Introduction
The Oloid Vault (Chrome / Chromium) application in the Tenant Admin Portal enables secure passwordless access to stored credentials. Admin can configure authentication methods such as Face, QR Code, Badge ID, NFC/ID, and Oloid Session.
Prerequisites
You must have admin access to the Tenant Admin Portal.
You must create a connection in the Tenant Admin Portal. To create connection, refer How to create Connections in the Tenant Admin Portal.
Steps to Create and Configure Oloid Vault (Chrome / Chromium) Application
Log in to the Tenant Admin Portal.
On the Applications page, click Create Application on the top right corner.
The Create New Application pop-up box is displayed.
Do the following:
Enter Application Name.
Select Application Type as Passwordless.
Click Next.
The Select Passwordless Use Case screen is displayed.
Select Oloid Vault.
Click Next.
The Select Vault Type pop-up box is displayed.
Select Chromium Vault.
Click Create
The Chromium Vault application is created, and the configuration page is displayed.
Configure the following tabs
Note: These settings need to be configured only once, and it is recommended to keep the default values.
Configure Details Tab
The Details tab is used to configure the basic application information, such as the application name, description, and time zone.
Do the following:
Update the Application Name (if needed).
Add the Description (Optional).
Select the Time Zone from the drop-down menu.
Click Save.
Configure Authenticator Tab
This tab is used to enable the login methods you want to support such as Face, Badge ID, NFC/ID, QR Code and Oloid Session.
Note: You can enable one or more credential options based on your requirements.
Face
The Face authenticator enables users to authenticate using facial recognition for secure passwordless access.
Do the following:
Enable Face toggle.
The Advanced Settings page is displayed.
Configure the Face Match Parameters and Liveness Check Parameters on the Advanced Settings page.
Note: The parameters are pre-configured. This is done by Oloid admin.
Click Save.
Additional Settings
Configure Image Capture Resolution: Select the preferred resolution from the Select Resolution drop-down.
Note: If the selected resolution is not available, the browser will default to the closest supported resolution.
Click Save.
Badge ID
The Badge ID authenticator allows users to authenticate using a badge for quick and secure access.
Do the following:
Enable Badge ID Toggle.
The Advanced Settings page is displayed.
Select RFID Badge Type from the drop-down.
Click Save.
The Badge ID is configured successfully.
QR Code
The QR Code feature allows users to authenticate by scanning a QR code.
Do the following.
Enable QR Code toggle.
Enable Show Camera Flip button to allow users to switch between the front and rear cameras.
Note: By default, the front camera opens for QR code scanning.
Under Default camera selection, select a camera option:
Front Camera (default)
Rear Camera.
Click Save.
The QR code is enabled successfully.
NFC/ID
The NFC/ID authenticator allows users to authenticate by tapping an NFC card or ID badge on a supported reader, enabling quick and secure passwordless access.
Enable the NFC/ID toggle.
The NFC/ID toggle is enabled successfully.
Oloid Session
The Oloid Session feature uses the existing Oloid authentication session to securely authenticate users without requiring re-authentication.
Note:
Ensure Include user token in session response is enabled in Endpoint Integration Settings under Passwordless Session Token, as the Oloid session token works only for endpoints that include the user token in the session response.
Oloid Session can be used as an authenticator for Windows applications only with builds that support Presence Detection or Epic.
Do the following:
Enable the Oloid Session toggle.
Select the Session Expiry Time with the help of drop-down.
Note: The maximum expiry time is 12 Hours.
Select one or both of the following options as required:
Allow login to Oloid Vault only once using an active Oloid session: Allows the active Oloid session to be used only once to log in to Oloid Vault.
Auto-login into Oloid Vault using an active Oloid session: Automatically logs the user in to Oloid Vault when an active Oloid session is available.
Click Save.
The Oloid Session is configured successfully.
Configure Theme tab
The Theme tab allows you to customize the appearance of the Oloid Vault application by following the onscreen instructions. For more details, refer Oloid Vault (Chrome/Chromium) How to Configure Theme Tab in Tenant Admin Portal | Oloid Help Center.
Setup Configure Tab
Do the following:
Configure Settings tab
Do the following:
Enable Auto-Submit: Enable the toggle to automatically submits prefilled passwords from Oloid Vault to websites.
Enable Copy Password: Enable the toggle to allow users to copy passwords from the Oloid Vault home page after logging in.
Enable Camera to open in a new Tab: Enable the toggle to open the face camera in a new tab for Oloid Vault users.
Enable Saving Passkeys: Enable the toggle to allow users to securely store and use passkeys within the Oloid Vault application for websites that support passkey authentication. For more information, refer, Oloid Vault (Chrome / Chromium) - How to Enable Saving Passkeys | Oloid Help Center
Enforce Login via Vault: Enable the toggle to require authentication to specified URLs using Oloid Vault instead of manually entering credentials.
Do the following:
Enable the Enforce Login via Oloid Vault toggle.
In the Add URL field, enter the login URL where Vault-based authentication must be enforced.
Enable Browser Tracking toggle to record users' browsing activity as Browser Tracking alerts in the Windows Alert section.
Enable Location Alerts toggle to generate an alert transaction when a user's authentication occurs outside the configured geo-fencing radius. For more, refer to How to Enable Location Mandate and Configure Geo-fencing Radius
Show On-screen Floating Action Button: Enable this feature to add a floating button to provide on-screen quick access to logout.
Configure Re-authentication Login
This setting is used to define the session, browser lock and inactivity time-out durations for Oloid Vault to ensure secure user sessions.
Do the following:
Session Limit: Set the maximum duration a user can remain signed into the Oloid Vault per session.
Note: The maximum session limit is 24 hours.
Enable Browser Lock: When enabled, the browser is locked until the user re-authenticates through Oloid Vault. To know more, refer Oloid Vault (Chrome / Chromium) - How to Enable and Configure Enable Browser Lock in the Tenant Admin Portal | Oloid Help Center
Browser Inactivity Timer: Enable the toggle and set the time duration to protect user sessions from unauthorized access. To know more, refer Oloid Vault (Chrome / Chromium) - How to Configure Browser Inactivity Timer in the Tenant Admin Portal | Oloid Help Center
Note: Set the timer to automatically log off the user after a specified period of inactivity.
Clear Browser Redirect URL: Enter the URL that opens in a new tab when a different user unlocks the browser using a Windows transaction.
Clear Browser data: Select the applicable data to clear browser data when a new user unlocks the browser or when Logout All is triggered.
Apply Endpoint Template is used to apply a predefined endpoint template to configure the endpoint with the required settings. Select the Endpoint Template from the drop-down.
Click Save.
The settings tab is configured successfully.
Customize Buttons tab
This section is used to customize the button label of your application's authentication page by following the on-screen instructions.
Do the following:
Enter the Button Label.
Click Save.
The Customize Button is configured successfully.
Configure Connections Tab
This tab is used to select the connections that provide the set of users allowed to authenticate via Oloid vault application.
Note: Ensure that Oloid ID is enabled, as it is mandatory for Oloid Vault authentication.
Do the following:
Select + Add Connections.
The Add Connections pop-up box is displayed.
Select connection from the drop-down and click Add.
Note: You can add maximum 5 connections in an application.
The connection is added to the application successfully.
The Oloid Vault application is configured successfully.
Keywords
| Configure Chrome Vault Application | Oloid Vault application setup | Passwordless authentication methods |