MFA Portal

• 1: Log in using an authentication method
• 2: Register authentication tool
• 3: policy
• 4: Configure Privacy Settings
• 5: Settings

1 - Log in using an authentication method

Log in using an authentication method

What is an authentication method?

Authentication method, commonly called Authenticator, refers to an authentication tool.

SingleID provides the following 11 authentication methods for user authentication.

• Password: Enter password on the SingleID login screen
• Email OTP: Send the OTP via email and enter the OTP on the SingleID login screen
• SMS OTP: Send OTP via SMS and enter the OTP on the SingleID login screen
• Knox Messenger OTP: Send OTP via Knox Messenger and enter OTP on the SingleID login screen
• Knox Identity: Knox Portal user ID password authentication integration
• SingleID Authenticator Bio: Install the dedicated SingleID mobile app and link authentication using biometric authentication (fingerprint, facial recognition)
• SingleID Authenticator PIN: Install the SingleID‑dedicated mobile app and link authentication with a PIN.
• SingleID Authenticator mOTP: Install the SingleID‑exclusive mobile app and integrate authentication with mOTP (Mobile OTP).
• SingleID Authenticator TOTP: Install the SingleID‑dedicated mobile app and integrate authentication with TOTP(Time base OTP).
• Passkey: Login and authentication using biometrics (fingerprint, facial), mobile, or PIN code without a password, based on Windows Hello.
• Admin Authentication: If the admin permits direct authentication, request authentication on the admin’s behalf

Setting the preferred authentication method

The user logs into the User Portal provided by SingleID and sets their preferred primary and secondary authentication methods.

If the user sets their preferred method, the screen for selecting a verification method is skipped during login and authentication, allowing immediate authentication using the primary and secondary methods.

If you want to set your preferred authentication method, follow the steps below.

1. User Portal > Personal Profile > Authentication settings, click.
2. Click the star (☆) for each of your preferred 1st authentication method, 2nd authentication method.

After the configuration is complete, the next login will use this method, offering convenient access.

Register authentication tool

All authentication methods can be configured by the user. Registering an authentication method by a user is called enrollment. When a user account is created for the first time, the email OTP is automatically enrolled using the email information from the user data. Other authentication methods can be used by having the user enroll directly as needed.

I will explain the two authentication enrollment methods.

• Register in Authentication Settings: User Portal > Profile > Authentication settings, click the + Add New button at the bottom to register.
• Register on the Identity Verification Method Selection Screen: During login, for first-factor authentication and second-factor authentication, on the Identity Verification Method Selection screen, select the authentication method marked with a gray check mark (V) and register it.

First login

Consent for collection/use of personal information

Consent for the collection and use of personal information is required when logging in with SingleID for the first time or during a certain period. According to the consent procedure, select the required, optional items to agree. Required items must be selected to log in.

Password authentication

Password is the most fundamental authentication method as SingleID’s default authentication tool.

Enter password

To log in using a user ID, follow the steps below.

1. Login screen > Account ID input field, enter the ID, and click the Next button.
2. Password field, enter your password, and click the Next button to log in.

Email OTP authentication

Authenticate

To authenticate with email OTP, an OTP will be sent to the email address registered by the user.

To authenticate with an email OTP, follow the steps below.

1. In Identity verification selection method, click Email.
2. An OTP code will be sent to the registered email. 2. Enter the OTP within the time set by the administrator (usually 3~5 minutes).
3. After you enter, click the Confirm button, and the authentication will be completed.

SMS OTP authentication

Authenticate

To authenticate with SMS OTP, an SMS OTP is sent to the mobile device registered by the user.

To authenticate with an email OTP, follow the steps below.

1. In the Verification method selection, click Email.
2. An OTP code will be sent to the registered mobile phone. 2. Enter the OTP within the time set by the administrator (usually 3~5 minutes).
3. After entering, click the Confirm button, and the authentication will be completed.

Knox Messenger OTP authentication

Authenticate

If you want to authenticate with Knox Messaenger OTP, the OTP will be sent to the Knox Messanger you are using.

To authenticate Knox Messenger OTP, follow the steps below.

1. In Identity verification selection method, click Knox Messenger.
2. The OTP code is sent via the Knox Messenger you are using. 2. Enter the OTP within the time set by the administrator (usually 3~5 minutes).
3. After entering, click the Confirm button, and the authentication will be completed.

