Signing in

3.2 Signing in

You can sign in to MyID using the MyID Operator Client using the following methods

Card and PIN logon (smart card, USB token, or VSC).
Security phrases (passwords).
Windows Hello.
FIDO.

Note: Currently, the other MyID logon mechanisms (for example, logon codes or Integrated Windows Logon) are not supported in the MyID Operator Client.

3.2.1 Signing in using a smart card

For an operator to sign in to MyID using the MyID Operator Client with a smart card:

The operator must have been issued a card (smart card, USB token, or VSC) through MyID.
The smart card must have been issued with a credential profile that has the MyID Logon option set, and contain either a certificate selected for signing or a manager keypair to be used for logon signing operations.
The smart card must not be disabled or have expired.
The operator's MyID account must be enabled in MyID.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have the Smart Card logon mechanism assigned.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have access to one or more features in the MyID Operator Client.

See section 3.4, Roles and groups for details of which roles in MyID Desktop map to features in the MyID Operator Client.
In MyID Desktop, in Configuration > Security Settings > Logon Mechanisms tab, the Smart Card Logon option must be set to Yes.

For more information on configuring MyID for smart card logon, see the Logon using a smart card and PIN section in the Administration Guide.

3.2.2 Signing in using security phrases

For an operator to sign in to MyID using the MyID Operator Client with security phrases:

The operator must have security phrases recorded for their account using the Change Security Phrases or Change My Security Phrases workflows.

See the Setting security phrases section in the Operator's Guide.

Important: The operator must have at least as many security phrases recorded as the value set in the Number of security questions for self-service authentication configuration option.
The operator's MyID account must be enabled in MyID.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have the Password logon mechanism assigned.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have access to one or more features in the MyID Operator Client.

See section 3.4, Roles and groups for details of which roles in MyID Desktop map to features in the MyID Operator Client.
In MyID Desktop, in Configuration > Security Settings > Logon Mechanisms tab, the Password Logon option must be set to Yes.

For more information on configuring MyID for security phrase logon, see the Logon using security phrases section in the Administration Guide.

3.2.3 Signing in using Windows Hello

For an operator to sign in to MyID using the MyID Operator Client with a Windows Hello credential:

The operator must have been issued a Windows Hello credential through MyID.
The Windows Hello credential must not be disabled or have expired.
The operator's MyID account must be enabled in MyID.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have the Windows Hello logon mechanism assigned.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have access to one or more features in the MyID Operator Client.

See section 3.4, Roles and groups for details of which roles in MyID Desktop map to features in the MyID Operator Client.
In MyID Desktop, in Configuration > Security Settings > Logon Mechanisms tab, the Windows Hello option must be set to Yes.

For more information on configuring MyID for Windows Hello logon, see the Setting up Windows Hello for logon section in the Windows Hello for Business guide.

3.2.4 Signing in using FIDO

For an operator to sign in to MyID using the MyID Operator Client with a FIDO authenticator:

The operator must have been issued a FIDO authenticator through MyID.
The FIDO authenticator must not be suspended.
The operator's MyID account must be enabled in MyID.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have the FIDO Basic Assurance or FIDO High Assurance logon mechanism assigned. You are recommended to configure logon to MyID using FIDO High Assurance rather than FIDO Basic Assurance.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have access to one or more features in the MyID Operator Client.

See section 3.4, Roles and groups for details of which roles in MyID Desktop map to features in the MyID Operator Client.
In MyID Desktop, in Configuration > Security Settings > Logon Mechanisms tab, the FIDO Basic Assurance or FIDO High Assurance option must be set to Yes.

For more information on setting up MyID for FIDO logon, see the Configuring MyID for FIDO logon section in the FIDO Authenticator Integration Guide.

3.2.5 Signing in to MyID

To sign in to MyID:

From the MyID Operator Client landing page, click SIGN IN.

If more than one logon mechanism is configured for your system, you are prompted to select which one to use.
To log on with security questions:
1. Type your Username:
2. Click Next.
3. Type the responses to your security questions:
  
  The number of security questions you must answer depends on the Number of security questions for self-service authentication configuration option. If you have more security phrases recorded than are required (for example, if you have four security phrases recorded, and you need two to log on) MyID prompts you for a random selection of questions.
4. Click Sign In.
  
  The MyID Operator Client dashboard appears.
To log on with a smart card or VSC:
1. The Select Security Device dialog appears, listing all of the smart cards (including Virtual Smart Cards) currently attached to your PC.
2. Select the smart card you want to use to log on.
  
  You can log in with a physical smart card inserted into a card reader on your PC, or with a virtual smart card (VSC) installed on your PC.
  
  You must now authenticate to your security device.
3. Type your PIN, then click Login.
  
  The MyID Operator Client dashboard appears.