a_pxy_04_authenware authentication process manager web service specification

8/10/2019 A_pxy_04_Authenware Authentication Process Manager Web Service Specification

1/33

Authenware APMAPI Web Service Specifcation

1

Authentication Process

Manager

Web Service Specifcation

Version 2.5

March 2013 Revision !"0"


2/33


Table o Contents

Contact Us...........................................................................................................2Preace.................................................................................................................3

Typographic Conventions.....................................................................................!vervie" o Pro#$ct %eat$res..............................................................................&AP' 'etho#s.......................................................................................................(

pre)ali#ateUser...............................................................................................(vali#ateUser.....................................................................................................*vali#ate)erifcationCo#e................................................................................1createPattern.................................................................................................1(get)ersion......................................................................................................1*saveWor+station,og.......................................................................................2-

%or 'ore Inoration.........................................................................................21Appen#i/ I 0 'essage Co#es.............................................................................22Appen#i/ II 0 n# User ,icense Agreeent.......................................................2&

Contact Us

Copyright 2-13 A$thenWare Corporation an#or its a4liates. All rights

reserve#.

This sot"are an# relate# #oc$entation are protecte# by intellect$alproperty la"s an# provi#e# $n#er an n# User ,icense Agreeent "hichcontains restrictions on $se an# #isclos$re. /cept as e/pressly peritte#in yo$r n# User ,icense Agreeent or allo"e# by la" yo$ ay not $serepro#$ce copy license translate o#iy #istrib$te broa#casttransit p$blish peror e/hibit or #isplay any part in any or byany eans. 5isassebly #ecopilation or reverse engineering o thissot"are $nless re6$ire# by la" or interoperability is prohibite#.

Please clic+ hereto vie" the n# User ,icense Agreeent.

The inoration containe# herein is s$b7ect to change "itho$t notice an#is not "arrante# to be error8ree. I yo$ fn# any errors please reportthe to $s in "riting.

This sot"are is #evelope# or $lti8actor a$thentication. It is not#evelope# or inten#e# to be a ail8sae sot"are a$thenticationapplication. 9o$ shall be responsible to ta+e all appropriate eas$res tosec$re yo$r #ata an# an# systes. A$thenWare Corporation an# its

a4liates #isclai any liability or any conse6$ential #aages ca$se# bythe $se o this sot"are application.

2


3/33


This sot"are an# #oc$entation ay provi#e inoration on or accessto content services an# pro#$cts ro thir# parties. A$thenWareCorporation an# its a4liates are not responsible or an# e/pressly

#isclai all "arranties o any +in# "ith respect to thir#8party contentservices an# pro#$cts. A$thenWare Corporation an# its a4liates "ill notbe responsible or any loss costs or #aages inc$rre# #$e to yo$raccess to or $se o thir#8party content pro#$cts or services.

A$thenWare is a registere# tra#ear+ o A$thenWare Corporation an#orits a4liates.

I yo$ have any 6$estions or "o$l# li+e to contact $s or any reason eelree to #o so at:

s$pport;a$then"are.co

Preace

Au#ienceThis an$al is inten#e# or prograers nee#ing

inoration abo$t the A$then"are A$thentication Process 'anager elate# 5oc$ents section to fn# a g$i#e that better eets yo$r

nee#s.

Re%ate# &ocu'ents

A_pxy_01_Authenware Authentication Process Manager InstallationA_pxy_02_Authenware Authentication Process Manager SSL

Implementation Guide

A_pxy_0_Authenware Authentication Process Manager !ser Guide

A_pxy_0"_Authenware Authentication Process Manager #on$guration

Guide

Su''ar(

The A$then"are AP' Web Service $ses si/ ain etho#s:

pre)ali#ateUser vali#ateUser vali#ate)erifcationCo#e createPattern

3
mailto:[email protected]:[email protected]


4/33


saveWor+station,og an# get)ersion. These etho#s are e/plaine# in

#etail incl$#ing inoration on the invocation inp$t paraeters

attrib$tes an# o$tp$t #ata.

