Who needs an OATH Token Identifier?
All tokens based on OATH technologies are uniquely identified within a given ‘domain’. The domain could be an enterprise system or more often all tokens manufactured by a given manufacturer.
OATH Token Identifier specifications ensure that tokens can be globally uniquely identified across all manufacturers. There are several advantages of having standard and globally unique identifiers. For e.g. tokens manufactured by any manufacturer can be imported into any validation system without any prior agreements.
OATH is developing a certification program for OATH-conformant products. The program covers event-based, time-based and challenge/response-based token products. If you are a manufacturer of token products and plan to obtain OATH certification, then you will need to ensure that token identifiers are compliant with this specification.
What is an OATH Manufacturer Prefix (OMP)?
OMP is a 2-character unique prefix that is assigned by OATH. OMP guarantees that all OATH Token Identifiers are globally unique.
OATH Class A Token Identifiers are 12-characters long – 2 character OMP followed by 10 characters that are assigned by the manufacturer. Refer to the OATH Token Identifier Specification for the details.
How can I request an OMP to be assigned to my company?
You can request an OMP to be assigned to your company using the OMP Registration Page. Refer to the public list of prefixes to see if your desired OMP is available.
How are OATH Manufacturer Prefixes (OMP) Assigned?
Typically, OMPs are assigned on a first-come first-serve basis. Refer to the public list of prefixes to see if your desired OMP is available. Note that some OMPs may be privately registered and hence are not included in the public list.
Can I resell or distribute a segment of the namespace after an OMP is assigned to me?
No. A parent company and a subsidiary company can share an OMP and if a company is sold, the OMP may be transferred to the new company. However, the OMP cannot be sold or distributed by anyone other than OATH.
My company already has an OMP?
You can send an email to oath-id-admin@openauthentication.org requesting the contact information for your company, and then make arrangements within your company to use your existing OMP.
What if my company address or contact information changes after I receive the OMP?
You can send an email to oath-id-admin@openauthentication.org with the updated information.
My company wants a second OMP for our new project. Can we receive one?
OATH requires that you use 90% of the existing assignment’s namespace before a second OMP can be issued to you. You should coordinate within your organization and you can use a separate subset of the original assignment's token identifier namespace for your new project.
When should I select the ‘Private Registration’ option?
For a regular registration, the OMP and the company name will be listed publicly on the OATH website. You should choose the ‘Private Registration’ option if you do not want your company’s name to be publicly listed.
Please note that there will be an annual fee for $500 for this private registration option.