Knox Identity Password Authentication

Authenticate

To authenticate with Knox Identity, you must enter your Knox Identity password.

To authenticate with Knox Identity, follow the steps below.

1. In Verification selection method, click Knox Identity.
2. Enter the password for your Knox account.
3. After entering, click the Confirm button, and the authentication will be completed.

SingleID Authenticator authentication

The SingleID service provides a mobile authentication app called SingleID Authenticator and offers authentication in various ways.

Authentication method

Passkey authentication

The SingleID service provides simple authentication and multi-factor authentication using a Windows-based Passkey.

Authentication method

1. Convenient authentication: Provides easy login without ID/Password by using Sign in with Passkey at the bottom of the login page.
2. Multi-factor authentication: Offers convenient login without requiring ID/password during secondary authentication.

Authentication Types

• Mobile Passkey: Scan the QR code to log in using Android and iOS mobile
• Security key: Log in using the Windows security key
• PIN: Login using the Windows PIN code

Administrator authentication

Authenticate

In the SingleID service, the administrator provides authentication by delegating identity verification on behalf of the user.

To perform administrator authentication, follow the steps below.

1. In the Identity verification selection method, if you cannot perform identity verification at the bottom of the screen, you can request verification from the administrator. 1. Click here. Click it.
2. Click the Request button.
3. You will be taken to the admin selection screen. 3. Select the administrator who requested authentication delegation and click the Request button.
4. Authentication delegation is requested to the selected administrator.
5. When the administrator approves the authentication delegation, it is completed automatically.

2 - Register authentication tool

Register authentication tool (Enrollment)

The principle is that all authentication tools must be registered and used by the user themselves. Registering an authentication tool by a user is called enrollment (Enrollment). When a user is initially created, only the Email OTP is automatically registered using the user’s email information. The remaining information can be directly registered and used by the user as needed.

There are three ways to register.

1. Login screen > ID/Password entry > Select verification method Register on the screen
   • On the authentication method selection screen, click the authentication tool marked as ‘Registration Required’ (gray check mark) to register.
2. User Portal(after login) > Profile > Authentication Settings +Add New Click the button to register.
3. Register through the registration message link at the bottom of every authentication screen.
   • The screen below is an example of an SMS verification screen. * You can register by clicking the ‘If you have changed your mobile phone, please register.’ message at the bottom.
   • All authentication code inputs can be changed via a message below (Message format: ~ please register.)

Register Email Verification Tool

Email registration consists of the following three steps.

1. Verification step: This is the identity verification step before registering the email authentication tool.
2. Registration step: This step registers a new email and checks whether the number is valid.
3. Completion Stage: This is the final step to confirm that the registration was successful.

Verification step

This is the step where you verify your identity before using the authentication tool. To view the identity verification process, please refer to 로그인하기.

Registration step

This is the step where the user registers the desired email address and checks its validity.

The user should follow the steps below.

1. If you complete identity verification in the confirmation step, you will automatically proceed to the registration step.
2. Enter the email address you want to register.
3. Click the Send verification code button.
4. Check the OTP code sent to the email address you entered, and enter the OTP code on the screen.
5. If the verification code is entered correctly, you will proceed to the completion stage.

Completion phase

The registration completion screen will appear, and on the next login you can perform first- and second-factor authentication using the email verification tool.

Register SMS authentication tool

SMS registration consists of the following three steps.

1. Verification Step: This is the identity verification step before registering the SMS authentication tool.
2. Registration step: This step registers a new mobile phone number and checks whether the number is valid.
3. Completion Stage: This is the final step to confirm that the registration was completed successfully.

Check step

This is the step where you verify your identity before using the authentication tool. To view the identity verification process, please refer to 로그인하기.

In the verification stage, the authentication method to be used can only be performed with the authentication tool configured by the administrator.

Registration Phase

This step registers the mobile phone number the user wants to add and checks its validity.

The user should follow the steps below.

1. If you complete identity verification in the confirmation step, you will automatically proceed to the registration step.
2. Select the country code and enter the mobile phone number you want to register.
3. Click the Send verification code button.
4. Check the OTP code sent to the mobile phone number you entered, and enter the OTP code on the screen.
5. If the verification code is entered correctly, it proceeds to the completion stage.

