Configure authenticator tokens

Update the QR Code URLs in psid3.xml

This section describes how to configure the Login app authenticator tokens by updating the Google HOTP and Google TOTP QR code URLs in the psid3.xml configuration file.

Before you begin, create a backup copy of psid3.xml. XML files are sensitive to incorrect characters, blank spaces, and formatting changes.

The default location of psid3.xml is:

C:\Program Files\Pointsharp\Pointsharp ID\bin

  1. Copy psid3.xml file to for example the Desktop of the ID Server.

  2. Open psid3.xml in a text editor. For easier XML editing, use an editor that supports XML formatting, such as Notepad++.

  3. Locate the GoogleHOTPSettings section. You can search for GoogleHOTPSettings in the file:

config auth tokens 1

  1. In the GoogleHOTPSettings section, update the URL to https://mtd.psid.se/4/ghqr/

    config auth tokens 2

  1. Add the required NotificationMethod name and NotificationAttribute. For example, use mobile for SMS notifications.

  2. Locate the GoogleTOTP section directly below the GoogleHOTPSettings section.

  3. In the GoogleTOTP section, update the URL to https://mtd.psid.se/4/gtqr/

  4. Add the required NotificationMethod name and NotificationAttribute. For example, use mobile for SMS notifications.

    config auth tokens 3

If the previous URL configuration was working, you do not need to change the existing Text, NotificationMethod, or NotificationAttribute values unless your configuration requires it.

  1. Replace the original psid3.xml file in C:\Program Files\Pointsharp\Pointsharp ID\bin with the updated version.

  2. Restart the Pointsharp ID Service.

  3. Verify that the updated QR code URLs are working as expected.

The configuration update is complete.

IIS Manager

  1. Open the IIS Manager on the PSID Server and Click User Portal, and choose the Application Settings icon in the middle window of the IIS Manager.

  2. Search for the value: SECURITY_TOKEN_SELECTABLE_TYPES and add GoogleMobileToken if not already existing. Like this for example:

    HardwareToken,MobileToken,PointSharpLoginToken,GoogleMobileToken

    No spaces between the different tokens - just a comma.

  3. If TOTP Authenticators are to be used (recommended) go to the value: GOOGLE_MOBILE_TOKEN_TIME_BASED and set that value to true.

Adding the Authenticator to a user

Depending on the configuration in the Portal Settings in PSID Admin GUI - you can either send out the token to a user via Admin Portal, or the user can add it themselves via User Portal by either scanning a QR code or enter an activation code.

User Portal must run HTTPS in order for QR codes to work.