Registering and authenticating to Delinea Secret Server

Once the Delinea Secret Server platform has been configured with the appropriate identity policies and authentication profiles to allow FIDO2 passkeys as an authentication factor, users can register and sign in with their DIGIPASS FX series authenticators.

Before you begin

• Ensure that you have a DIGIPASS FX authenticator, e.g. FX7 or FX1 Bio.

• Ensure that the appropriate Delinea authentication profiles and identity policies are configured to allow FIDO2 authentication (see Configuring Delinea Secret Server for FIDO2 authentication).

• Ensure that you use a Firefox or Chromium browser, for example, Google Chrome or Microsoft Edge.

Registering and authenticating to Delinea Secret Server

To register a DIGIPASS FX series authenticator for authentication to Delinea Secret Server

1. Sign in to Delinea Secret Server with your user name and password.

2. Click the profile icon in the upper right of the page.

3. Select Account details.

4. Switch to the Security tab.

5. Select the option to add the DIGIPASS FX authenticator. The name of this option was set by the administrator in the Identity policy setting that allows FIDO2 tokens as an authenticator, for example, FX7 Token.

6. Type a name for the FIDO2 token. You can choose any name you like to help you identify your DIGIPASS FX authenticator.

7. When you are prompted to do so, connect the token to a USB port on the computer.

8. When you are prompted where you’d like to store the passkey, select Security key.

9. Confirm to allow to set up your security key to sign in to the Delinea Secret Server portal.

10. Confirm to allow the Delinea Secret Server to see the make and model of your security key and continue the setup.

11. If required, authenticate to the FIDO token:

    • If you are using a DIGIPASS FX1 Bio authenticator, you’ll be prompted to authenticate to your security key with your fingerprint. Type your PIN or touch the fingerprint reader to authenticate.

    • If you are using a DIGIPASS FX7 authenticator, you’ll be prompted to type your PIN for the security key.

    If successful, you’ll see a confirmation message that the passkey was saved to the device and that you can now use the token for future logins to the Delinea Secret Server web portal.

To sign in to Delinea Secret Server using a DIGIPASS FX series authenticator

1. Navigate to the Delinea Secret Server login web page.

2. Type your Delinea user name.

3. If the authentication profile allows more than one login factor, then select FIDO2 security key from the list and click Next.

4. Select Security key to sign in with your passkey.

5. If required, authenticate to the FIDO token:

   • If you are using a DIGIPASS FX1 Bio authenticator, touch the fingerprint reader.

   • If you are using a DIGIPASS FX7 authenticator, press the button on the token that should be flashing at this point. If you’re prompted for a PIN, type your PIN otherwise you will be signed in automatically.