The page has been translated by Gen AI.

Log in using an authentication method

What is an authentication method?

Authentication method, commonly called Authenticator, refers to an authentication tool.

SingleID provides the following 11 authentication methods for user authentication.

Password: Enter password on the SingleID login screen
Email OTP: Send the OTP via email and enter the OTP on the SingleID login screen
SMS OTP: Send OTP via SMS and enter the OTP on the SingleID login screen
Knox Messenger OTP: Send OTP via Knox Messenger and enter OTP on the SingleID login screen
Knox Identity: Knox Portal user ID password authentication integration
SingleID Authenticator Bio: Install the dedicated SingleID mobile app and link authentication using biometric authentication (fingerprint, facial recognition)
SingleID Authenticator PIN: Install the SingleID‑dedicated mobile app and link authentication with a PIN.
SingleID Authenticator mOTP: Install the SingleID‑exclusive mobile app and integrate authentication with mOTP (Mobile OTP).
SingleID Authenticator TOTP: Install the SingleID‑dedicated mobile app and integrate authentication with TOTP(Time base OTP).
Passkey: Login and authentication using biometrics (fingerprint, facial), mobile, or PIN code without a password, based on Windows Hello.
Admin Authentication: If the admin permits direct authentication, request authentication on the admin’s behalf

Reference

SingleID Authenticator If this is your first time using the SingleID Authenticator mobile app, please refer to SingleID Authenticator.

Setting the preferred authentication method

The user logs into the User Portal provided by SingleID and sets their preferred primary and secondary authentication methods.

If the user sets their preferred method, the screen for selecting a verification method is skipped during login and authentication, allowing immediate authentication using the primary and secondary methods.

If you want to set your preferred authentication method, follow the steps below.

User Portal > Personal Profile > Authentication settings, click.
Click the star (☆) for each of your preferred 1st authentication method, 2nd authentication method.

After the configuration is complete, the next login will use this method, offering convenient access.

Information

Even if users set their preferred authentication methods for primary and secondary authentication, administrators can restrict them to specific authentication methods through login policy settings.

Register authentication tool

All authentication methods can be configured by the user. Registering an authentication method by a user is called enrollment. When a user account is created for the first time, the email OTP is automatically enrolled using the email information from the user data. Other authentication methods can be used by having the user enroll directly as needed.

I will explain the two authentication enrollment methods.

Register in Authentication Settings: User Portal > Profile > Authentication settings, click the + Add New button at the bottom to register.
Register on the Identity Verification Method Selection Screen: During login, for first-factor authentication and second-factor authentication, on the Identity Verification Method Selection screen, select the authentication method marked with a gray check mark (V) and register it.

Reference

Refer to Register authentication tool for enrollment.

First login

Consent for collection/use of personal information

Consent for the collection and use of personal information is required when logging in with SingleID for the first time or during a certain period. According to the consent procedure, select the required, optional items to agree. Required items must be selected to log in.

Password authentication

Password is the most fundamental authentication method as SingleID’s default authentication tool.

Enter password

To log in using a user ID, follow the steps below.

Login screen > Account ID input field, enter the ID, and click the Next button.
Password field, enter your password, and click the Next button to log in.

Reference

If you click the eye-shaped icon in the password input field, you can view the password you entered.

Information

If you enter the password incorrectly

If the entered password is incorrect, you will see an error message and can try again. The number of allowed retries is limited to the count set by the administrator in the password policy.

When the password is entered incorrectly repeatedly and becomes locked

If the password is entered incorrectly and the device becomes locked, you can unlock it using two methods.

Automatic unlock after 1~5 minutes: When automatic unlock is enabled, the account remains locked for 1~5 minutes. * Login will be available after that time.
Unlock with password reset: When the administrator configures the password policy to use password reset, a password reset is required. * You can log in after resetting your password. Find ID you can view the detailed information there.

Email OTP authentication

Authenticate

To authenticate with email OTP, an OTP will be sent to the email address registered by the user.

To authenticate with an email OTP, follow the steps below.

In Identity verification selection method, click Email.
An OTP code will be sent to the registered email. 2. Enter the OTP within the time set by the administrator (usually 3~5 minutes).
After you enter, click the Confirm button, and the authentication will be completed.

Reference

Resend Code: If the input validity period has expired, click the resend code button. 1. Resend the OTP code via email.
Would you like to authenticate using a different method?: If the current authentication cannot be used, switch to a different authentication method.
If you changed your email, please register.: You can register (Enrollment) a different email and authenticate it according to admin settings. You can view the details for registration at Register Email Authentication Tool.

guide

If the code is entered incorrectly

If the user enters the OTP code incorrectly, they can re-enter it up to the number of times specified by the administrator.

When locked due to exceeding the user input limit

If the OTP code is entered incorrectly more times than the administrator’s allowed limit, the screen will be locked from input for the duration set by the administrator. You can input after waiting for the specified duration. Refresh and try again after the input timeout.

SMS OTP authentication

Authenticate

To authenticate with SMS OTP, an SMS OTP is sent to the mobile device registered by the user.

To authenticate with an email OTP, follow the steps below.

In the Verification method selection, click Email.
An OTP code will be sent to the registered mobile phone. 2. Enter the OTP within the time set by the administrator (usually 3~5 minutes).
After entering, click the Confirm button, and the authentication will be completed.

