Access: User Account as Internal OAuth Provider
Adding an OAuth User Account
The following describes how to add an OAuth user account for the Next Generation Hardware Appliance. Adding a new user account also allows you to remove the Initial OTP User to avoid security concerns.
Proceed as follows to create a new User Account for the Next Generation Hardware Appliance:
Log in to the Next Generation Hardware Appliance.
Open the Access page.
In the section User Accounts, click Add User Account.
The corresponding form will open. Enter the required information.
Authentication Type, select the option Internal OAuth Provider.
Credentials, specify the Username and Password. Repeat the password for confirmation.
Username:
The rules are as follows:
3 characters minimum with at least 1 alpha-numeric character
64 characters maximum
It is not possible to create multiple accounts with the same username.
Password:
The rules are as follows:
8 characters minimum
64 characters maximum
Click Add User Account to confirm your entries. The new User appears in the list of User Accounts
Since the Appliance is often managed by different persons, you should remove the Initial OTP User once you have created a new user account in order to avoid security issues. In case you are logged in with the Initial OTP User account, you need to re-login using the newly added user account before removing the initial account.
Secure Account Management
The Next Generation Hardware Appliance is designed to prevent you from locking yourself out of the system. The Remove button is inactive for the currently logged-in user (OTP, OAuth or client certificate), ensuring that they cannot remove their own access.
For a client certificate account you need to add the correct Match Type for the first Match Value rule that you specify.