Passwordless PC login

Please note that IPI Authenticator cannot be used for Passwordless PC login of the Azure AD account. This feature is only available with the On-Prem Active Directory.

Step 1: Enroll the software key in the IPI Client

1. An enterprise version of the client must be installed on the computer. Ensure that:

   • The Client is connected to the IES, workstation is approved.

   • You are signed into the Windows domain account.

   • Workstation has TPM 2.0 module.

2. Input IES address at the Settings section. \

3. Go to the Mobile Authenticator section and click "Setup" button under the Passwordless Authenticator subsection. \

4. Open Scanner section at the IPI Authenticator and scan the QR code from IPI Client. Also you can open this scanner from the "Accounts > Workstation" section. In this case scanner will look like this: \

5. Confirm enrollment on IPI Authenticator. Enrolling will start. \

6. That is all set.

In this article you can find the guide on how to re-enroll IPI Authenticator if the validity period of the certificate for passwordless enrollment is over.

You can find more on enrollment for passwordless PC unlock - iOS, Android.

Step 2: Login with IPI Authenticator

1. Choose the "IPI Key" user at the lock screen. \

2. Open IPI Authenticator App and scan the QR code from the lock screen. \

3. Confirm the login at the IPI Authenticator. 1 - workstation name, 2 - account name.

Also, for some devices it is possible to scan the code directly from the smartphone camera, this will redirect you to IPI Authenticator.

In the this article you can find the guide on how to login in case you have no internet connection.