Reference

Resend Code: If the input validity period has expired, click the resend code button. 1. Resend the OTP code to the mobile phone.
Would you like to authenticate using a different method?: If the current authentication cannot be used, switch to a different authentication method.
If you have changed your mobile phone, please register.: Click the link to go to the enrollment screen for the new mobile. You can see the detailed information for registration at Register SMS authentication tool.

Information

If the code is entered incorrectly

If the user enters the OTP code incorrectly, they can re-enter it up to the number of times specified by the administrator.

When locked due to exceeding the user input limit

If the OTP code is entered incorrectly more times than the administrator’s allowed limit, the screen will be locked for the duration set by the administrator. You can input after waiting for the specified duration. Refresh and try again after the input timeout.

Knox Messenger OTP authentication

Authenticate

If you want to authenticate with Knox Messaenger OTP, the OTP will be sent to the Knox Messanger you are using.

To authenticate Knox Messenger OTP, follow the steps below.

In Identity verification selection method, click Knox Messenger.
The OTP code is sent via the Knox Messenger you are using. 2. Enter the OTP within the time set by the administrator (usually 3~5 minutes).
After entering, click the Confirm button, and the authentication will be completed.

Reference

Resend Code: If the input validity period has expired, click the resend code button. 1. Resend the OTP code to the mobile phone.
Would you like to authenticate using a different method?: If the current authentication cannot be used, switch to a different authentication method.
Would you like to use a different Knox ID?: Clicking the link will take you to the screen for enrolling a new Knox ID. You can find detailed information about registration at Register Knox Messenger authentication tool.

information

If the code is entered incorrectly

If the user enters the OTP code incorrectly, they can re-enter it up to the number of times specified by the administrator.

When locked due to exceeding the user input limit

Knox Identity Password Authentication

Authenticate

To authenticate with Knox Identity, you must enter your Knox Identity password.

To authenticate with Knox Identity, follow the steps below.

In Verification selection method, click Knox Identity.
Enter the password for your Knox account.
After entering, click the Confirm button, and the authentication will be completed.

Reference

Would you like to authenticate using a different method?: If the current authentication cannot be used, switch to a different authentication method.

information

If the password is entered incorrectly

If the user enters the password incorrectly, they can re-enter it up to the number of attempts specified by the administrator.

When locked due to exceeding the user input limit

If the password is entered incorrectly more times than the administrator’s allowed limit, input on the screen will be restricted for the duration set by the administrator. You can input after waiting for the specified time. Refresh and try again after the input timeout.

SingleID Authenticator authentication

The SingleID service provides a mobile authentication app called SingleID Authenticator and offers authentication in various ways.

Authentication method

Authentication method	Explanation
SingleID Authenticator Bio	Send a push using the installed SingleID Authenticator mobile app on the device to request biometric authentication.
SingleID Authenticator PIN	Send a push using the installed SingleID Authenticator mobile app on the device to request authentication with a PIN code.
SingleID Authenticator TOTP	Send a push notification to the installed ID Authenticator mobile app on the device to request authentication via TOTP.
SingleID Authenticator mOTP	Send a push using the installed SingleID Authenticator mobile app on the device to request authentication with mOTP.

Table. SingleID Authenticator authentication method

Reference

For installation and configuration of SingleID Authenticator, refer to SingleID Authenticator.
Detailed information on how to register the SingleID Authenticator authentication tool can be found at Register Authentication Tool.

Passkey authentication

The SingleID service provides simple authentication and multi-factor authentication using a Windows-based Passkey.

Authentication method

Convenient authentication: Provides easy login without ID/Password by using Sign in with Passkey at the bottom of the login page.
Multi-factor authentication: Offers convenient login without requiring ID/password during secondary authentication.

Authentication Types

Mobile Passkey: Scan the QR code to log in using Android and iOS mobile
Security key: Log in using the Windows security key
PIN: Login using the Windows PIN code

Reference

Passkey supported environment Operating system (laptop or desktop)

Windows 11, macOS Ventura, ChromeOS 109 or later
Mobile phone: iOS 16 or Android 9 and above
Hardware security key: a hardware security key that supports the FIDO2 protocol

Browse version

Chrome 109 or later
Safari 16 or later
Edge 109

Device Settings

Enable Bluetooth
Set screen lock password
Register PIN code
Allow fingerprint or facial recognition

Reference

Passkey requires that Windows Hello be set up in advance. For detailed information, see the reference link.

Administrator authentication

Authenticate

In the SingleID service, the administrator provides authentication by delegating identity verification on behalf of the user.

To perform administrator authentication, follow the steps below.

In the Identity verification selection method, if you cannot perform identity verification at the bottom of the screen, you can request verification from the administrator. 1. Click here. Click it.
Click the Request button.
You will be taken to the admin selection screen. 3. Select the administrator who requested authentication delegation and click the Request button.
Authentication delegation is requested to the selected administrator.
When the administrator approves the authentication delegation, it is completed automatically.

Information

On the administrator selection screen, if the administrator is not assigned or has not registered a SingleID authenticator, a ‘Administrator Not Assigned’ screen appears.

information

If you cannot complete identity verification, you can request verification from the administrator. Click here** if the phrase is missing The administrator has disabled the admin authentication delegation feature by policy. Please contact the administrator.

MFA Portal