IPI Authenticator Mobile app guide

Passwordless SSO and PC logon with Mobile App

The application also supports multi-accounts, allowing you to add multiple accounts for users registered on the IPI Enterprise Server within a single domain, as well as accounts from different IPI servers in various domains. This is particularly convenient if you have multiple IPI servers or multiple accounts on one server.

1. Sign in to your IPI server using your email and password

2. Install the IPI Authenticator app on your smartphone:

• Select your operating system (Android or iOS), scan the QR code, and proceed to download and install the application.

• Follow the on-screen steps within the mobile app to complete the setup.

2. Configure Passwordless SSO

IPI Server allows you to enable passwordless Single Sign-On (SSO) based on the SAML and OpenID Connect (OIDC) protocols. These protocols are employed to verify a user’s identity when an employee tries to access web or mobile applications.

To configure the IPI Server as an Identity Provider for passwordless SSO, go to Settings → Parameters, and proceed with SAML or OIDC configuration as described in our user guide.

There are 2 possible use scenarios:

• Windows login: passwordless or password-based PC login.

• SSO login to Web services

It is possible to use both of them simultaneously.

3. Configure the computer to login with IPI Client

• Download .exe or .msi (x86, x64) and install the IPI Client on the computer.

• Select the Enterprise version of the program.

• Set your server address in the IPI Client.

• Select integration only with the mobile app.

• After installing the program on your computer, your workstation will appear in the list for confirmation on the dashboard of your server

• Go to the section Workstation on your server, select Workstation, and click Approve

• Within the IPI Client, select “Mobile Authenticator” as the chosen authentication method.

• Follow the provided steps to complete the configuration for computer login.

Please note, that for Passwordless PC Authorization Administrator has to configure:

• Configuring an Active Directory Certification Authority

• IES setup for passwordless login

4. Add New Users:

New users can be added through:

• Active Directory (On-Premises, Azure Ad)

• Manually