Completion phase

Registration Complete screen will appear, and on the next login you can perform first and second authentication using the SMS verification tool.

Register Knox Messenger authentication tool

Knox Messenger registration consists of the following three steps.

1. Verification step: This is the identity verification step before registering the Knox Messenger authentication tool.
2. Registration Step: Enter the Knox ID to register. 2. This is the step that checks whether the Knox ID to be registered is valid.
3. Completion Stage: This is the final step to confirm that the registration was successful.

Check step

This is the step where you verify your identity before using the authentication tool. If you want to view the identity verification process, refer to Log In.

In the verification stage, the authentication method to be used can only be performed with the authentication tool configured by the administrator.

Registration stage

This step registers the mobile phone number the user wants to add and checks its validity.

The user should follow the steps below.

1. If you complete identity verification in the confirmation step, you will automatically proceed to the registration step.
2. Please enter the Knox ID to register.
3. Click the Send verification code button.
4. Check the OTP code sent to the Knox Messenger of the entered Knox ID, and enter the OTP code on the screen.
5. If the verification code is entered correctly, you will proceed to the completion stage.

Completion Phase

Registration Complete screen will appear, and on the next login you can perform first and second factor authentication using the Knox Messenger authentication tool.

Register Passkey authentication tool

The SingleID Authenticator is an authentication tool provided for the SingleID service.

Passkey enrollment consists of the following three steps.

1. Verification Step: This is the identity verification step before registering the Passkey authentication tool.
2. Registration Stage: This is the Passkey registration stage.
3. Completion Stage: This is the final step to confirm that the registration was successful.

Verification step

This is the step where you verify your identity before registering the authentication tool. To view the identity verification process, refer to 로그인 및 인증하기.

Registration Step

This is the step to verify the mobile phone or PC environment where you want to register a Passkey.

Complete the registration process in the four steps below.

1. Activation: Passkey support environment guide.
2. Verification: Complete identity verification using an authentication method.
3. Registration: Passkey registration stage. 3. When you click the Generate on this device button, a passkey is generated and registered on the PC. 3. Create on another device button click registers with a mobile phone or a hardware security key.
4. Complete: Registration Complete verification step. 4. Continue Click the button.

Completion Phase

After the passkey registration is completed, the registration complete screen appears. You can perform first- and second-factor authentication with the Windows Hello authentication tool on the next login.

SingleID Authenticator Register authentication tool

The SingleID Authenticator is an authentication tool provided for the SingleID service.

SingleID Authenticator enrollment consists of the following four steps.

1. Verification step: This is the identity verification step before registering the SingleID Authenticator authentication tool.
2. Installation Step: This is the user’s SingleID installation guide step.
3. Registration Stage: This step registers a new mobile app and registers the service.
4. Completion stage: This is the final step to confirm that the registration was completed successfully.

Verification step

This is the step where you verify your identity before using the authentication tool. If you want to view the identity verification process, please refer to 로그인하기.

Installation steps

There are three main ways to install the SingleID mobile app.

• How to install SingleID Authenticator by scanning a QR code on the user’s mobile device or searching for “SinlgeID” on Google Play (for Android) or the App Store (for iOS)
• How to install by entering your mobile phone number and receiving the download link via SMS.
• How to install via a manual download link Install the SingleID Authenticator app and click the Next button to proceed to the registration step.

Registration Phase

Install the SingleID Authenticator mobile app on the mobile phone you want to register, then launch SingleID Authenticator.

Complete the registration process using the three steps below.

1. Service Registration: In the SingleID Authenticator app, click the ‘+’ at the top.
2. Enter QR or authentication number: Scan the QR code or enter the authentication code to register.
3. Service registration complete: Click the Confirm button to complete the registration.

Completion Phase

After registration is completed in SingleID Authenticator, the Registration Complete screen appears. You can perform first- and second-factor authentication with the Windows Hello authentication tool on the next login.

Registration Phase

Install the SingleID Authenticator mobile app on the mobile phone you want to register, then launch SingleID Authenticator.

Complete the registration process using the three steps below.

1. Service Registration: In the SingleID Authenticator app, click the ‘+’ at the top.
2. Enter QR or authentication number: Scan the QR code or enter the authentication code to register.
3. Service registration complete: Click the Confirm button to complete the registration.

