Running the solution

This section describes the login and authentication flow with the agent. Windows attaches the credential provider to the same user account and does not create a separate tile.

Following are the login screen for different user types

When SafeNet OTP is not exempted

1. Enter the SafeNet OTP and press Enter (or click the forward arrow sign).

   For Challenge-Response token, press Enter (or click the forward arrow sign) keeping the Passcode field blank.

   Depending on the user-selected token type, any of the following character passcodes can also be provided:

   • g for GrIDsure
   • e for E-mail
   • s for SMS
   • p for Push OTP

2. Enter the Microsoft password.

After providing the Microsoft password, you will be successfully logged in to the Windows machine.

When SafeNet OTP is exempted

Enter the Microsoft password.

After providing the Microsoft password, you will be successfully logged in to the Windows machine.

Push with number matching

For the users enrolled with the MobilePASS+ token in STA, the number matching feature makes push notifications more secure and prevents users from approving push notifications by mistake.

During online authentication, the user:

1. Selects Send a push to MobilePASS+ from the list of authenticators.

2. Matches the two-digit number on their MobilePASS+ authenticator push notification with the number that is displayed on the login screen.