Modify grid card authenticator settings

Use the following procedure to change the grid card settings for your account. These settings are applied to all grid cards assigned to users in your account. An Identity as a Service account can have a maximum of 5000 unassigned grid cards.

1. Click > Policies > Authenticators. The Authenticators page appears.

2. Select Grid Card. The Grid Card settings appears.

3. Set the Number of rows to the number of rows to include in the grid card. The combined number of rows and columns define the number of cell value combinations possible.

4. Set the Number of columns to the number of columns to include in the grid card. The combined number of rows and columns define the number of cell value combinations possible.

5. Set the Number of characters per cell to the number of values to include in the grid card cell.

6. In the Cell alphabet field, enter the numbers and letters that can be included in a grid card cell.

7. Select Case Sensitive to make the values entered in the Alphabet case-sensitive. When not selected, the Cell alphabet must contain either upper or lowercase letters but not both.

8. Select Include Grid Expiry in Challenge to display the grid expiry date on the grid challenge screen.

9. Select Replace Similar Characters if you want to replace similar looking characters in a response. For example, replace O with 0 and I with 1.

10. Set the Challenge Size to the number of cells your application presents to users during a grid challenge.

Each cell can contain one or more characters. The default setting minimizes the grid card data that is potentially exposed at each login. The minimum setting is 1. The maximum is the total number of cells in the grid (number of rows multiplied by the number of columns).

11. Select Sort Challenge to sort a grid challenge by column and row after generating the challenge. The default enhances usability by presenting cells in order such that the grid card is read from left to right.

12. Select Retain Challenge to retain the challenge for the duration of the Card Challenge Lifetime (secs.). Users who answer a challenge incorrectly will have the same challenge presented to them for all subsequent attempts until they are locked out or until the Challenge Lifetime is exceeded. After the challenge lifetime is exceeded, a new challenge is presented.

13. Set the Challenge Lifetime (secs.) in seconds. A value of 0 sets an unlimited lifetime. If the challenge is not answered within the lifetime, a new challenge is generated.

14. Set the Grid Card Lifetime (secs.) to the number of days a grid card is valid after it is activated. A value of 0 (unlimited) sets that the grid card does not expire based on time.

15. Select Encrypt Emails to encrypt the grid card email. Users will need to provide a password to access the encrypted grid card.

16. Select the eGrid Card Page Size.

17. Select the Export eGrid Page Size.

18. Select eGrid Card Attributes included in the grid card export. This information appears on the exported grid card.

19. Select Automatically Email New Grid Cards to automatically email grid cards to users when they have been created or assigned.

20. Select Allow Any Email Attribute for Delivery to allow any email address attribute in the user profile to receive the grid card. If you do not select this option, you must also complete the following:

a. Under Grid Card Delivery Allowlist, select the email attributes that can receive the grid card.

b. Select Deliver Grid Cards to User-Defined Attributes to allow grid card delivery to user-defined email attributes.

c. Deselect Restrict Administrator Roles to Grid Card Delivery Allowlist to allow administrators to select any email address associated with a user for grid card delivery. If you leave this option enabled, end users and administrator roles can only select email attributes enabled under the Grid Card Delivery Allowlist and the Deliver Grid Cards to User-Defined Attributes.

21. If you see a warning message, select Confirm Changes.

22. Click Save to confirm your changes.