Completion Phase

After registration with SingleID Authenticator is completed, the Registration Complete screen appears. During the next login, you can use the Windows Hello authentication tool for primary and secondary authentication.

Register TOTP Authenticator authentication tool

TOTP Authenticator registers third‑party TOTP to support various authentication tools.

TOTP Authenticator enrollment consists of the following four steps.

1. Verification step: This is the identity verification step before registering the SingleID Authenticator authentication tool.
2. Installation Step: This is the user’s SingleID installation guide step.
3. Registration Stage: This step registers a new mobile app and registers the service.
4. Completion Stage: This is the final step to confirm that the registration was successful.

Verification step

This is the step of identity verification before using the authentication tool. To view the identity verification process, refer to the Login and Authentication.

Installation steps

There are two main ways to install the TOTP Authenticator.

• Mobile app
• Web browser extension

If you click the Next button, you will proceed to the registration step.

Service Registration and Verification Phase

This step registers and verifies the 3rd‑party TOTP authenticator you want to add.

Complete the registration process in the two steps below.

1. Service Registration: Scan the QR code of the TOTP Authenticator you want to register, or enter the manual code. 1. Code registration is completed in the TOTP mobile app or extension.
2. Service verification: Run the TOTP mobile app or extension and enter the OTP.

3 - policy

When logging into SingleID or logging into an application registered with SingleID, various settings such as login method, authentication session, and password need to be configured according to the organization’s security policy.

SingleID provides a policy management feature that allows detailed configuration of login and authentication information.
If you have purchased the Anomalous Behavior Detection feature (ADM), you can configure it to analyze a user’s login activity at login and, when it detects authentication anomalies that differ from the norm, notify the user of a potential security threat.

The policy features provided by SingleID are as follows.

• Login Policy
• Authentication Policy
• Anomaly detection policy
  

By using SingleID’s policy feature, you can configure a secure authentication environment that meets organizational security requirements by specifying detailed login methods based on who is logging in, when, in which environment, and to which application.

Login Policy

The administrator can set detailed policies specifying which authentication methods users can use when logging in with SingleID, and, if necessary, create condition-based authentication policies for users authenticating in specific environments.

Login policies can be configured using the following conditions.

• Which application are you logging into?
• Who is logging in?
• In which environment are you logging in?

To access the login policy menu, navigate as follows.

• Admin Portal > Policy > Login Policy

Basic login policy

The Admin Portal creates two default policies as follows.

• Admin Portal Policy: Admin Portal access permission control policy
• Default Policy: User’s default access control policy

The Admin Portal Policy is the login policy applied when attempting to log in to the Admin Portal, and the Default Policy is the login policy applied when attempting to log in to the user portal.

If you have linked an application to SingleID and have not assigned a separate login policy, the Default Policy is automatically assigned as the default login policy.

Register login policy

The login policy sets the login policies for administrators and users. You can configure login policies based on the connection environment, application, and situation.

Login policies can be registered through a screen consisting of four steps as follows.

1. General
2. Allocation
3. Initial Redirection
4. rule

General

On the general screen, enter the name and description of the login policy.

The fields that need to be entered are as follows.

Click the Next button to go to the assignment screen.

Allocation

Specify the application to which the login policy will be applied on the assignment screen.

1. Click the Assign button to display the application assignment popup on the screen.
2. In the Application Assignment popup, select one or more applications to assign to the login policy, then click the Assign button.
3. If you have assigned all applications, click the Cancel button to close the Application Assignment popup.

Initial Redirection

Specifies the user’s login screen entry method and login method on the Initial Redirection screen.

• Redirected to SingleID’s Sign-in page (login page)

• Redirected to the external IdP

  
  

The explanations of the two methods above are as follows.

• If you select Redirected to SingleID’s Sign-in page, the SingleID login page will be displayed to the user attempting to log in.
• If you select Redirected to the external IdP, the user attempting to log in will see the login page of the selected Identity Provider.
• After selecting Redirected to the external IdP, you must select the Identity Provider from the selection list and designate it.
• If you select Redirected to SingleID’s Sign-in page, you can optionally display an additional button at the bottom of the SingleID login screen that allows login via an Identity Provider.
• AND see the following external IdP buttons on the Sign-In page. Click the text input field below and select one or more Identity Providers registered in SingleID to configure them to be displayed on the login screen.

