RapidIdentity Mobile Guide

Transcription

1 RapidIdentity Mobile Guide Welcome to the RapidIdentity Mobile Component page. The RapidIdentity Mobile guide describes the installation and configuration options for the RapidIdentity Mobile application. This guide replaces pages of the legacy Client Guide Usage It is important to note that the RapidIdentity Mobile application is not a replacement for RapidIdentity Portal on a mobile device, such a phone or tablet. Users can access the Applications or Profiles modules in RapidIdentity Portal on their mobile device by inputting the RapidIdentity URL into their mobile device browser. The RapidIdentity Mobile app allows users to create and store one-time password (i.e. OTP) accounts and to facilitate successful authentication to RapidIdentity. Users can create accounts using three different input methods Enter the RapidIdentity Server URL with your credentials Scan a QR Code Enter a one-time password received from RapidIdentity Server Users with an authentication set that includes PingMe as an authentication method can also use the RapidIdentity Mobile app to authenticate to their environment. Installation Create New Account Server URL QR Code OTP Key PingMe Authentication Account Management Delete Account Settings Support Installation The installation of RapidIdentity Mobile on a mobile device is simple. As a representative example, the sequence below displays the RapidIdentity Mobile installation on an Android phone. Depending on the device and its operating system, the display screens may vary slightly. Follow these three steps to install RapidIdentity Mobile on a mobile device. Go to the Apple or Google app store specific for your device. Search for and install RapidIdentity. Links to each of these app stores can also be found on the RapidIdentity Downloads page.

2 2. An icon for the RapidIdentity Mobile application may appear on the mobile screen and the application may launch. If the application does not launch, navigate to the applications list or shortcut and launch RapidIdentity Mobile. 3. When the installation is complete, click the Identity Automation logo to begin the account setup process. 4. Once the application is open, click Continue to create a new account using the Server URL, QR Code, or OTP key. Security Settings Troubleshooting Depending on the mobile device security settings and preferences, the installer may be blocked initially. If this occurs, click the link to navigate to the security settings and enable this application to install.

3 The installer will launch and RapidIdentity Mobile displays a screen stating what device components are necessary to access. Click I nstall. The installation sequence will proceed and when complete allows users to open the application by clicking Open or to exit the installer by clicking Done.

4 Create New Account RapidIdentity Mobile allows users to create an account using three different input dialogs: Server URL; QR Code; and OTP Key. Users can create a new account by clicking one of the three buttons or if an account currently exists, an additional account can be created by clicking the plus icon. For each of the setup options, it is easiest to use a separate device to access the necessary service provider information, such as the Server URL, QR Code, the secret key, and the account ID/username for OTP. Server URL Follow these five steps to create a new account using the RapidIdentity Server URL. Open the RapidIdentity Mobile application and click Enter Server URL. If an account already exists, click the plus icon first. 2. Enter the RapidIdentity Server URL provided by your administrator or the URL you received from an SMS text message or .

5 3. Next, enter your domain username in the format of <Domain>\<username>. Enter the authorization code received from the SMS message or , or enter your Windows account password. 4. Create a PIN with at least six digits and click Submit.

6 5. Once the account is created a Success message displays. Click OK to view the account OTP and then click Done to return to the Accounts screen. QR Code Follow these five steps to create a new account using QR Code Use any device other than the device on which RapidIdentity Mobile is installed to access the service provider's account security section to enable multi-factor or 2-factor authentication; service providers vary in how this setting is labeled and organized. After this service provider setting is accessed, a QR Code displays on the screen. In the RapidIdentity Mobile application on your device, click Scan QR Code. 4. If you want this account to be password protected with a PIN, toggle Secure Account and then enter and confirm the PIN on the next screen. Secure Account requires entering the PIN to access the OTP token and to reveal the OTP secret. If you feel a PIN is not necessary, click Start Scanning to activate the camera to scan the QR Code.

7 5. Point the camera at the QR Code to scan the QR Code and make sure the horizontal red line is over the QR Code. It may be necessary to tap the mobile device screen to focus the camera. Once the device camera scans the QR Code the account will be set up automatically and display on the RapidIdentity Mobile Accounts screen. The left screenshot shows a Secure Account with the OTP token hidden and the right screenshot shows an account setup with Secure Account not enabled. OTP Key Follow these five steps to create a new account using OTP Key Access the service provider's account security section to enable multi-factor or 2-factor authentication; service providers vary in how this setting is labeled and organized. The service provider should have a screen with a QR Code to scan and provide the option to enter a secret key. Some service providers display the secret key by default while others provide a link to reveal the secret key. Click Enter OTP Key.

8 4. Enter the secret key (up to 64 characters), the issuer name (i.e. Service Provider), and the username for that service. 5. If you want this account to be password protected with a PIN, enable Secure Account and then enter and confirm the PIN on the next screen. Secure Account requires entering the PIN to access the OTP token and to reveal the OTP secret. If you feel a PIN is not necessary, click Submit. 6. The new account will be created automatically.

9 PingMe Authentication RapidIdentity Mobile enables users with the PingMe authentication method to authenticate to their environment. The PingMe method integrates with the RapidIdentity Mobile client to send a push authentication request to the user's mobile device. When the user accepts the request, RapidIdentity Federation authenticates the user immediately. Follow these two steps to authenticate with PingMe. Tap the RapidIdentity Mobile notification on your device or click Approve or Deny. The actual notification contains the Domain\username of the user attempting to authenticate with PingMe, however, that information is redacted in this screenshot. 2. If the notification is tapped without clicking Approve or Deny in the push notification, RapidIdentity Mobile presents an approval screen to authenticate. Depending on the policy, users may be required to enter PIN before approval. It is also possible that a custom message may be configured for your authentication, in place of "Please enter your Authorizing PIN".

10 3. Once approved, an approved status message displays and you will be authenticated to your environment. Click OK. Account Management There are two options to manage RapidIdentity Mobile accounts. 2. Delete account Access Settings Delete Account Follow these three steps to delete an account. On an Android device, press and hold the desired account. Apple devices require a lateral swipe to access the Delete option. 2. Tap Delete.

11 3. Tap OK to confirm the deletion or press Cancel to discard. Settings The Settings menu allows users to view their account information, reveal the OTP secret, and to toggle Secure Account. The information on the Account Info screen depends on how the account was configured. Accounts that require a PIN will not allow toggling Secure Account. Similarly, accounts that were not setup with an OTP secret will not display Show Secret and accounts in which an issuer was not configured will not display an Issuer.

12 RapidIdentity Server accounts can be synchronized with the RapidIdentity Mobile app by clicking Resync. Support If an issue arises with the RapidIdentity Mobile application, follow these three steps to communicate with Identity Automation Support. 2. Navigate to the Help menu by clicking the question mark. Click An message is generated addressed to Identity Automation Support with the mobile device information and a text file containing the application logs. Include any additional information describing the events that took place to help Support understand the issue and then send the .