Typographic Conventions

This #oc$ent $ses the ollo"ing typographic conventions:

)(pe o* +ont ,se# +or -a'p%e

Consolas, 11 point,gray

'etho# naes

'etho# invocations

%ile naes

validateUser

String getVersion()

API Client MozillaFirefox.js

Arial, 11 point, bold, italics,gray

?eneric labels or val$esthat $st be entere# orthat "ill be ret$rne#

value String: )al$e othe property.

Arial, 11 point, bold, gray Attrib$te naes name0 String: @aes othe fel#s as specife# inthe a#inistration portal.


5/33


APM Web Service Specifcation

!vervie" o Pro#$ct %eat$res

A$then"are technology is a secon#8actor a$thentication etho#$tilie# ater the $ser has been verife# by the $s$al frst8actor etho#


6/33


AP' 'etho#s

The etho#s #etaile# here are provi#e# by the A$then"are AP' server.

All etho#s are #escribe# belo" along "ith #etails regar#ing their

invocation inp$t paraeters attrib$tes an# o$tp$t #ata.

preVa%i#ate,ser

The preValidateUseretho# in#icates "hether or not the $ser e/ists i

the $ser is traine# an# i the $ser has been vali#ate# "ithin the last @

#ays "here @ is set in the paraeter Eini$Training%re6$encyF. GSee

Authenware Authentication Process Manager #on$guration GuideH.

This etho# also ret$rns the category an# the nae o the $sers

#evice an# "hether or not it is s$pporte# by the A$then"are technology.

%inally this etho# ret$rns the active verifcation co#e

creation #ate i traine# etc.

InvocationPreValidateUserOt preValidateUser(User user, Field field,

Property[] properties)

Inp$t Paraetersuser%User: >epresents the $ser to be a$thenticate# in theA$then"are Server. ach $ser is #efne# by his $sernae


7/33


field %%iel#: >epresents the fel# or gro$p o fel#s to be observe# an#on "hich the bioetric pattern is constr$cte#. It is #efne# thro$gh thenae o the application it belongs to an# by the fel# nae. Thisnae is the one #efne# in the a#inistration portal o A$then"areServer.

Attributes

application0 String: @ae o the application or "hich the $ser

nee#s to be a$thenticate#.

name0 String: @aes o the fel#s as specife# in the

a#inistration portal.

properties 0 PropertyGH: stablishes the properties necessary or thepre8vali#ation o the $ser. They co$l# be sent an# are as ollo"s in thetable belo".

Attributes

name0 String: @ae o the property. '$st be as #escribe# in the

table belo".

value0 String: )al$e o the property.

Propert(


8/33


result boolean: In#icates "hether the pre8vali#ate $ser action "as#one correctly or i it has pro#$ce# an error in A$then"are AP' orA$then"are Server.

userInformation%PropertyGH: >epresents the $ser inorationobtaine# ro the $ser pre8vali#ation. The obtaine# properties are:

name0 String: @ae o the property as in the table belo".

value% String& 'alue o( the property)

K


9/33


Statistica% et$rns the active )erifcation Co#e


10/33


name0 String: @ae o the action ro the list in the table

belo".

/ Possib%e Action &escription

1 loginUser Allo" the $ser to log in to theapplication "itho$t vali#ating inA$then"are Server.

2 #enyAccess 5eny access to the application. Anerror has occ$rre# in the pre8vali#ation process.

re6$estTraining The $ser #oes not e/ist or hisbioetric pattern is not traine#.

K vali#ateUser The $ser sho$l# be vali#ate# inA$then"are Server.

messages0 'essageGH: Contains the gro$p o essages sent by theA$then"are AP'. ach one has a co#e that $ni6$ely i#entifes theessage an# o "hat type it is. GSee essage co#e reerence g$i#e


11/33


Invocation

ValidateUserOt validateUser(User user, Field field, Stringsignature, Property[] properties)

Inp$t Paraetersuser%User: >epresents the $ser to be a$thenticate# in theA$then"are Server. ach $ser is #efne# by his $sernae


12/33


name0 String: @ae o the property. '$st be as #escribe# in the

table belo".


12


13/33


Propert(


14/33


%orat: 99998''855 hh::ss

copresse#Signat$re In#icates i the signat$re is copresse#.A$then"are AP' "ill #ecopress the

signat$res receive#.#eviceCategory Category o the $sers #evice. The

possible val$es are E#es+F EobileFEtabletF EotherF or E$n+no"nF.