Rule

In the Rules screen, edit or add login rules and set the priority among them.

Default Rule configuration

The login rule list on the rule screen displays Default Rule by default.

Default Rule cannot be deleted and can only be modified. Also, you cannot set a priority when adding one or more login rules. (Always the lowest priority.)

To modify the Default Rule, follow the steps below.

1. Click Default Rule in the rule list.
2. The WHEN condition of Default Rule cannot be modified.
3. You can modify the THEN result of Default Rule.

In the access permission setting, you can select one of the following two options.

• Deny Access
• Allow Access

If you select Deny Access, login will be denied for all users.

When Allow Access is selected in the access permission setting, you can configure the user’s login method.

Add rule

To add a login rule, follow the steps below.

1. Click the Register button at the top right of the rule list.
2. On the rule registration screen, enter the rule’s name and description.
3. Enter the rule items by referring to the below.

Access environment

THEN configuration

THEN Set the login method and procedure in the result area.

You can select one of the two options in the access permission setting (a).

• Deny Access
• Allow Access

Selecting Deny Access will deny login for all users. (The default value for access permission setting (a) is Deny Access.)

To allow users to log in and configure detailed login methods, select Allow Access.

1. From the first login settings selection list, select the Authenticator to use for login.
2. If you want users to be able to log in with another Authenticator besides the selected primary login method, select the checkbox (V) of And allow another factors below: and choose one or more Authenticators to add in the text input box.

Click the Save button to register the login rule and return to the rule list.

Rule priority management

If one or more login rules are added, the administrator can set the priority among the login rules. If a user meets the conditions set in multiple rules, the login method is applied according to the rule with the highest priority.

To set the priority of login rules, follow the steps below.

1. Drag the ≡ area displayed to the left of the rule name in the rule list with the mouse.
2. The priority of login rules is set based on the drag-and-drop position.
3. The higher a rule appears in the list, the higher its priority.

Change Policy Status

The status of the login policies managed by SingleID is as follows.

An administrator can change the status of the login policy according to its current state as follows.

Disable policy

To disable an active login policy, follow these steps.

1. Click the policy you want to deactivate in the policy list to navigate to the policy detail screen.
2. Click the Disable button.
3. After reviewing the login policy information displayed in the Confirm popup (the number of assigned applications and the number of rules included in the login policy), click the Deactivate button.

Activate policy

To change a login policy from inactive to active, follow these steps.

1. Click the policy you want to activate in the policy list to navigate to the policy detail screen.
2. Click the Activate button to change the login policy status to active.

Delete policy

Administrators can delete the login policy from SingleID.

To delete the login policy, follow the steps below.

1. Click the policy you want to delete in the policy list to navigate to the policy detail screen.
2. If the login policy is enabled, click the Disable button to deactivate the policy.
3. Click the Delete button displayed at the top right of the disabled login policy.
4. A popup screen confirming the deletion of the login policy is displayed.
5. To delete a login policy, first verify the policy information, then enter the name of the policy you want to delete and click the Delete button.

Access Simulation

When there are many login policies and the rules they contain, it can be difficult to determine which user is governed by which policy for login methods.

SingleID provides an access simulation feature so that administrators can quickly verify the login policies and rules applied to users.

Using the access simulation feature, you can select the user and target application, arbitrarily define the user’s login environment (network, device, browser, OS), and predict in advance which login method the user will experience in each scenario.

Additionally, if there are review requests from users experiencing login difficulties, you can quickly verify using the access simulation feature and modify the problematic policies or rules.

To use the access simulation feature, click the Access Simulation button located at the top right of the login policy list screen.

To run the access simulation, follow the steps below.

1. Enter the ID of the user to be simulated.
2. Specify the IP of the user to simulate. 2. After selecting Specific IP Address, you can manually enter the IP. 2. Enter the IP in the format 123.123.123.123.
3. Specifies the device information of the user to be simulated. 3. After selecting Platform, you can select a device from the selection list.
4. Specify the browser information of the user to be simulated. 4. After selecting Browser, you can select a browser from the selection list.
5. Specify the OS information of the user to be simulated. 5. After selecting OS, you can select the OS from the selection list.
6. Click the Application Selection button to select the target application for simulation.
7. In the Application Selection popup, click the radio button to the left of the application name to select the application, then click the Add button.

