[Feedback]

Enrolling Accounts

You must enroll your identity store account on the Password Center user portal before you can manage that account using the portal.

To enroll, you have to authenticate/register your to-be-enrolled account on the basis of the Multifactor Authentication policy defined for your role in GroupID Management Console.

In the Multifactor Authentication policy the administrator can:

Therefore, while enrolling, you will be presented Multifactor Authentication options as specified by the administrator for your role.

When you use the portal to perform account unlock, password change and password reset operations, you are authenticated with the authentication type(s) you enrolled your account with. If you fail to enroll, you will be denied to perform the required operation on the portal.

What do you want to do?

If you are not logged on to the portal, click the Sign-in link on the Welcome page of user portal. Provide the login information.

Click Enroll Account on the portal’s Welcome page. The authentication type(s) you have to use for enrollment are listed as tabs.

Depending on the Multifactor Authentication policy that applies to you, some authentication type(s) might be enforced, or you may have the option to choose the authentication type(s) you want to enroll with.

Enroll using the Security Questions

To enroll your account with security questions authentication type, you have to provide answers to the security questions the administrator has selected for the identity store. Your answers must also conform to the security question answer policies the GroupID administrator has defined for your role.  

  1. Click Enroll Account on the portal’s Welcome page.
    The authentication type(s) you have to use for enrollment are listed as tabs.

  2. Select the Security Question tab.

  3. From a Question X list, select a security question of your choice (X represents the question number).

  4. In the Answer boxes corresponding to the questions, type the answer of the question.

  5. Click Enroll Account.

A confirmation message is displayed on successful enrollment.

The security questions are populated here from the local Question Pool of the connected identity store and on the basis of the Security Questions policy defined for your role in the connected identity store.
Questions selected at identity store may be less than the number defined by administrator for user to answer.

Top of page

Enroll using Mobile

To enroll your account through Mobile, you have to provide your mobile number. The portal will send a verification code via SMS on this number and you have to enter it in the portal to enroll your account.

  1. Click Enroll Account on the portal’s Welcome page.
    The authentication type(s) you have to use for enrollment are listed as tabs.

  2. Select the Mobile tab.
    Select your country and then type your mobile number in the mobile number box.

  3. Click the Send Code.
    GroupID sends a verification code on the provided mobile number via SMS.

  4. If the verification code is successfully sent to your provided mobile number, a box appears; enter the received code in it.

  5. Click Enroll Account.
    If you do not receive the code, recheck your mobile number and click the Send again button.

Top of page

Enroll using Email

To enroll your account using email verification, you have to provide your email address. The portal will send a verification code to your email address and you have to enter it in the portal to enroll your account.

  1. Click Enroll Account on the portal’s Welcome page.
    The authentication type(s) you have to use for enrollment are listed as tabs.

  2. Select the Email tab. Type your email address in the email box. The portal will send a verification code to this email address.

  3. Click Send verification code.

  4. If the verification code is successfully sent to your provided email address, a box appears; enter the received code in it.

  5. Click Enroll Account.
    If you do not receive the code, recheck your email address and click the Send code again button.

Top of page

Enroll using Link Account

You can enroll your account by linking multiple accounts with it that may exist on identity store(s) associated with the portal.

The account with which you linked the account(s) becomes the master account and the linked account(s) become its child account(s).

The enrollment of master account is sufficient. You do not have to enroll each account separately on the portal.

An already enrolled account cannot be linked.
You cannot log into the portal using a child account.

  1. Click Link Accounts on the portal’s Welcome page .

  2. On the My Linked Accounts page, click Link Account.
    If multiple identity stores are associated with the portal, the GroupID Authenticate window is displayed.

  3. Select the identity store where your link account exists from the identity stores list.

  4. In the user name box, type the user name of the linked account.

  5. In the password box, type the password of the linked account.

  6. Click Sign In.

  7. A message telling Account has been successfully linked is displayed .
    The linked account gets listed on the My linked Accounts page. Click the Link Account button again if you want to link more account(s), repeat step3.

Top of page

Enroll using Authenticator

The Password Center portal supports authenticator apps, such as Google Authenticator and Microsoft Authenticator, to enroll your account.  

  1. Click Enroll Account on the portal’s Welcome page.
    The authentication type(s) you have to use for enrollment are listed as tabs.  

  2. Select the Authenticator tab.
    Make sure you have installed Google Authenticator or Microsoft Authenticator on your phone.

  3. Scan the QR code (Quick Response code) with the authenticator app. A verification message is generated.

  4. Enter the code in the box and click Enroll Account.

As the authenticator app uses the TOTP (Time-based One-Time Password) algorithm and generates a new code every 30 seconds, the code expires in 30 seconds.  

Top of page

Enroll using PhoneID

You can enroll your account using Imanami's identity password-less identity solution - PhoneID. It is available on Google and Apple play stores.

PhoneID uses your phone number as your identity. Once it is installed on your phone, your phone number gets registered. It transmits the verification code via a text message and then automatically detects that code and proves users identity to Password Center. Click here to see how to install PhoneID and register with PhoneID.

  1. Click Enroll Account on the Welcome page of Password Center user portal.
    The authentication type(s) which the administrator has enabled for your role are listed as tabs.

  2. Select the PhoneID tab.

  3. In the mobile number box, first select your country from the country drop down and then enter your phone number then click Enroll Account.

  4. You receive the PhoneID login request notification on your mobile as follows.



    Tapping Yes on this notification enrolls you in Password Center user portal.

Top of page

Enroll using YubiKey

To enroll your identity store account on the portal using YubiKey, insert the YubiKey device in the USB slot of your computer.

Supported browsers for YubiKey:

IE and Microsoft Edge are not supported.

You can enroll and authenticate with a YubiKey only on a physical machine. Virtual machines are not supported.

  1. Click Enroll Account on the Welcome page of Password Center user portal.
    The authentication type(s) which the administrator has enabled for your role are listed as tabs.

  2. Click the Yubikey tab.

  3. Enter a name for your YubiKey device in the box.

  4. Click Enroll Account.
    The portal directs you to tap on the device. This enrolls your account on the portal.

Enroll using Windows Hello

To enroll your account using Windows Hello on Windows 10 devices, you have to provide your biometric information through the specialized hardware installed such as Fingerprint reader and 3D camera.

  1. Click Enroll Account on the Welcome page of Password Center user portal.
    The authentication type(s) which the administrator has enabled for your role are listed as tabs

  2. Click the Windows Hello tab.

  3. Enter a name for your authentication device in the device name box.

  4. Click Start Registration.
    You will be prompted to provide your biometric information using the configured biometric device.

Before enrolling your account with Windows Hello authentication type, you must be registered on the device using the Windows Hello sign-in options.