#evice @ae o the $sers #evice. %or e/aple:EAppleiPhoneF.

pattern@ae I this property is set this etho# "ill$se or create a pattern "ith this specifcnae to vali#ate the $ser.

split!tp In#icates i the A$then"are AP' sho$l#split the )erifcation Co#e

!$tp$t 5atavalidateUserOut ValidateUserOut:

result boolean: In#icates "hether the validateUseraction "as #onecorrectly or i it has pro#$ce# an error in A$then"are AP' orA$then"are Server.

statisticals%PropertyGH: >epresents the statistic val$es obtaine#ro the $ser vali#ation. The obtaine# properties are as ollo"s in thetable belo".


value% String: )al$e o the property)

1


15/33


Statistica% ate o the c$rrent login

reainingSignat$r

es

@$ber o logins let to coplete thebioetric pattern.

pattern@ae Bioetric pattern $se# in this $servali#ation process.

otp >et$rns the active )erifcation Co#e

!ne Tie Pass"or#=.

nextAction0 Action: >epresents the ne/t action that A$then"are AP'says to #o. Possible actions are as ollo"s in the table belo".

code0 int: Co#e n$ber o the action as in the table belo".

name0 String: @ae o the action as in the table belo".

1&


16/33



1 loginUser Allo" the $ser to log in to theapplication.

2 #enyAccess 5eny access to the application.

3 re6$est)erifcationCo#e >e6$est the verifcation co#e

re6$estTraining >e6$est training allo"ing the $serto #eci#e i he "ants to $seEprogressiveF or E6$ic+.F

& re6$est$ic+Training >e6$est 6$ic+ training. The $seray stop the training even i hehasnt coplete# it.

( re6$est%orce$ic+Traini

ng

>e6$est 6$ic+ training. The $seray not stop the training $ntil it iscoplete.

J re6$estAlternate)ali#at

ion'etho#

>e6$est an alternate vali#ationetho#. This occ$rs "hen yo$ setthe paraeterEUse!tp%or/cee#e#@$berAtteptsAllo"e# O alseF.

messages0 'essageGH: Contains the gro$p o essages sent byA$then"are AP'. ach one has a co#e that $ni6$ely i#entifes theessage an# o "hat type it is. GSee essage co#e reerence g$i#e


17/33


va%i#ateVerifcationo#e

When soeone tries to enter the syste "ith the correct cre#entials epresents the $ser to be a$thenticate# in theA$then"are Server. ach $ser is #efne# by his $sernae


18/33


application0 String: @ae o the application or "hich the $ser

nee#s to be a$thenticate#.

name0 String: @ae o the fel# as specife# in the

a#inistration portal.

code0 String: Alphan$eric co#e

verifcation co#e "as #one correctly or i it has pro#$ce# an error inA$then"are AP' or A$then"are Server.

statisticals%PropertyGH: >epresents the statistic val$es obtaine# rothe $ser vali#ation. In the case that the correct vali#ation co#e "asentere# the obtaine# properties are:



Statistica% ate o the c$rrent login.

reainingSignat$r

es

@$ber o logins let to coplete thebioetric pattern.

pattern@ae Bioetric pattern $se# in this $ser

vali#ation process.

nextAction0 Action: >epresents the ne/t action that A$then"are saysto #o. Possible actions are as ollo"s in the table belo".



1K


19/33



1 loginUser Allo" the $ser to login to theapplication.


re6$estTraining >e6$est training allo"ing the$ser to #eci#e i he "ants to $seEprogressiveF or E6$ic+.F

& re6$est$ic+Training >e6$est 6$ic+ training. The $seray stop the training even i hehasnt coplete# it.