Authentication Policy

The administrator needs to change detailed authentication settings according to the organization’s security policy.

SingleID categorizes and manages detailed authentication settings into the following four policies.

• Session Policy
• Authenticator policy
• MFA Service Provider Policy
• Password policy

To access the authentication policy menu, navigate as follows.

• Admin Portal > Policy > Authentication Policy

To modify the authentication policy, click the Edit button at the lower right of the authentication policy screen to change the settings, then click the Save button.

Session Policy

To change the session policy, follow the steps below.

1. Click the Edit button at the lower right of the authentication policy screen.
2. In the maximum session limit setting, set the maximum number of sessions a user can create simultaneously.
3. The minimum value that can be set is 1, and the maximum value is 100. 3. When set to 1, the user can only log in from one browser at a time and cannot log in simultaneously from multiple PCs or browsers.
4. In the session priority settings, set the priority of sessions created by the user. 4. The priority can be set to one of the following two options.
   • Old session
   • New session

When you set the maximum session limit to 1 and select Old session in the maximum session count restriction setting, a logged-in user will have their login blocked when they attempt a new login from another PC or browser that is not logged in.

Also, when the maximum session limit setting (Œ) restricts the maximum number of sessions to 1 and New session is selected, if a logged-in user attempts a new login from another PC or browser that is not logged in, the session of the previously logged-in browser is forcibly expired and the session logged in from the new PC or browser is maintained.

In the maximum session time setting, set the maximum duration a session can be kept.

The maximum session time can be selected from one of the following two options.

• No time limit
• Set time limit

If set to No time limit, a session that has been created will not automatically expire until the user logs out. After configuring Set time limit and setting the time, when the specified time elapses, the session expires and the user is automatically logged out. In the Maximum Idle Session Time setting, set the session’s maximum idle time. If you set the maximum idle session time, the session will expire and the user will be automatically logged out when the user does not make an authentication request for the configured duration.

To save the changed settings, click the Save button at the bottom right of the authentication policy screen.

To avoid saving the changed settings, click the Cancel button at the lower right of the authentication policy screen.

Authenticator policy

To change the Authenticator policy, follow the steps below.

1. Click the Edit button at the lower right of the authentication policy screen.
2. Configure each item as described below.
3. When the setup is complete, click the Save button.

MFA Service Provider Policy

To change the MFA Service Provider policy, follow the steps below.

1. Click the Edit button at the lower right of the authentication policy screen.
2. Refer to the table below and configure each item accordingly.
3. When the setup is complete, click the Save button.

Password policy

To change the password policy, follow the steps below.

1. Click the Edit button at the lower right of the authentication policy screen.
2. Refer to the table below and configure each item accordingly.
3. When the setup is complete, click the Save button.

Sign-up Policy

If you want to allow user registration, enable the sign‑up policy, and users other than those provisioned from the HR system or IdP can also be registered. Through account synchronization, it provides the ability to register, create, modify, and delete accounts, as well as to invite users via the login screen or email.

To enable and use the registration policy, follow the steps below.

1. Admin Portal > Policy > Sign‑up Policy click.
2. Enable User Registration Allowed.
3. If you enable it, the Policy tab and User Invitation tab will appear.
4. Review the descriptions of the Policy tab and the User Invitation tab below, and configure the policy.
5. When the setup is complete, click the Save button.

Policy

You can configure general policies for member registration.

Dormant User Policy

Provides a function to set users who have not used the SingleID system for an extended period to a dormant status. Users who have been changed to a dormant state can be configured, according to settings, to allow either self-recovery by the user or recovery by an administrator.

To enable and use the dormant user policy, follow the steps below.

1. Admin Portal > Policy > Human User Policy Click.
2. Human User Policy Activation Click the toggle button.

Additional settings are shown in the table below.

Approval Policy

The administrator can select an approval system and, depending on the type, configure sign‑up and app‑access policies across various approval lines. Various approval policies allow flexible application whenever the security policy changes.

Approval can be performed using either the built-in approval system feature or the Knox Portal approval system. If integration with another approval system is required, please request it via a 1:1 inquiry.

To check the approval policy, follow the path below.

