40 articles
End users
Signing in, approving requests on your phone, passkeys, codes and access recovery.
Start here
- Signing inHow to sign in to your organization's authentication serviceThe sign-in page of your organization's authentication service (AuthGuard) offers several ways to sign in.
- Phone approvalInstall the approver app on your phoneThe approver app turns an Android phone into a second factor: it approves sign-ins and operations with a code you type and your biometrics or PIN.
- Phone approvalLink your phone to your accountTo link your phone you need the approver app installed and the console open on a computer.
- Phone approvalApprove a request on your phone (comparison code)When you sign in, confirm a change, or a system of your organization asks for your decision, the request reaches the approver app.
- PasskeysCreate a passkeyCreate your passkey at your first sign-in and, if you can, a second one on another device (for example your laptop and a security key).
- Phone approvalI lost my phone or it was stolenThe goal is always the same: remove the lost phone from your account so it can no longer approve, then link a new one.
Access recovery3 articles
- Generate and store recovery codesRecovery codes are your emergency exit if you lose every passkey and your phone.
- Recover access by email ("I forgot my access details")If you forgot your password or lost your factors, you can get a recovery link by email.
- Sign in with a recovery codeUse a recovery code when you have lost every strong factor.
Account2 articles
Approval requests1 article
Federation1 article
Linux sign-in1 article
One-time codes3 articles
- HOTP and OCRA tokens (counter and challenge)Besides TOTP (time-based), the console accepts two less common generator types, usually hardware tokens your organization provides.
- Set up an authenticator app (TOTP)An authenticator app generates six-digit codes that change every 30 seconds.
- Sign in with a password and a one-time codeWhen your account has an active one-time code (TOTP, HOTP or OCRA), the page asks for the code after your password.
Passkeys2 articles
Phone approval9 articles
- Install the approver app on your phoneThe approver app turns an Android phone into a second factor: it approves sign-ins and operations with a code you type and your biometrics or PIN.
- Link your phone to your accountTo link your phone you need the approver app installed and the console open on a computer.
- Approve a request on your phone (comparison code)When you sign in, confirm a change, or a system of your organization asks for your decision, the request reaches the approver app.
- I lost my phone or it was stolenThe goal is always the same: remove the lost phone from your account so it can no longer approve, then link a new one.
- Get requests on your phone (notifications)Approval requests reach your phone as notifications.
- I got a request I did not make ("It wasn't me")A request you did not make means someone typed your email on a sign-in page or, worse, knows your password.
- Remove an account from the approver appThe approver app can hold accounts of several organizations.
- Replace your phoneIf you still have the old phone, replacing it is simple: link the new one first and only then remove the old one.
- Sign in with your phone only, without a passwordWhen your organization allows it, you can sign in by typing only the organization and your email and approving on your phone.
Privacy and GDPR1 article
Privileged access (PAM)7 articles
- Approve privileged access requestsIf you belong to an approver group of an access profile, you receive your colleagues' privileged access requests to decide.
- Connect to a database through privileged accessNot available yetDatabase connections through privileged access are in development.
- My SSH keys for privileged accessTo enter a recorded session with your own SSH client, the appliance needs to know the connection is yours.
- Open a remote desktop through privileged accessNot available yetRemote desktop sessions through privileged access are in development.
- Request break-glass (emergency) accessBreak-glass access is for incidents where there is no time for the normal approval path.
- Request privileged access (My access)When your organization uses privileged access management, server and database admin accounts are not shared: you request access to an account for a…
- Use the web terminal and SSH command of a privileged accessA «Recorded session» connects you to the server through your organization's appliance, without ever showing you the password.
Sessions1 article
Signing in3 articles
- How to sign in to your organization's authentication serviceThe sign-in page of your organization's authentication service (AuthGuard) offers several ways to sign in.
- Sign in with a passkeyA passkey is a credential stored on your computer, phone or security key, unlocked by that device's biometrics or PIN.
- Sign in with a password and a second factorThe password is a transitional method. When your account has a passkey or an approver phone, or your organization requires a second factor, the…
VPN and Wi-Fi (RADIUS)1 article
Windows sign-in5 articles
- I cannot use my phone on Windows (recovery with support)If you cannot use your phone and have no offline code, IT support can let you in with a challenge and a response.
- Sign in to Windows offline (offline codes)When your work computer cannot reach the service (on a plane, without network), Windows asks for an offline code of that computer.
- Sign in to Windows with phone approvalWhen your organization protects its Windows computers, the sign-in screen asks for a phone approval after your Windows password.
- Unlock Windows, remote desktop and administrator promptsBesides sign-in, your organization can ask for the second factor when you unlock your computer, in a remote desktop connection and when a program…
- Use your authenticator-app code on WindowsWhen phone approval is not possible at that moment, you can sign in to Windows with the six-digit code from your authenticator app, as long as the…