Signing in

3.2 Signing in

You can sign in to MyID using the MyID Operator Client using the following methods:

Card and PIN logon (smart card, USB token).
Security phrases (passwords).
Single-use authentication codes.

Note: Currently, other MyID logon mechanisms (for example, Integrated Windows Logon) are not supported in the MyID Operator Client.

3.2.1 Signing in using a smart card

For an operator to sign in to MyID using the MyID Operator Client with a smart card:

The operator must have been issued a card (smart card, USB token) through MyID.
The smart card must have been issued with a credential profile that has the MyID Logon option set, and contain either a certificate selected for signing or a manager keypair to be used for logon signing operations.
The smart card must not be disabled or have expired.
The operator's MyID account must be enabled in MyID.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have the Smart Card logon mechanism assigned.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have access to one or more features in the MyID Operator Client.

See section 3.4, Roles and groups for details of which roles in MyID Desktop map to features in the MyID Operator Client.
In MyID Desktop, in Configuration > Security Settings > Logon Mechanisms tab, the Smart Card Logon option must be set to Yes.

For more information on configuring MyID for smart card logon, see the Logon using a smart card and PIN section in the Administration Guide.

3.2.2 Signing in using security phrases

For an operator to sign in to MyID using the MyID Operator Client with security phrases:

The operator must have security phrases recorded for their account using the Change Security Phrases or Change My Security Phrases workflows.

See the Setting security phrases section in the Operator's Guide.

Important: The operator must have at least two security phrases recorded.
The operator's MyID account must be enabled in MyID.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have the Password logon mechanism assigned.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have access to one or more features in the MyID Operator Client.

See section 3.4, Roles and groups for details of which roles in MyID Desktop map to features in the MyID Operator Client.
In MyID Desktop, in Configuration > Security Settings > Logon Mechanisms tab, the Password Logon option must be set to Yes.

For more information on configuring MyID for security phrase logon, see the Logon using security phrases section in the Administration Guide.

3.2.3 Signing in using single-use authentication codes

For an operator to sign in to MyID using the MyID Operator Client with an authentication code:

The operator's MyID account must be enabled in MyID.
To receive an email message or SMS containing the authentication code, the operator must have an email address or cell phone number recorded, and MyID must be configured to send email or SMS notifications.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have the Authentication Code logon mechanism assigned.
In MyID Desktop, in Configuration > Edit Roles, the operator's role must have access to one or more features in the MyID Operator Client.

See section 3.4, Roles and groups for details of which roles in MyID Desktop map to features in the MyID Operator Client.

For more information on setting up MyID for authentication code logon, see the Configuring authentication codes for the MyID authentication server section in the Administration Guide.

3.2.4 Signing in to MyID

To sign in to MyID:

From the MyID Operator Client landing page, click SIGN IN.

If more than one logon mechanism is configured for your system, you are prompted to select which one to use.
To log on with security questions:
1. Select the Security Questions logon mechanism.
2. Type your Username:
3. Click Next.
4. Type the responses to your security questions:
  
  Note: Users must use two security phrases to log on. If the user has more security phrases enrolled, MyID prompts for two randomly-selected questions from the list of enrolled phrases.
5. Click Sign In.
  
  The MyID Operator Client dashboard appears.
To log on with a smart card:
1. Select the Smart Card logon mechanism.
2. The Select Security Device dialog appears, listing all of the smart cards currently attached to your PC.
3. Select the smart card you want to use to log on.
  
  You can log in with a physical smart card inserted into a card reader on your PC.
  
  You must now authenticate to your security device.
4. Type your PIN, then click Login.
  
  The MyID Operator Client dashboard appears.
To log in with an authentication code:
1. Select the Authentication Code logon mechanism.
  
  The Authentication Code Login screen appears:
2. Type your Username or email address.
3. Select the option for obtaining your authentication code:
  - I already have a code – select this option if you have already been provided with an authentication code.
  - Send by email – select this option if you want to receive your code in an email message to the email address stored in your person record in MyID. This option is available only if the Self Requested Authentication Code Email email template is enabled.
  - Send by SMS – select this option if you want to receive your code in an SMS message to the cell phone number stored in your person record in MyID. This option is available only if the Self Requested Authentication Code SMS email template is enabled.
  If neither the email nor SMS options appear, you can still use an authentication code to log on if an operator requests one on your behalf.
  
  Note: The complexity of the code is determined by the Complexity option configured in the email template. See the Changing email messages section in the Administration Guide for details.
4. Click Next.
  
  The authentication code entry screen appears:
5. Type your Authentication Code, and click Sign In.
  
  The MyID Operator Client dashboard appears.