMSEagle configuration

  1. Create a new user in SMSEagle (menu System > Users) with access level “User”.
  2. Grant API access to the created user:
    • go to Settings > Global settings > API and open the API v1 page
    • click Create API key, fill in Key name and select that user as Owner
    • Add access permissions in section Permissions for: Send SMS, Send to contact, Send to group
    • click Create key. Then, in System > Users, open that user and tick Enable user/password authentication (APIv1 only).
  3. Open Settings > Global settings > Network > SSL, turn off Forward HTTP to HTTPS and click Save changes.

 

VASCO IDENTIKEY configuration

Appliance Setup

  1. Login to IDENTIKEY Appliance.
  2. In menu choose: Authentication Server > MDC
  3. Configure the following settings:

a. Enable MDC by checking the checkbox “Enabled” at the top of the page

b. In section “SMS Delivery” check the “Enable” checkbox

c. Protocol: HTTPS

d. URL: https://url-of-smseagle/index.php/http_api/send_sms

e. Port: 443

f. Username: username created on your SMSEagle device

g. Password: password for the user created on your SMSEagle device

h. Query String:

login=[acc_user]&pass=[acc_pwd]&to=[otp_dest]&message=[otp_msg]

i. Form Method: GET

j. Press „Save” button at top right corner

  1. Define the triggers for success and failure:

a. Select the tab “Success Message” and enter “OK;ID=” in the Audit Text

Explore SMSEagle Demo device

SMSEagle is a hardware & software solution that guarantees a swift delivery of your messages to designated recipients, whether it’s for notifications, alerts, or important updates.

After registering to a demo you get a remote access to our physical device NXS-9750.

  • 14-days free trial
  • Access to over 20 functionalities

What is hardware
SMS Gateway?

Learn more about
SMSEagle features