• Admin Portal > Policy > Approval Policy

Approval policy list

The administrator can select an approval system and, depending on the type, configure sign‑up and app‑access policies across various approval lines. It can be flexibly applied whenever the security policy changes, using various approval policies.

Register approval policy

When you click the Register button, you can set the approval system, type, approver, notification method, and approval period.

Anomaly Detection Policy

SingleID provides a function that collects and analyzes user behavior information before and after authentication in real time to determine whether there is abnormal authentication behavior, and if identified as belonging to an abnormal authentication category, immediately notifies the user of the risk.

To access the Anomaly Detection Policy menu, navigate as follows.

• Admin Portal > Policy > Anomalous Activity Detection Policy

User lifecycle management

User lifecycle management provides configuration functions for setting default values when a user is created or registers, and for extending the user account usage period.

To enable and configure user lifecycle management, refer to the following.

Onboarding (subscriber)

Set the phone country code, language, and time zone when creating a user and signing up. To configure, click the Edit button at the bottom right to make changes.

Offboarding (departed user)

Users can request an account usage period extension, and it can be configured to allow the maximum possible extension.

1. When requesting a user usage period extension, click the Activate toggle.
2. Enter N days for the maximum extendable period.
3. Click the Change button in the usage period request approval to set the approver.

Conditional Authentication Policy

Conditional authentication policies can set rules to match the environment, settings, and individual circumstances of user accounts.

You can set the following rules.

4 - Configure Privacy Settings

Configure Privacy Settings

This is a menu for user settings.

To set your privacy preferences, follow these steps.

1. Click the Personal Profile > Personal Information setting at the top right of the screen.
2. You can view the photo, name, email, phone number, language, and time zone.
3. Image: Image > Image Click Change to upload the icon image you want to display.
4. Language: Choose your desired language in Korean or English.
5. Language/Time Zone: Please select the time zone you are currently in. Click the City Search button to open the city search popup. Search for the desired city in English and select it.
6. Click the Save button at the bottom of the screen to save.

Configure Authentication

You can register a user’s authentication tool and set the preferred authentication tool.

To configure authentication, follow these steps.

1. Click the Personal Profile > Authentication setting at the top right of the screen.
2. +Add New button: click to add using the authentication tool of your choice.
3. Click the Delete button to remove the authentication tool you do not wish to use.
4. Star (☆) Click the icon to set your preferred authentication method.

Change Password

In the authentication settings, click Change Password to complete an identity verification process and update your password.

Check login history

You can view the user’s login history and environment.

To view a user’s login history/environment, follow these steps.

1. Click Personal Profile > Login History/Environment at the top right of the screen.
2. In the Login History tab, you can view information such as login date and time, location, country, city, IP address, OS type, browser type, detection status, and result.
3. In the Login Environment tab, you can view the details of any registered login environments, and if an environment is no longer used, you can delete it via the ‘Delete’ button.

Log out

Click the photo icon located at the top right of the screen and then click ‘Logout’.

When you click the Logout button, all applications visited through SingleID are logged out simultaneously, and if integrated logout is configured via the PC SSO Agent, logout also proceeds in the associated browsers.

5 - Settings

The Settings menu consists of Role Management, which manages the permissions of Admin Portal administrators; Ledger Management, which registers and manages SoT (ledger); and SMS Service, which registers SMS integration information used for secondary multi-factor authentication.

Role management

Role management can control the permissions of administrators in the Admin Portal. In line with the principle of least privilege, we provide role management to allow administrators to operate with minimal permissions.

The administrator has two roles by default.

• ADMINSTRATOR - a super administrator account with all privileges
• SOT_MANAGER - an account that is a director and application system administrator with app management capabilities

User assignment

To add a user with ADMINISTRATOR privileges, follow the steps below.

1. From the menu, select ADMINSTRATOR, and click the User tab.
2. To add a user, click the Add button.
3. You can search for a user using the user ID, name, email address you want to add.
4. After searching for a user and selecting, click the Add button to add the user.

Director Management

SingleID can manage and view various SOTs.

default

• It is the primary ledger of SingleID, receiving entries through the Identity Store and MFA Service Provider.
  • Mfa: Mfa is the basic SoT of the MFA service provider. * All users created through an MFA Service Provider that does not specify a User Tag are managed as MFA SoT. * MFA cannot be changed or deleted.
  • SingleID: SingleID is the default SoT. * It is used to manage users and groups created through the Admin Portal. * You cannot change or delete the SingleID.

