1.4 Usage of the app on Windows Phone

This section contains the following sub sections:

1.4.1 First Launch

  1. Tap the smartphone icon to run the Advanced Authentication application. A message Enter new PIN or leave it empty is displayed.

  2. Specify a PIN code in the text box or leave the PIN text box blank and tap OK. The Authentication Check screen is displayed.

    NOTE:It is recommended to specify a PIN code for secure access to the app.

  3. You can disable the Authentication Check screen if you want to enroll a TOTP authenticator (other than smartphone).

    To disable the screen:

    1. Tap on the Properties icon and select options. The Options screen is displayed.

    2. Slide the Welcome screen switch to the left. The option is now grayed out.

  4. Tap Save to save the settings.

1.4.2 Enrollment

Before you start an enrollment on the smartphone app, you need to enroll yourself in the Advanced Authentication Self-Service Portal (Smartphone or TOTP method) or Web Enrollment Wizard (Smartphone or OATH OTP authenticator) or Client - Enrollment Wizard.

To enroll on the smartphone app, perform the following steps:

  1. After you start the enrollment, a QR code is displayed on the screen. Tap the plus icon in the lower part of the Welcome screen. The application directs the screen to the camera of your phone.

  2. Place the camera of the phone in a direction to capture the QR code on the screen. A green square is displayed over the QR code.The screen is automatically closed when a compliant QR code is captured.

    NOTE: If you see a red square over the QR code, you are trying to scan a non-compliant QR code. Contact your system administrator for further assistance.

  3. After the QR code is successfully scanned, the Change authenticator screen is displayed. Enter a relevant name for your account in the Account name text box and information about your account in the Additional info text box.

  4. Tap on the Save icon to save the authenticator settings. The authenticator settings are saved and the screen navigates back to the Welcome screen.

1.4.3 Further Launches

  1. Tap the smartphone authenticator icon to run the Advanced Authentication application.

  2. Enter a PIN (if you have specified) to access the app and tap OK. The Welcome screen is displayed.

1.4.4 Smartphone Authentication

To authenticate with the smartphone application (if your device has an internet connection), initialize the authentication from your endpoint.

NOTE: If you did not receive a push notification within several seconds, run the application manually and authorize on it. Temporary troubles with push notifications may be related to Microsoft push services.

Push notifications are not supported if you have a TOTP authenticator enrolled. See TOTP and Offline Authentication for more information.

  1. A push notification Authentication required!,is sent to your device if your device is locked or the smartphone application is closed.

  2. Unlock the smartphone and authorize in the app with the PIN (if applicable).

  3. The screen displays the Accept and Reject buttons. Tap Accept to accept the authentication request or Decline to decline the request.

    An Accepted or Rejected message is displayed on the smartphone based on the selection.

1.4.5 TOTP and Offline Authentication

If there is no internet connection on your device or the TOTP method (other than smartphone) is enrolled, perform the following steps to perform authentication.

  1. On the Welcome screen tap Offline authentication. A list of enrolled authenticators are displayed along with the One Time Passwords (OTP).

  2. Use an appropriate OTP from the list to authenticate.

NOTE: If you are not able to authenticate, ensure that the time on your device is synchronized.

1.4.6 Manage Authenticators

You can edit or delete the existing authenticators on your smartphone.

  1. On the Welcome screen tap Offline authentication.

  2. Tap on the authenticator that you want to edit or delete. The Change Authenticator screen is displayed.

  3. If you want to edit the authenticator, make the changes in the Account name and the Additional info text boxes and tap the save icon to save the changes.

  4. Alternatively, if you want to delete the authenticator, tap the delete icon. A confirmation message is displayed for the deletion. Tap OK to delete the authenticator.

1.4.7 Forgotten PIN

If you have forgotten your PIN, you will have to reset and re-enroll the existing authenticators.

  1. Tap anywhere on the blank screen around the Enter you PIN to access the app text box to hide the keyboard and display Forget PIN button.

  2. Tap on the Forget PIN button. A message is displayed to confirm whether you want to clear the PIN and re-enroll the authenticators.

  3. Tap OK to reset the enrolled authenticators.