Completing the registration for users

This guide describes the process to register and sign in to OneLogin with your DIGIPASS FX series authenticator. It covers the following scenarios:

• Setting up a new OneLogin user via an invitation mail. You are a newly provisioned OneLogin user who receives an invitation email, sets the password via a link in the invitation mail, and signs in. During the sign-in process you are required to register a DIGIPASS FX authenticator. More generally this is a FIDO2 token registration.

• Extending an existing OneLogin user profile. You are already a OneLogin user and already sign in with standard MFA using a different authentication factor, for example, a regular DIGIPASS authenticator. You may register a new passkey via your profile settings once you have signed into OneLogin.

To allow users to register and sign in with a DIGIPASS FX authenticator, a OneLogin administrator needs to enable the authentication factors and implement the appropriate polices to allow and enforce this method.

If you are an administrator and need to configure the appropriate policies and authentication factors in OneLogin, see Configuring OneLogin for passwordless authentication.

Before you begin

• Ensure you have an FX series FIDO2 device, e.g., DIGIPASS FX7 or DIGIPASS FX1 Bio.

• Ensure that you have an existing OneLogin account or an invitation to set up a OneLogin account.

• Ensure that you use a Firefox or Chromium browser, for example, Google Chrome or Microsoft Edge.

Scenario 1: Setting up a new user via a OneLogin invitation mail

To set up a new OneLogin user profile with a DIGIPASS FX series authenticator

1. Open your registration mail and click the link inside. This will take you to the OneLogin registration page.

   

2. Type an initial password twice, to prevent typing error. When the password meets the complexity requirements, click SUBMIT.

   

3. Sign in with your username or your email address and the newly created password.

   

   You'll now be prompted to set up two-factor authentication to secure your account.

4. Click Begin Setup.

   

5. When you are notified that sign-in data will be stored on the device, click OK to continue with the setup.

   

6. Depending on your operating system, you may receive a security notification. For instance, if you are using Microsoft Windows, the operation system may ask you to this passkey in Windows Hello. Click Use another device.

   

7. When prompted to choose the location where to save the passkey, select Security key and click Next.

   

8. Click OK to confirm the security key setup.

   

9. If it's not connected already, connect the DIGIPASS FX authenticator to a USB port.

10. If required, authenticate to the DIGIPASS FX authenticator:

    1. If you are using a DIGIPASS FX 7 authenticator, you’ll prompted to type your PIN for the security key.

       

    2. If you are using a DIGIPASS FX Bio1 authenticator, you'll be prompted to authenticate with your fingerprint.

       

11. You'll be prompted to press the button on the authenticator. If you are using a DIGIPASS FX1 Bio authenticator, touch the fingerprint sensor on the authenticator. If you are using a DIGIPASS FX7 authenticator, press the flashing LED button on the authenticator.

    If successful, you'll see a confirmation message that the passkey was saved to the device and that you can now use this authenticator for future sign-ins to the OneLogin website.

    

12. Click OK to continue.

    You should now be logged into the OneLogin portal.

Scenario 2: Adding a DIGIPASS FX series authenticator to an existing OneLogin profile

To allow you to register a security key to your existing profile, the OneLogin administrator needs to enable this permission in your profiles policy settings.

To add a DIGIPASS FX series authenticator to an existing OneLogin profile

1. Sign in to your OneLogin portal.

2. Click your profile icon, usually in the upper right corner of the web page, and select Profile.

   

3. Switch to the Security Factors tab.

   

4. Click Add Factor.

5. Select the security factor that was created by the OneLogin portal administrator, for instance, FX Authenticators.

   

6. When prompted to choose the location where to save the passkey, select Use another device and click OK.

   

7. Select Security key and click Next.

   

8. Confirm the notification that you're about to set up a security key for the specified URL as the specified user name.

   

9. If required, authenticate to the DIGIPASS FX authenticator:

   1. If you are using a DIGIPASS FX7 authenticator, you'll be prompted to type your PIN for the security key.

      

   2. If you are using a DIGIPASS FX Bio1 authenticator, you’ll be prompted to authenticate with your fingerprint.

      

10. You’ll be prompted to press the button on the authenticator. If you are using a DIGIPASS FX7, press the flashing LED button on the authenticator to continue.

11. If successful, you will see a confirmation message that the passkey was saved to the device and that you can now use this authenticator for future sign-ins to the OneLogin portal.

    

12. Click OK.

    Your DIGIPASS FX authenticator will now be listed as a security factor.

    

13. Select the DIGIPASS FX authenticator, click Options, and select Set as primary.

    

    You can now sign in using your DIGIPASS FX authenticator as a second factor in MFA or as a FIDO2 passkey for passwordless login. The available login types depend on the policy that your OneLogin portal administrator has set for your profile.

Signing in to OneLogin

To sign in to the OneLogin portal using a DIGIPASS FX series authenticator

1. Navigate to your OneLogin portal login page.

   

2. Type your username and click Continue.

3. You will be prompted for the location of your passkey. The prompt differs, depending on the used operating system. On Windows, the Windows Security dialog appears.

   

4. Select Security key and click Next.

5. If required, authenticate to the DIGIPASS FX authenticator:

   1. If you're using a DIGIPASS FX7 authenticator, you'll be prompted to type your PIN for the security key to unlock it.

      

   2. If you are using a DIGIPASS FX1 Bio authenticator, you'll be prompted to authenticator to your security key with your fingerprint. Touch the fingerprint reader.

6. You'll be prompted to touch the security key. If you are using a DIGIPASS FX7 authenticator, press the flashing LED button on the authenticator.

   

   If successful, you will be signed in and redirected to your OneLogin portal.