Application

• It is a ledger automatically generated by receiving user/group information via Inbound Provisionsing from an external application (SoT).
• You can assign the person in charge of managing the ledger through the PIC tab (up to 50 people).

MFA Service Provider

• When registered as an MFA Service Provider, if you set a User tag, a SoT is created, and new users who receive secondary authentication from that system are marked with #SoT.
• You can view and manage ledgers that come in through this MFA Service Provider.
• You can assign the person in charge of managing the ledger through the PIC tab (up to 50 people).

SMS service configuration

The administrator can activate the SMS service using the activation toggle button.

SCP SMS Service Configuration

After activating the SMS service, set the SCP SMS service in the SMS service settings.

To set up and use the SMS service, follow the steps below.

1. SMS Service Activation Click the toggle button to enable the service.
2. Select SCP SMS Service.
3. Click Edit, enter the required values to configure SMS, and save.
   • SCP SMS - SCP SMS Service Endpoint URL, SCP SMS Service App Key
4. To save changes, click the Save button. 4. When you click the Save button, an alert popup appears asking whether to save the changes.
5. When you click the Confirm button, the changes are saved, and a toast message appears when the changes are successfully completed. 5. When the Cancel button is clicked, the administrator’s registration/modification changes are not updated and it returns to the SMS screen.

SMS sending test

To set up and test the SMS service, follow the steps below.

1. Enter the mobile number to receive the test.
2. To verify that the SMS settings are correctly configured, enter a phone number for the SMS sending test and click Send to run the test.
3. When you click the Send button, a popup appears asking whether to send an SMS test to the specified number. 3. When you click Confirm, an SMS is sent to the entered number and a popup window appears. 3. A toast message appears indicating that an SMS has been sent to the specified number.

Knox SMS Settings

Knox SMS is an SMS service provided by Knox. After activating the SMS service, select Knox SMS in the SMS service settings and configure it.

SMS sending test

To set up and test the SMS service, follow the steps below.

1. Enter the mobile number to receive the test.
2. To verify that the SMS settings are correctly configured, enter a phone number for the SMS sending test and click Send to run the test.
3. When you click the Send button, a popup appears asking whether to send an SMS test to the specified number. 3. When you click Confirm, an SMS is sent to the entered number and a popup window appears. 3. A toast message appears indicating that an SMS has been sent to the specified number.

InfoBank SMS Settings

After activating the SMS service, select Infobank SMS in the SMS service settings and configure it.

SMS sending test

To set up and test the SMS service, follow the steps below.

1. Enter the mobile number to receive the test.
2. To verify that the SMS settings are correct, you can enter a phone number for the SMS sending test and click Send to perform the test.
3. When you click the Send button, a popup appears asking whether to send an SMS test to the specified number. 3. When you click Confirm, an SMS is sent to the entered number and a popup window appears. 3. A toast message appears indicating that an SMS has been sent to the specified number.

Bizppurio SMS Settings

After activating the SMS service, select Bizburio SMS in the Bizburio SMS service settings to configure it.

SMS sending test

To set up and test the SMS service, follow the steps below.

1. Enter the mobile number to receive the test.
2. To verify that the SMS settings are correct, you can enter a phone number for the SMS sending test and click Send to perform the test.
3. When you click the Send button, a popup appears asking whether to send an SMS test to the specified number. 3. When you click Confirm, an SMS is sent to the entered number and a popup window appears. 3. A toast message appears indicating that an SMS has been sent to the specified number.

User profile

You can view and edit the attributes that make up a user profile, or add custom attributes. Attributes are classified into three categories: default, system, and custom. You can modify some attribute settings based on the category.

ㆍ Default : This is a property displayed on the Admin Portal or User Portal screen. Some property settings can be modified, but properties cannot be deleted. ㆍ System : a predefined attribute that can be used for inbound or outbound provisioning profile mapping of an application, and cannot be modified or deleted. ㆍ Custom : An attribute that administrators can add so it can be displayed on the screen or used for mapping the application’s provisioning profile. You can edit after adding, but you cannot delete.

Add custom property

You can add and manage custom attributes.