( re6$est%orce$ic+Traini

ng

>e6$est 6$ic+ training. The $seray not stop the training $ntil it

is coplete.J re6$est@e"Pattern >e6$est that the $ser create a

ne" bioetric pattern.

messages0 'essageGH: Contains the gro$p o essages sent byA$then"are AP'. ach one has a co#e that $ni6$ely i#entifes theessage an# o "hat type it is. GSee essage co#e reerence g$i#e


20/33


InvocationCreatePatternOt "reatePattern(User user, Field field,

String[]signatures, Property[] properties)

Inp$t 5atauser%User: >epresents the $ser "ho "ants to create a pattern. ach$ser is #efne# by his $sernae


21/33


properties%PropertyGH: stablishes the properties necessary or thecreation o the pattern. All $st be sent an# are as ollo"s in thetable belo".

Attributes



Propert(


22/33


"as #one correctly or i it has pro#$ce# an error in A$then"are AP' or

A$then"are Server.

nextAction0 Action: >epresents the ne/t action that A$then"are saysto #o. Possible actions are as ollo"s in the table belo".



/ et Action &escription

1 loginUser Allo" the $ser to login to theapplication.


messages0 'essageGH: Contains the gro$p o essages sent byA$then"are AP'. ach one has a co#e that $ni6$ely i#entifes the

essage an# o "hat type it is. GSee essage co#e reerence g$i#e


23/33


!$tp$t 5ataversion% String& In#icates the version o A$then"are AP'.

The ret$rne# chain is o the type EA$then"are AP' Server 0 )ersion

2.&.- 8 >ev. K(J*F

saveWorstation4og

This etho# is $se# to save the logs generate# in "or+stations to the theA$then"are AP' Server #atabase.

InvocationSave!or"station#ogOut save!or"station#og(String$or"station%p, String $or"station#og)

Inp$t 5ataworkstationIp0 String:IP a##ress o the "or+station to "hich the logbelongs.

workstationLog0 String: Contains logs entries. ach one sho$l# havethe ne/t fel#s separate# by EF :

Attributes

Date 0 String G99998''855 hh::ssH: 5ate ro log entry.

Type0 String: In#icates the possible log entry type: EerrorFE"arningF or EinoF

accor#ing to its level o iportance.

ode0 Integer: ,og entry co#e

!ser0 String: >epresents the $ser "ho "ants to login.

%or /aple: E2--*8-18-1 1&:-&:--error2---$ser is not incl$#e# inA$then"are gro$ps. The A$then"are Server "ill not chec+ the c$rrentlogin7pereF

23


24/33


!$tp$t 5atasave#or$station%ogOt & Save#or$station%ogOt'

result % *oolean: In#icates "hether the action o saving "or+stationlogs "as #one correctly or i it has pro#$ce# an error in theA$then"are AP' Server or the A$then"are Core.

messages0 'essageGH: Contains the gro$p o essages sent by theA$then"are AP' Server. ach one has a co#e that $ni6$ely i#entifesthe essage an# o "hat type it is. GSee essage co#e reerenceg$i#e later in this #oc$ent.H

code0 int: 'essage co#e.

message0 String: 'essage #escription.

type0 String: In#icates the possible essage type: EerrorF

E"arningF or EinoF accor#ing to its level o iportance.

%or 'ore Inoration

This an$al is solely inten#e# to provi#e inoration regar#ing

A$then"ares A$thentication Process 'anager Web Service. I yo$ re6$ire

ore inoration than "as provi#e# in this g$i#e please see the

E>elate# 5oc$entsF section to fn# a #oc$ent that better eets yo$r

nee#s.

2


25/33


Appen#i/ I 0 'essage Co#es

2&


26/33


Authenware S-RV-R

2(


27/33


$&- )P- M-SSA6-

- >>!> rror "hile parsing ob7ect A$then"areSignat$re.

1--1WA>@I@

?

The $ser #oesnt have eno$gh logins to be able to #eliver

a certain response. The tr$st i#entity rate sho$l# not beconsi#ere#.

1--2 I@%!User nee#s Qn$berR logins ore to coplete thepattern.

1--3 >>!>rror "hile parsing the #ates in pattern vali#ity process.

The correct orat is yyyy88## hh::ss.

--1 >>!>The #ata capt$re is not consistent the +ey$p an#+ey#o"n events #ont atch.

--2 >>!>The n$ber o capt$re# events #oesnt atch "ith thepattern.

--3 >>!> rror "hile getting bioetric pattern.-- >>!>

There is an error "hile inserting the login recor# in,ogin5A! class.

