31.8 Logon Priority page (Security Settings)

The Logon Priority page allows you to configure the order in which different logon mechanisms are presented to the user in the Self-Service App, the MyID Client for Mac, or the MyID Client for Windows; for example, you may want your users to authenticate with a smart card first, and if that fails, to authenticate with security questions.

Note: If the credential profile requires an authentication code, the user is prompted for the code; if the credential profile does not require an authentication code, the authentication methods are presented in the logon priority order.

When the user is presented with a method of authentication, they can decline the option (for example, when presented with a smart card authentication screen, they can click the "I cannot authenticate with my device" option) and proceed to the next available logon mechanism.

For information on which self-service actions support this feature, see the Authentication section in the Self-Service App guide, the Carrying out self-service actions section in the MyID Client for Mac guide, or the Carrying out self-service actions section in the MyID Client for Windows guide. Depending on the action used, other authentication considerations may take priority.

• To change the order, select the logon mechanism and click Move Up or Move Down.

  Note: If you have Windows Logon in your list, it stays at the top of the list – Windows authentication is carried out before any interactive authentication methods. If Windows authentication is successful, the user starts the action; if it is unsuccessful, the user is presented with the next logon mechanism in the list. Note, however, that Windows authentication is not supported on the MyID Client for Mac.

  For information about the External Logon option, which allows you to use an external identity provider (for example, Microsoft Entra) to authenticate, see the Using external identity providers for the self-service applications section in the MyID Authentication Guide.

• To remove an option, select the logon mechanism and click Remove.

• To add options, click Add:

  

  Select one or more options, then click Add Selected.

  Note: Logon mechanisms in MyID Desktop and the Self-Service Kiosk are not affected by this configuration.