Passwordless PC login

IPI Authenticator App Use Cases - Passwordless PC login

The IPI Authenticator app supports multi-accounts, allowing you to manage multiple user accounts registered on IPI Enterprise Server (IES) within a single domain, or from different IPI servers in various domains. This is particularly useful if you manage multiple servers or have multiple accounts on one server. It also allows unlocking workstations connected to different servers.

Prerequisites

Before setting up passwordless PC login with the IPI Authenticator, make sure that:

• The enterprise version of the IPI Client is installed on your PC.

• The PC is connected to IPI Enterprise Server (IES).

• The workstation is approved by the administrator.

• You are signed in to a domain account using Active Directory (on-prem) or Entra ID.

• Your workstation has a TPM 2.0 module.

• You have the IPI Authenticator app installed on your iOS or Android smartphone.

Passwordless login is supported for both Active Directory (on-prem) and Entra ID accounts.

Step 1: Enroll the Software Key in IPI Client

Before you can use the IPI Authenticator for passwordless PC login, the enterprise version of the IPI Client must be installed on your computer.

Ensure that:

1. Client Connection:

   • The client is connected to IPI Server, and the workstation is approved.

   • You are signed into an Active Directory or Entra ID domain account.

   • The workstation has a TPM 2.0 module installed.

2. Setup Passwordless Authenticator:

   • Navigate to the Mobile Authenticator section and click the "Setup" button under the Passwordless Authenticator subsection.

   
3. Scan QR Code:

   • Open the Scanner section in the IPI Authenticator app and scan the QR code displayed on the IPI Client.

Alternatively, you can open the scanner by going to Accounts > Workstation in the app. The scanner will look like this:

1. Confirm Enrollment:

• Confirm the enrollment on the IPI Authenticator app.

1. Enrollment Complete:

• The enrollment process will begin, and once completed, you are ready to use passwordless login.

Note: If the validity period of the certificate for passwordless enrollment expires, you can follow the guide on re-enrolling IPI Authenticator. More details can be found for passwordless PC unlock for iOS or Android.

Step 2: Login with IPI Authenticator

1. Select IPI Key User:

   • At the lock screen of the PC, choose the "IPI Key" user.

   
2. Scan QR Code:

   • Open the IPI Authenticator app on your smartphone and scan the QR code displayed on the lock screen.

3. Confirm Login:

   • Confirm the login request on the IPI Authenticator.

   • The workstation name and account name will be displayed for verification.

   

Note: Some devices allow you to scan the QR code directly from the smartphone camera, which will redirect you to the IPI Authenticator app automatically.

Offline Login

In case you have no internet connection, refer to the specific guide on logging in without internet access.