--& >>!>The $ser Q$serR o the organiation QorganiationR is notregistere# in A$then"are.

--( >>!> The $ser Q$serR co$l#nt be create# on the #atabase.--J >>!> Paraeter error QparaeterR #oesnt have a val$e.--K >>!> Paraeter error paraeters container not o$n#.

--* >>!>The application QapplicationR #oesnt e/ist in theA$then"are #atabase.

-1- >>!>

The fel# Qfel#R o the application QapplicationR #oesnt

e/ist in the A$then"are #atabase.

-12 >>!>The #ata capt$re# is not consistentM the n$ber o +eys#o not atch.

-13 >>!> The $ser nae can not be epty.-1 >>!> The $ser nae can not be blan+.-1& >>!> The organiation co#e can not be -.-1( >>!> !ne o the fel#s #oesnt have any capt$re# event.-23 >>!> rror chec+ing $ser: QerrorR-3- >>!> The application QapplicationR co$l#nt be create#.

-31 >>!>The application QapplicationR co$l#nt be create# the

i#entifer or nae is #$plicate#.-32 >>!> The application nae can not be epty.-33 >>!> The application nae can not be blan+.

-3 >>!>The sec$rity level Qsec$rity levelR or the applicationQapplicationR is not a vali# level.

-3& >>!> The application QapplicationR co$l# not be #elete#.

-3( >>!>The application QapplicationR #oesnt e/ist in theA$then"are #atabase.

-- >>!> The fel# Qfel#R co$l# not be create#.

-1 >>!>

The fel# Qfel#R co$l# not be $p#ate# i#entifer

#$plicate# or the fel# o the client or the application "asalrea#y entere#.

2J


28/33


-2 >>!> The client fel# can not be epty.-3 >>!> The client fel# can not be blan+.-& >>!> The fel# Qfel#R co$l# not be #elete#.-(- >>!> The ,ogin register can not be $p#ate#.

-(1 >>!> The $ser an# the fel# cant be epty.-K >>!> The re6$este# $ser #oesnt have a pattern.&-- >>!> A$then"are $n+no"n error: QerrorR.J1- >>!> The sec$rity level Qsec$rity levelR is not a vali# level.&--- >>!> %aile# to locate the service: QerrorR.

(--1WA>@I@

?It "as proote# by gray one by pattern QpatternR.

(--2 >>!>It "as #enie# beca$se the bioetric recor# sees to be ara$#.

K--- >>!> ,icense )ali#ation: rror parsing the license fle.

K--1 >>!> The tie #efne# at the license "as e/pire#.K--2 >>!> The n$ber o $sers #efne# or the license "as e/cee#e#.

K--3 >>!>The n$ber o applications #efne# or the license "ase/cee#e#.

K-- >>!>The n$ber o organiations #efne# or the license "ase/cee#e#.

K--& >>!>The n$ber o transactions #efne# or the license "ase/cee#e#.

*-1- >>!> rror "hile accessing to A$then"are W.>.A.P. Server.

*-2- >>!>rror "hile getting Signat$re ro A$then"are W.>.A.P.

Server.*-22 >>!>

rror creating the ne" pattern QpatternRM another pattern"ith this nae alrea#y e/ists.

Authenware APM S-RV-R

$&- )P- M-SSA6-

1---1 I@%! The $ser "ill be controlle# by A$then"are Server.

1---2 I@%! The $ser #i# not e/ist in A$then"are Server.1---3 I@%! The $ser "as create# in A$then"are Server s$ccess$lly.1--- I@%! The $ser "ill not be controlle# by A$then"are Server.

1---&WA>@I@

?The $ser sho$l# train again beca$se his cre#entials "ereo#ife#.

1---( >>!> The verifcation co#e is incorrect.1---J >>!> The n$ber o signat$res is incorrect.1---K >>!> rror "hile accessing the A$then"are Server service.

1---* >>!>rror initialiing the A$then"are AP' Server. Please chec+the paraeter fle #atabase connection an# Coreconnection.

1--1- >>!> rror "hile creating the $ser.

