13.36 Windows Credential Providers

NOTE:This Windows Credential Provider policy is applicable only for Windows Client.

In this policy, you can configure the settings that enables the third-party credential provider to confirm the identity of a user and authentication.

When using Advanced Authentication on windows workstation where Windows client is installed, the client functions as the Credential Provider during user logon. This policy allows you to enforce the use of third-party Credential Provider for ensuring the user’s identity during logon process and grant access.

Additionally, users can enable or add third-party Credential Provider by specifying the allowedproviders parameter in the config.properties file of the windows client.

To configure the Windows Credential Providers policy, perform the following steps:

  1. Set the Enable option to ON.

  2. Specify the Credential Provider Data name in CP Name.

    To get the CP Name:

    1. Navigate to the path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers

    2. Search the Data name of the required Credential Provider.

      For example, the Data name of Sophos SafeGuard is NPProvider.

  3. Specify the class ID of provider in CP Globally Unique Identifier (GUID).

    To get the class ID:

    1. Navigate to the path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers

    2. Search the class id of the required Credential Provider.

      For example, the class ID of Sophos SafeGuard is {5CDFA681-61C8-423d-999E-32EA10C5F7ED}.

  4. Click Save.