3 Requesting a Derived Credential

You can request derived credentials for your own mobile device or PC.

Collecting a mobile ID may take several minutes, depending on the complexity of the certificates and the speed of your network connection. If the collection fails due to network problems, you are recommended to use the Cancel Credential workflow to cancel the mobile ID, then request another mobile ID for the user.

To request a derived credential, open a web browser and navigate to the Start page on the SSRP web server:

https://myserver/Start

Follow the on-screen instructions.

If you have multiple authentication methods configured, when the user clicks an external authentication method, they are taken to the identification provider's login page or, if the user is already logged in, they may be automatically authenticated and go directly to the Select Credential Profile screen.

If there is a only one option, the user proceeds directly to that option without having to make a selection.

Note: In previous versions of the SSRP, the initial page was StartPage rather than Start. If you go to the StartPage URL, you automatically use the page for client certificate-based derived credentials where you insert your PIV card. If you want to use an OpenID Connect identity provider, you must go to the Start URL instead.