2K


29/33


1--11 >>!> rror "hile vali#ating the signat$re.1--12 >>!> rror "hile resetting the pattern.1--13 >>!> rror "hile veriying i the pattern is rea#y.1--1 >>!> rror "hile creating a ne" pattern.

1--1& WA>@I@?

The $ser co$l# login b$t his P> is lo"er than theestablishe# liit.

1--1(WA>@I@

?User e/cee#e# the n$ber o attepts allo"e#.

1--1J >>!> rror "hile chec+ing vali#ity o $ser cre#entials.1--1K >>!> The A$then"are Server U>, is incorrect.1--1* >>!> rror in connecting "ith A$then"are Server.1--2- >>!> rror "hile rereshing the paraeters.

1--21 I@%!The verifcation co#e

1--22 >>!> rror "hile saving "or+stations log1--23 >>!> rror "hile parsing log1--2 >>!> The S'S Server U>, is incorrect.1--2& >>!> rror in connection "ith S'S Server.1--2( >>!> rror "hile vali#ating $ser in the 5irectory Services.1--2J >>!> The $ser "ill be vali#ate# in the 5irectory Services.

1--2K >>!>The $ser cre#entials are not vali# in the 5irectoryServices.

1--2* >>!> The $ser #oes not have #ata in the 5irectory Services.1--3- >>!> There are not #ata >!> The $ser sho$l# train again beca$se his P> is lo"er thanthe establishe# liit.

1--32 >>!>rror "hile getting the tie o Cre#ential Server $singS@TP.

1--33 >>!> rror #ecopressing the signat$re.1--3 >>!> rror chec+ing the training re6$ency.1--3& >>!> The $ser can not be blan+.1--3( >>!> The fel# an# the application can not be blan+.1--3J >>!> rror creatinggetting AP' session.1--3K >>!> rror creatinggetting one tie pass"or# >!> rror #etecting #evice.1--- >>!> rror obtaining $sers patterns.1--1 >>!> The signat$re can not be blan+.1--** >>!> A$then"are AP' $n+no"n error: QerrorR.

2*


30/33


Appen#i/ II 0 n# User ,icense Agreeent

Authenware7 -n# ,ser So*tware 4icenseAgree'ent

This End User License Agreement governs the use of any of the versions of Authenware

software and anyrelated updates and/or upgrades regardless of the delivery mechanism.

1. License Grant. u!"ect to the terms and conditions of this Agreement# Licensor here!y grants toLicensee the right to use the Authenware software $the %oftware&' solely for the internal !usiness uses of

Licensee# and not for resale# redistri!ution or use in operating a service !ureau or otherwise providing!usiness process management services to any third party.

(. )wnership !y Licensor. Licensor $or its licensors' shall own all right# title# interest and in $a' the

oftware# including all !usiness process templates developed solely !y Licensor $and/or its contractors' or"ointly !y Licensor $and/or its contractors' and Licensee# $!' the following materials provided or developed !yLicensor during the course of this Agreement or any tatement of *or+ thereunder, oftware specifications#operating instructions# pricing terms# training materials# user documentation# custom code# integrations#system re-uirements# user interface code or templates# software specifications# software# and drafts of the

foregoing $the %)ther Licensor aterials&'# $c' all trade secrets# patents# trade mar+s# service mar+s#copyrights# trade dress# inventions# +now how# applications to register any of the foregoing and otherproprietary rights $%ntellectual 0roperty ights&' in the foregoing# and $d' any modifications or derivativewor+s thereof and any copies of the foregoing. All suggestions# solutions# improvements# corrections# andother contri!utions provided !y Licensee regarding the oftware or the )ther Licensor aterials shall !ecomethe property of Licensor $or its licensors' and Licensee here!y agrees to assign any such rights to Licensor.

2. 3opies. Licensee agrees not to ma+e any copies of the oftware# e4cept that it may ma+e one copyof the oftware for !ac+up and archive purposes. Licensee shall +eep and maintain complete and accurate

records of each copy made of the oftware and provide such records to Licensor upon re-uest.

