Authenticator management (SelfService)
Information
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
Information
A user should have required access privileges to manage authenticators.
To manage authenticators, open the corresponding tab in the user card.
This tab contains the information on the quantity of registered user authenticators and their parameters.
Authenticator deactivation
- Select the required authenticator.
- Click the gearwheel icon.
- Select “Deactivate”.
- If authenticator is deactivated, the user cannot use the corresponding authentication method. Deactivated authenticator is marked with red “Prohibited” icon.
Automatic lock and unlock of authenticators
- To configure authenticator lock, open "Login method lock” policy: Computer configuration/Policies/Administrative templates/Indeed ID/Server.
The policy applies to Indeed servers. It allows to configure automatic lock of authenticators.
Not Configured or Disabled
If the policy is not configured or disabled, a password generated would be 4 characters long and would contain digits only.
Enabled
The one-time password is generated according to the policy parameters. If the policy is not defined or is disabled, then the password can contain digits and lowercase Latin letters only, and would be 6 characters long.
- Select the required authenticator.
- Click the gearwheel icon.
- Click “Lock”. Select “Unlock” to unlock the authenticator.
- “Lock” icon is displayed in the right part of the authenticator panel.
Authenticator registration
- Select the required authenticator.
- Click the gearwheel icon.
- Click “Register”.
- Enter the data for enrollment of selected authenticator and click “Save”. Note: Windows and actions required for enrollment vary for different authenticators.
- If registered successfully, the authenticator is displayed as registered. Information: If the user already has maximum number of authenticators, then registration procedure returns the following error: “Access denied: Maximum number of authenticators reached."
- “Unavailable” icon is displayed in the right part of the authenticator panel if provider with registered authenticators is removed.
- Email and SMS providers are registered automatically if the user has e-mail address or phone number defined, respectively.
- If the user does not have e-mail address defined after installation of E-mail provider, then the authenticator is not used. “@” icon is displayed in the right part of the authenticator panel.
- If the user does not have phone number defined after installation of SMS provider, then the authenticator is not used. “Receiver” icon is displayed in the right part of the authenticator panel.
Authenticator modification and removal
- Select the required authenticator.
- Click the gearwheel icon.
- Authenticator modification
- Select “Modify” to modify the authenticator.
- Enter the new data for the authenticator and click “Save”.
- Authenticator removal
...