Token authentication

To access a protected resource with only one authenticator configured for your account:

1. Go to the protected resource login page.

2. At the welcome prompt, enter your user name and then select Login.

   

3. Enter your domain password and then select Login.

   

4. Enter the passcode for the configured authentication method and then select Login.

   

   In this example, the configured authentication method is email. For details about authentication delivery settings, see Generate and deliver OTPs.

   After successfully authenticating, the protected resource opens.

To access a protected resource using any one of multiple authenticators configured for your account:

1. Go to the protected resource login page.

2. At the welcome prompt, enter your user name and then select Login.

   

3. Enter your domain password and then select Login.

   

4. Select an authentication method.

   

   In this example, Send a code to your email is selected, as shown in the next step.

   Only the authentication methods that are configured for your account are listed. Authenticators that are locked or suspended are greyed-out to show that they are inactive and cannot be used. For details about authentication delivery settings, see Generate and deliver OTPs, MobilePASS target and push OTP settings, and MobilePASS+ token self-provisioning.

5. Enter your passcode and then select Login to access the protected resource.

   

To login with a specific device + browser combination without typing your user name:

1. Go to the protected resource login page.

2. At the welcome prompt, select Remember me on this device.

3. Enter your user name and then select Login.

   

4. Enter your domain password and then select Login.

   

5. Authenticate using the method configured for your account.

   

   In this example, the configured authentication method is email. For details about authentication delivery settings, see Generate and deliver OTPs.

   After successfully authenticating, the protected resource opens.

The next time that you login to the protected resource using the same device and browser combination, you will be prompted for your password, without first entering your user name.

To add an authentication method:

1. Go to the protected resource logon page.

2. At the welcome prompt, enter your user name and then select Login.

   

3. Select Other options.

   

   Other options displays only if: 1) You are eligible to enroll multiple authenticators and 2) Inline enrollment is enabled, or 3) You have not reached the maximum number of tokens you are allowed.

4. Select Add authenticator.

5. (Optional) Select Go back to return to your configured authentication method rather than add another.

   

6. Follow the prompts to add the authenticator.

To choose a default authentication method so that you bypass the list for future logins:

1. Go to the protected resource login page.

2. At the welcome prompt, enter your user name and then select Login.

   

3. Enter your domain password and then select Login.

   

4. Select Remember for future logins and then select your default authentication method.

   

   Only the authentication methods that are configured for your account are listed. Authenticators that are locked or suspended are greyed-out to show that they are inactive and cannot be used.

   In this example, Send a push to MobilePASS+ is selected as the default authentication method.

   After successfully authenticating, the Remember for future logins functionality is enabled and the protected resource opens.

5. When ready, close the session.

The next time you go to the protected resource, your default authentication method (for example, push to MobilePASS+) displays, rather than the list of options.

To de-select a default authentication method so that the list for all methods displays:

1. Go to the protected resource login page.

2. At the welcome prompt, enter your user name and then select Login.

   

3. Enter your domain password and then select Login.

   

   Your default authentication method (for example, push to MobilePASS+) displays.

4. Select Other options.

   

5. De-select the Remember for future logins option and then successfully authenticate.

   

6. When ready, close the session.

The next time you go to the protected resource, the list of authentication methods displays, rather than the method you last used.

To change your authentication method:

1. Go to the protected resource login page.

2. At the welcome prompt, enter your user name and then select Login.

   

3. Enter your domain password and then select Login.

   

4. Select Other options.

   

   In this example, the configured authentication method is email. For details about authentication delivery settings, see Generate and deliver OTPs.

   Other options are available only if: 1. Inline enrollment is enabled for the user and 2. The user has not reached their maximum number of tokens.

5. Select an authentication method.

   

   Only the authentication methods that are configured for your account are listed. Authenticators that are locked or suspended are greyed-out to show that they are inactive and cannot be used.

After successfully authenticating, the protected resource opens.