How to automatically distribute a soft token to Android with AMBA via CT-KIP
2 years ago
Originally Published: 2014-01-03
Article Number
000047594
Applies To
Authentication Manager 7.1 SP4, 8.0, 8.1
AMBA 1.4 and 1.5
AMBA CT-KIP e-mail template
AMBA e-mail template &url variable
Issue
How to automatically distribute a soft token to Android with AMBA via CT-KIP
Construct a valid URL to automatically deploy an Android soft token via CT-KIP using AMBA
AMBA CT-KIP default e-mail template URL variable can't be used with Android OS
Cause
AMBA comes with default e-mail templates to be used to automatically distribute software tokens.  There are variables in these templates that can be used to make the construction of the e-mail easier.  One of these variable is "&url" which will embed the URL of the CT-KIP server in the string in place of the variable.  However, the resulting URL is not compatible with the Android OS.
Resolution

The solution is to hard code this section of the activation URL instead of relying on the variable.  An example of this would be:

<text>&#x0009;Activation URL: http://127.0.0.1/securid/ctkip?scheme=https&amp;url=sample.server.com:443/ctkip/services/CtkipService;&#x0026;activationCode=&acd;</text>

Where "sample.server.com" would be replaced with a valid FQDN for your CT-KIP server.  The resulting string that the user would see in the e-mail would look like this:

http://127.0.0.1/securid/ctkip?scheme=https&url=sample.server.com:443/ctkip/services/CtkipService&activationCode=001729366426