RapidIdentity Product Guides - 2019 Rolling Release

Enabled

Once the configuration options have been determined, click this checkbox to enable the policy. A Policy cannot be saved until its Authentication Method has been Enabled.

Name

Name the policy. The policy cannot be saved until it has been named.

Description

Enter an optional description for this policy.

Always Fail

Clicking this checkbox will ensure that any user who matches this authentication policy will never be able to authenticate successfully. This could be used, for example, in conjunction with the Time of Day or Source Network criteria to disallow authentication on weekends or when someone is coming from outside a trusted network.

Insecure QR ID Scans Enabled

When this checkbox is selected, users matching this policy can enter a QR code instead of their username. If the authenticating user's policy requires QR authentication, a valid secure QR code will suffice for the credential and the user will not be prompted for that method later. If an insecure QR code is used, the authenticating user will be asked to scan a secure QR code for authentication later.

RapidIdentity Portal users able to generate QR Codes can determine whether the printed QR Code is secure or insecure. Ultimately, an insecure QR code may only be used for identification purposes, but a secure QR code may be used for identification as well as an authentication credential.

Note

If at least one enabled authentication policy allows insecure QR Code scans or at least one enabled authentication policy requires QR authentication, the "Scan QR Code" will show up on the initial login page. If the user is on a device that does not support QR scanning (e.g. a desktop computer with no camera), the button will be present but disabled.