Introduction
Tenant Admins can create and configure a WebKey application from the Tenant Admin Portal to define authentication methods, customize the login experience, and control security and session behavior.
Prerequisite
You must have a Tenant Admin account
Steps to create and configure WebKey application
Log in to the Tenant Admin Portal. For more details refer How to log in to the Tenant Admin Portal.
On the Applications page, click Create Application in the top right corner.
The Create New Application pop-up box is displayed.
Do the following:
Enter Application Name and select Application Type as Passwordless.
Click Next.
The Select Passwordless Use Case page is displayed.
Select WebKey > click Create.
The Application is created successfully.
Do the following:
Note: These are one-time settings and all the default settings are recommended.
Configure Details tab
Edit Application Name if required.
Add Description. (Optional)
View Linked Identity Profile to to identify the configured Identity Provider Profile.
Select Time Zone from the dropdown list. (Optional)
Copy Login URL Path to sign in to WebKey app.
Configure Authenticator tab
You may enable one or more credential options based on your requirements.
Enable Username
Emp ID/ Primary ID
Enable Employee ID/Primary ID as Username: Enabling this option will prompt the user to enter their Employee ID or Primary ID before authentication.
Note: A custom label can be added which will be shown instead of Emp ID/Primary ID on the login screen.
Enabling this option will prompt the user to enter their Email ID before authentication.
Note: Login through Email ID will not be available for Apps.
Credentials
Face
To use face as credential, enable Face option.
The Advanced Settings section is displayed.
Enable Take Re-consent During Transactions to show the re-consent form to users with invalid consent during every face authentication until they re-sign.
Configure Face Match Parameters, and Liveliness Check Parameters on the Advanced Settings page.
Note: The parameters are pre-configured. This is done by Oloid admin.
Configure the following:
Face Match Parameters
Note: You must consult your Oloid representative before making any changes to the Face Match Parameters to ensure optimal authentication performance.
Turn on Strict Error Handing toggle to skip the error and perform a direct one-to-one face match.
Turn on Enable Virtual Camera to allow third-party virtual camera app to be used for face capture. If a user attempts to spoof the system using a third-party app, this feature helps detect and flag potential spoofing attempts.
Turn on Additional Face Match toggle to perform a one-to-one face match alongside the standard face matching process.
Adjust the Face Match Threshold slider or enter a value directly into the input box to set the face match threshold value.
Liveness Check Parameters
Note: You must consult your Oloid representative before making any changes to the Liveness check parameters value to ensure optimal authentication performance.
Min Liveness Probability: Specifies the threshold used to determine whether an image is live or spoofed.
Default value: 0.5
Images with a liveness probability of 0.5 or higher are classified as live.
Min Liveness Quality: Specifies the minimum quality required for an image to be suitable for a liveness check.
Default: 0.1
Images with a quality score of 0.1 or higher are considered suitable for liveness verification.
Additional Settings
Enable Manual Capture Accessibility toggle to allow users manually capture their face during the face recognition process.
Select Disable Auto-capture to disable automatic face capture. When enabled, users must manually capture their face using:
Enter or Space bar on desktops and laptops.
Tap anywhere on the screen for mobile and tablet devices.
Enable Timed Auto-Capture to allow the system to automatically capture the user's face if it is not captured within a set time.
Set the Time-out Duration in seconds.
After the timer ends, the system captures the face automatically, even without user action.
Configure Image Capture Resolution.
Select Capture Resolution from the Select Resolution dropdown list.
Low: 640×480: Lower quality image.
Medium: 1280×720: Balanced quality.
High: 1920×1080: High-quality image, Best clarity.
Enable Adjust Video Preview Container Spacing From Top toggle to move the face capture preview upward for better alignment with the camera.
Click Save.
Badge ID
To use Badge ID as credential, enable Badge ID. Select a Badge Type from the dropdown list.
Note: Enable Badge ID, then enable PIN for multi-factor authentication (if applicable).
QR Code
To use QR Code as credential, enable QR Code option to sign in to WebKey application.
By default, the front camera opens for QR code scanning.
Enable Show Camera Flip button to allow users to switch between the front and rear cameras.
This option displays a camera flip button on the preview screen during QR code scanning.
Under Default camera selection, select a camera option:
Front Camera (default)
Rear Camera
Note: This feature is available only for iOS devices and Android devices.
Click Save.
NFC/ID
To use NFC/ID credential, enable NFC/ID to sign in to WebKey application from your desktop/laptop.
The NFC/ID option section is displayed.
Do the following:
Enable Use Web-NFC to allow NFC Login from the Mobile Phone and Tablet browser that supports NFC (such as Google Chrome on Android)
Enable Replace the Credential Label - NFC Tag to replace the default "NFC" or "NFC Tag" label with a custom name.
Enter the new label in the Replace label with field. Example: Replace NFC Tag with RFID.
Provide NFC Scan Instruction to guide users on scanning their NFC badge for login.
Authentication Success Message: Enter a message to display when authentication is successful.
Authentication Failure Message: Enter a message to display when authentication fails.
Note: Enable NFC/ID, and then enable PIN for multi-factor authentication (if applicable).
MFA Credentials: PIN
To use PIN credentials, enable PIN as a multi-factor authentication method for signing into the WebKey application.
Configure Theme tab
You can customize theme of your login page of the WebKey application by following the onscreen instructions.
Design Configure tab
You can set up the configure tab by configuring browser settings and customizing button labels.
Configure Settings tab
Do the following:
Enable Inactivity Session Time Out toggle button to automatically return to the previous screen if credential capture fails within the set time-out duration.
Enable Auto-Authentication using Local transactions toggle button will allow user to auto-authenticate into Webkey after device login.
Enable Continue Without Local Transaction toggle button will allow user to authenticate manually without giving an error if local authentication transaction is not found.
Client Authentication
Enable Custom User Agent to allow users to log in to WebKey app from custom browsers.
Select Enable Browser Fingerprint to allow WebKey login to function only on registered browsers.
Do one of the following:
Select + Browser Fingerprint to manually add browser fingerprint.
Select Transactions > Action dropdown > Add Browser Fingerprint to Application. For more information, see How to configure Browser Fingerprint for WebKey
Click Save.
Select Add Device to register devices for Webley Login. Refer: How to configure Custom User Agent in WebKey Application
Configure Customize Buttons tab
Do the following:
Do the following:
Enter customized Button Label to display on the Web Key application.
Select Enable Face Enrollment option to add a customized button label and enrollment URL to the login page of the WebKey application.
Select Enable Custom Button option to add a customized button label and redirect URL to the login page of WebKey application.
Note: Click Save after each action to save your configuration
Configure Connections tab
Do the following:
Select + Add Connections to map a connection to the application.
On the Add Connections pop-up box, select connection name(s) from the Select Connection dropdown list and click Add.
Note: Click Save after each action to save your configuration.
The WebKey application is configured and listed on the Application page.
Keywords
| WebKey application| WebKey configuration| How to create Webkey Application| How to Configure Webkey Application|