5. estrictions. Licensee will not, $a' e4cept as e4plicitly allowed under this Agreement# copy# edit#

modify# adapt# translate# port# reproduce $e4cept as necessary for installation'# distri!ute# transfer# lend# sell#su!6license# assign or otherwise transfer any of the oftware# any component thereof# or any output generated

!y the oftware7 $!' prepare any derivative wor+ !ased upon the oftware or any component thereof7 $c'reverse engineer# disassem!le or decompile the oftware or any component thereof# or attempt to discover ordisclose the source code of the oftware or any component thereof7 $d' encum!er# time6share# rent or lease therights granted !y Licensor under this Agreement7 $e' remove# o!scure# or alter any notice of Licensor8s $or its

licensors8' intellectual property rights present on or in the oftware or any component thereof7 $f' use theoftware or any component thereof for any purpose not authori9ed or contemplated under this Agreement orin violation of any e4press prohi!ition set forth elsewhere in this Agreement# including the e4hi!its hereto orpolicies reference herein7 or $g' authori9e or permit any person or entity to do any of the foregoing7 or $h' use#or permit an Licensee to use# the oftware su!6licensed for a particular Licensee for the !enefit of any partyother than such Licensee or for any process other than for the specific process was su!6licensed.

:. 3onfidentiality

:.1 ;efinition.


31/33


information relating to mar+eting plans# !usiness opportunities# personnel# research# development or +now6how. The oftware and )ther Licensor aterials shall !e considered the 3onfidential nformation ofLicensor.

:.( Treatment of 3onfidential nformation. Each party $the %eceiving 0arty&' agrees $i' to usecommercially reasona!le efforts to protect the 3onfidential nformation of the disclosing party $the%;isclosing 0arty&' and $ii' that it will not and will ensure that its employees# will not use# disseminate or in

any way disclose any 3onfidential nformation of the ;isclosing 0arty to any person# firm or !usiness# e4ceptas specifically authori9ed in this Agreement or for any purpose the ;isclosing 0arty may hereafter authori9e inwriting. The eceiving 0arty agrees to disclose the 3onfidential nformation of the ;isclosing 0arty only tothose employees who have a %need to +now&.

:.2 E4ceptions. The restrictions set forth in this ection : will not apply to any information that theeceiving 0arty can demonstrate, $a' was +nown !y the eceiving 0arty without an o!ligation ofconfidentiality# prior to disclosure !y the ;isclosing 0arty7 $!' was in or entered the pu!lic domain through nofault of the eceiving 0arty7 $c' is disclosed to the eceiving 0arty without an o!ligation of confidentiality7 or

$d' is independently developed !y the eceiving 0arty without reference to any 3onfidential nformation ofthe ;isclosing 0arty. A party shall not !e in violation of this ection : if it discloses 3onfidential nformationdemanded !y a lawful order from any court or any !ody empowered to issue such an order# provided that the

eceiving 0arty notifies the ;isclosing 0arty promptly of the receipt of any such order# provides the;isclosing 0arty with a copy of such order# and# if re-uested !y the ;isclosing 0arty# uses good faith efforts tolimit or o!tain confidential treatment with respect to information disclosed pursuant to such order.

:.5 =o 3onveyance of )wnership. =othing in this Agreement shall !e construed to convey any title or

ownership rights to the 3onfidential nformation of the ;isclosing 0arty or to any ntellectual 0roperty ightstherein or grant any other right# title# or ownership interest to the ;isclosing 0arty 3onfidential nformatione4cept as may !e provided !y this Agreement.

>. Limited *arranty.

>.1 0erformance. Licensor warrants that the oftware# standing alone without use in com!ination orcon"unction with any third party software or apparatus# will perform su!stantially in accordance with theapplica!le specifications included in the )ther Licensor aterials for a period of thirty $2?' days following

delivery. This warranty shall !e rendered null and void if the failure of the oftware has resulted from anaccident# a!use# or misapplication caused !y Licensee. Licensor8s entire lia!ility and Licensee8s e4clusiveremedy under this warranty is to repair or replace the oftware which does not meet the warranties contained

in this ection >. Any replacement of the oftware shall !e warranted for the remainder of the originalwarranty period. Licensor8s warranty o!ligations shall not apply, $a' if the oftware has not !een installed inaccordance with the installation instructions provided !y Licensor7 or $!' if the Licensee8s computingenvironment does not meet the minimum system re-uirements then specified !y Licensor for the oftware atthe time the oftware was ordered.

