# OpenAM Administration Guide
2.2. Configuring Authentication Modules

Sidebar | Prev | Up | Next

### 2.2.14. Hints For the MSISDN Authentication Module

The Mobile Station Integrated Services Digital Network (MSISDN) authentication module enables non-interactive authentication using a mobile subscriber ISDN associated with a terminal such as a mobile phone. The module checks the subscriber ISDN against the value found on a user's entry in an LDAP directory service.

ssoadm service name: `sunAMAuthMSISDNService`

Trusted Gateway IP Address

  Specifies a list of IP addresses of trusted clients that can access MSIDSN modules. Either restrict the clients allowed to access the MSISDN module by adding each IPv4 or IPv6 address here, or leave the list empty to allow all clients to access the module. If you specify the value `none`, no clients are allowed access.

  ssoadm attribute: `sunAMAuthMSISDNTrustedGatewayList`

MSISDN Number Search Parameter Name

  Specifies a list of parameter names that identify which parameters to search in the request header or cookie header for the MSISDN number. For example, if you define x-Cookie-Param, AM_NUMBER, and COOKIE-ID, the MSISDN authentication service checks those parameters for the MSISDN number.

  ssoadm attribute: `sunAMAuthMSISDNParameterNameList`

LDAP Server and Port

  If you want to use SSL or TLS for security, then scroll down to enable SSL/TLS Access to LDAP. Make sure that OpenAM can trust the servers' certificates when using this option.

  ssoadm attribute: `sunAMAuthMSISDNLdapProviderUrl`

LDAP Start Search DN

  Specify the DN of the entry where the search for the user's MSISDN number should start.

  ssoadm attribute: `sunAMAuthMSISDNBaseDn`

Attribute To Use To Search LDAP

  Specify the name of the attribute in the user's profile that contains the MSISDN number to search for the user. The default is `sunIdentityMSISDNNumber`.

  ssoadm attribute: `sunAMAuthMSISDNUserSearchAttribute`

LDAP Server Authentication User

  If OpenAM must authenticate to the directory server in order to search, then specify the bind DN. The default is `cn=amldapuser,ou=DSAME Users,dc=example,dc=com`.

  ssoadm attribute: `sunAMAuthMSISDNPrincipalUser`

LDAP Server Authentication Password

  Specify the password corresponding to the bind DN.

  ssoadm attribute: `sunAMAuthMSISDNPrincipalPasswd`

SSL/TLS for LDAP Access

  If you choose to enable SSL or TLS, then make sure that OpenAM can trust the servers' certificates.

  ssoadm attribute: `sunAMAuthMSISDNUseSsl`

MSISDN Header Search Attribute

  Specify the headers to use for searching the request for the MSISDN number.

  - Cookie Header tells OpenAM to search the cookie.

  - Request Header tells OpenAM to search the request header.

  - Request Parameter tells OpenAM to search the request parameters.

  ssoadm attribute: `sunAMAuthMSISDNHeaderSearch`

LDAP Attribute Used to Retrieve User Profile

  Specify the LDAP attribute that is used during a search to return the user profile for MSISDN authentication service. The default is `uid`.

  ssoadm attribute: `sunAMAuthMSISDNUserNamingAttribute`

Return User DN to DataStore

  Enable this option only when the OpenAM directory is the same as the directory configured for MSISDN searches. When enabled, this option allows the authentication module to return the DN instead of the User ID. OpenAM thus does not need to perform an additional search with the user ID to find the user's entry.

  ssoadm attribute: `sunAMAuthMSISDNReturnUserDN`

Authentication Level

  Sets the authentication level used to indicate the level of security associated with the module. The value can range from 0 to any positive integer.

  ssoadm attribute: `sunAMAuthMSISDNAuthLevel`