Download Document

Account Filters and Authorization

The account filter is a means of maintaining account uniqueness account.  The account filter is also used to determine what fields the user is prompted to entering when s/he is being authenticated.  One of the following options must be selected:

a)      Exact Name

If this option is selected, the name field must be filled in, and must be unique.  This is typically only suitable for a small operation such as a legal firm.  In large environments (e.g. colleges, libraries) there is a high likelihood of having duplicate names.

b)      Exact Account

This option means that all accounts must be unique, but not a fixed length.  A typical example of this is the Social Security number.  This filter is applicable in an environment where users are being authenticated to access OCS, but money is being stored on a card or separate device. 

c)      Exact Account With PIN Or Exact Name With PIN

If this filter is selected, the user is prompted to enter an account or name as well as a PIN.  In this case, the combination of Name and Account must be unique (e.g. Name: “Smith” Account: “123” and PIN: “123”, Name: “Smith” Account: “456” and PIN: “456” are both accepted as unique users in OCS). This option is typically used in situations where the account number is very long and difficult to remember, but is stored on a swipe-enabled card.  In this case, the user would enter his or her name and PIN at the client, but would swipe the card at a release station.

d)      Exact PIN With Name or Exact Account With Exact PIN

In this case, both the Account and the PIN must be unique.  The user is prompted for his or her name or account, and PIN and OCS will validate on the PIN.  This option is rarely used.

e)      Exact Account With PIN

This is the default value, and is both the most commonly used and the most secure.  In this case, users must know both their account and PIN in order to use the system.  Like a bank card, the account number is of no use without the PIN, so stored value against the account is secure.  This option is primarily used in larger environments such as schools and libraries which have a need for stronger security.

f)       Exact Sub Account With PIN

This option is very similar to the exact account with PIN, however only a subsection of the account is verified and required.  This option is useful in cases where identification cards are being used, but only a portion of the identification value is unique – e.g. all accounts start with 22456.  In this case, the user is only required to enter the unique section of the account number, along with a PIN.

g)      Exact Account With Name

If this option is selected, users are prompted for both an account number, and a name.  The combination of the two fields must be unique.  This option is suitable for environments where some level of security is necessary, but where PINs are not required.

Setting The Account Filter

i.                     Open OCS Manager.

ii.                   Select the “Utilities” button.

iii.                  Select the “Operating Parameters” button.

iv.                 Select the “Accounts” button.

v.                   Select the “Filters and Authorization” button.

vii.                One of the above options must be selected when using OCS Account Mode (see above for a description of each option):

Real-Time Authentication

OCS also includes the ability to validate users against external databases in real-time.  If one of these options is enabled, OCS will check against the specified database and, if the user is present, will add the user to the OCS database.  When using LDAP (Windows authentication), the login name is stored in OCS, but not the password. 

• When accessing ODBC-compliant databases, a custom query is required.  For more information, contact OCS at 905-828-9706.

• Due to the differing structures required for SIP-2 compliance, if you would like more information, contact OCS at 905-828-9706.