>.( Warranty Disclaimer. SECTION 6.1 CONSTITUTES THE ONLY WARRANTIES GRANTED YLICENSOR !OR ITS LICENSORS" WITH RES#ECT TO THE SO$TWARE% SU##ORT SER&ICES OR

CONSULTING SER&ICES AND ARE E'#RESSLY (ADE IN LIEU O$ ANY OTHER E'#RESS OR I(#LIED

WARRANTIES% INCLUDING ANY I(#LIED WARRANTY O$ (ERCHANTAILITY OR $ITNESS $OR A#ARTICULAR #UR#OSE OR O$ NON)IN$RINGE(ENT. REGARDLESS O$ ANY COURSE O$ DEALING%

#RO(OTIONAL LITERATURE OR OTHER ACTIONS A##ARENTLY CREATING A WARRANTY% LICENSOR

(A*ES NO WARRANTIES% E'#RESS OR I(#LIED% E'CE#T AS DETAILED IN THIS AGREE(ENT

RES#ECTING THE $UNCTIONAL CHARACTERISTICS OR #ER$OR(ANCE O$ THE SO$TWARE% SU##ORT

SER&ICES OR CONSULTING SER&ICES OR O$ THE #RO$ITAILITY% COST ENE$ITS OR OTHER ENE$ITS

TO E OTAINED Y LICENSEE $RO( THE USE O$ THE SO$TWARE OR SER&ICES.

@. Limitation of Lia!ility.

L3E=) $A=; T L3E=)' ALL =)T BE LABLE T) L3E=EE


32/33


33/33


e4penses associated with such inspection. Licensor8s rights of inspection shall remain in effect through theperiod ending one year from the termination or e4piration of this Agreement.

1?.1? Third 0arty 0rograms. Third 0arty components of the Authenware solution are su!"ect to their ownlicense terms. These third party software programs are components only and cannot !e used directly !y theLicensee. *A==G, ;o not upgrade or reconfigure any software components. Any changes to the deliveredconfiguration could result in serious conse-uences to the performance of the software.

1?.11 Trademar+s. Trademar+ (?1? Authenware 3orporation# =3. All rights reserved. %Authenware&logo is a registered trademar+ of Authenware 3orporation# nc. All other trademar+s are the property of their

respective owners.

1?.1( WARNINGS. ANY ATTE(#T TO TA(#ER% (ODI$Y% ADA#T% RE&ERSE ENGINEER% DISASSE(LE%DECO(#ILE%DECRY#T OR OTHERWISE DERI&E SOURCE CODE $RO( THE SO$TWARE WILL RESULT INI((EDIATE TER(INATION O$ THE LICENSE AGREE(ENT AND WILL E #UNISHED TO THE $ULLEST

E'TENT O$ THE LAW. DO NOT U#GRADE OR RECON$IGURE ANY SO$TWARE CO(#ONENT. ANY

CHANGES TO DELI&ERED CON$IGURATION (AY RESULT IN SERIOUS CONSE+UENCES TO THE

#ER$OR(ANCE O$ THE SO$TWARE.

YOU (UST READ THIS ENTIRE AUTHENWARE END USER SO$TWARE LICENSE AGREE(ENT

!,LICENSE AGREE(ENT," CARE$ULLY E$ORE ACCE#TING OR INSTALLING THIS A##LICATION.

I$ YOU DO NOT AGREE TO THE TER(S O$ THIS LICENSE AGREE(ENT% YOU AGREE NOT TO

INSTALL. Y CLIC*ING ,I ACCE#T, OR Y INSTALLING YOU AGREE TO ECO(E A #ARTY TO% AND

E OUND Y% THE TER(S O$ THIS LICENSE AGREE(ENT AND THIS LICENSE IS ENTERED INTO

ETWEEN AUTHENWARE COR#ORATION AND THE ORGANI-ATION E'ECUTING THIS LICENSE

AGREE(ENT !,YOU, AND ,YOUR,".

a_pxy_04_authenware authentication process manager web service specification

Documents