6.4 Sending a collection code

If the credential profile for a device has been set up with Issuance Settings > Generate Code on Request set to Simple Logon Code or Complex Logon Code, when the device is requested, MyID sends an email message with a single-use code that the person can use to log on to MyID for the single purpose of collecting their device.

If necessary (for example, if the original code has expired) you can use the Send Auth Code feature on the View Request screen of the MyID Operator Client to send another code to the person; you can choose to send the code in an email or in an SMS text message to their cell phone.

Alternatively you can allow an operator to view a job collection code on their screen, which they can then read out over the phone or paste into a secure chat channel to allow the person to collect their device.

When you send a code, it replaces any previously-issued code.

You can send a code even if the credential profile has not been set up to send a code automatically on issuance (Issuance Settings > Generate Code on Request set to None); for example, you can create a request for a device, then when the cardholder contacts the helpline to indicate they are ready to collect their device, you can issue a short lifetime code for immediate use.

For information about configuring MyID and using these codes, see the Setting up logon codes and Using logon codes sections of the Administration Guide.

6.4.1 Sending a collection code by email or SMS

To request a collection code:

  1. Search for a request, and view its details.

    See section 6.1, Searching for a request.

    You can also view a request from any form that displays a link to the request.

    For example:

    • Click the entry in the list of requests in the REQUESTS tab of the View Person form.
    • Click the entry in the list of requests in the DEVICE REQUESTS tab of the View Device form.
    • View the screen that appears automatically after you have requested a device.

  2. Click the Send Auth Code option in the button bar at the bottom of the screen.

    You may have to click the ... option to see any additional available actions.

    If this option is not available, the request is not suitable to be collected using a code; for example, it may be already collected, require activation, or be a bureau request. You can send codes for contact cards, soft certificate packages, Windows Hello, or Microsoft VSCs. You must also make sure that you have the Send Auth Code for Job Collection option selected for your role in the Edit Roles workflow.

    The Send Collection Code screen appears:

  3. Type any Notes you want to store in the audit trail about the operation.

  4. From the Delivery Mechanism drop-down list, select how you want to send the code.

    You can choose from:

    • Collection Code Email – sends the code as an email to the person's configured email address. This option is available if the Job Collection Auth Code Email template is enabled in the Email Templates workflow.

    • Collection Code SMS – sends the code as a text message to the person's configured cell phone number. This option is available if the Job Collection Auth Code SMS template is enabled in the Email Templates workflow.

    Note: The complexity of the code is determined by the Generate Code on Request setting in the credential profile, or if the credential profile does not contain a complexity setting, by the Auth Code Complexity configuration option.

  5. From the Lifetime drop-down list, select how long you want the code to be valid.

    The options here are determined by the values saved in the Auth Code Lifetime for Immediate Use and Logon Code Lifetime configuration options; by default, the options are:

    • Expires 30 days from request – based on the default Logon Code Lifetime setting of 720 hours.

    • Expires 2 minutes from request – based on the default Auth Code Lifetime for Immediate Use setting of 120 seconds.

  6. Click Save.

    MyID sends the code to the person, who can then use it to collect their device. See the Using logon codes section of the Administration Guide for details of collecting devices using codes In the Self-Service Kiosk, the Self-Service App, and MyID Desktop.

6.4.2 Viewing a collection code on screen

To view a collection code:

  1. Search for a request, and view its details.

    See section 6.1, Searching for a request.

    You can also view a request from any form that displays a link to the request.

    For example:

    • Click the entry in the list of requests in the REQUESTS tab of the View Person form.
    • Click the entry in the list of requests in the DEVICE REQUESTS tab of the View Device form.
    • View the screen that appears automatically after you have requested a device.

  2. Click the View Auth Code option in the button bar at the bottom of the screen.

    You may have to click the ... option to see any additional available actions.

    If this option is not available, the request is not suitable to be collected using a code; for example, it may be already collected, require activation, or be a bureau request. You can send codes for contact cards, soft certificate packages, Windows Hello, or Microsoft VSCs. You must also make sure that you have the View Auth Code for Job Collection option selected for your role in the Edit Roles workflow.

    The View Collection Code screen appears:

  3. Type any Notes you want to store in the audit trail about the operation.

  4. From the Lifetime drop-down list, select how long you want the code to be valid.

    The options here are determined by the values saved in the Auth Code Lifetime for Immediate Use and Logon Code Lifetime configuration options; by default, the options are:

    • Expires 30 days from request – based on the default Logon Code Lifetime setting of 720 hours.

    • Expires 2 minutes from request – based on the default Auth Code Lifetime for Immediate Use setting of 120 seconds.

    Note: The complexity of the code is determined by the Generate Code on Request setting in the credential profile, or if the credential profile does not contain a complexity setting, by the Auth Code Complexity configuration option.

  5. Click Save.

    MyID displays the collection code on screen. You can now provide this to the person who needs to collect their device; for example, you can read the code out over the phone, or send it by a secure chat channel.

    The person can then use it to collect their device. See the Using logon codes section of the Administration Guide for details of collecting devices using codes In the Self-Service Kiosk, the Self-Service App, and MyID Desktop.