Dashboard
Source Loading…
Computer Logon Token Management
Manage software and hardware authentication tokens.
Managed By
Client (Application) ID for SafeID Token Service
Loading…
Computer Logon Settings and Policies
Manage configuration, customization, license and MFA policies for Computer Logon.
Managed By
User Access
Grant or revoke Computer Logon roles for other users and groups.
Portal Settings
Customize the portal URL and messenger email.
User Access
Grant or revoke Computer Logon roles for other users and groups.
Groups
Users
Assign a role
Step 1 of 2 — choose who to grant access to
Choose a role
Step 2 of 2 — pick their level of access
Edit access
Current roles
Group members
Remove access?
Portal Settings
Customize the portal URL and messenger email.
Messenger email
The mailbox token setup emails are sent from.
QR-code and secure-link token emails are unavailable until a messenger mailbox is set.
Loading…
Custom domain
Customize the portal URL with your own subdomain, e.g. portal.yourcompany.com.
- Step 1Enter the subdomain, your domain and its top-level domain below, then click "Show DNS Records".
- Step 2Add both records (CNAME and TXT) at your DNS provider.
- Step 3Click "Configure Custom Domain". A free certificate is then issued — usually a few minutes.
- Step 4Add your own certificate for the domain when asked. Azure Government doesn't issue free certificates.
Computer Logon Settings and Policies
Manage configuration, customization, license and MFA policies for Computer Logon.
Settings
⚠️System Policies
⚠️Custom Policies
|
Policy Name
|
Type |
Scope |
Status |
Last Modified
|
Details |
|---|
Log
Computer Logon Token Management
Manage software and hardware authentication tokens.
|
Serial NumberToken
|
Model |
Assigned To
|
Assignment Status |
Active Status |
Created
|
Expires
|
Actions |
|---|
Token Settings
Edit Expiration
Once the expiration date passes, this token stops being served to devices.
Leave blank for a token that never expires.
Assign Token
This token is currently unassigned.
Add Token
Generates a new soft (virtual) OATH token.
Required — soft tokens always belong to someone.
Optional — leave blank for a token that never expires.
Delete Token?
This permanently removes its seed from Key Vault. This cannot be undone.
Email Setup Code
Sends the authenticator setup QR code directly to the recipient's email.
Resync Token
Corrects the token's stored time drift (TOTP) or counter (HOTP) using two consecutive codes from the device.
First code verified. Wait for your token to show a new code, then enter it below.
Import / Bulk Assign with CSV (New)
Load a CSV of hardware tokens — every row's outcome (import, assign, reassign, unassign, or error) is classified automatically against what's already in inventory.
Load CSV to begin
| SerialToken | Model | Assign To | Status |
|---|
Load CSV
Choose a file, or paste CSV text.
Apply to which rows?
You set a filter in the preview, do you wish to use the filtered selection or the full list of tokens?
Confirm changes
This will apply the changes below to the real token inventory.
Set expiration dates
Optionally give each newly-imported token an expiration date. Once it passes, the token stops being served to devices.
| Serial Number | Model | Expiration Date |
|---|
Choose User
Group Filter
Show only users who belong to a specific group.
Computer Logon App Registration
Public client application registration for Computer Logon Client
Create Computer Logon App Registration
Public client application registration for Computer Logon Client
This name will appear in your Azure AD app registrations list.
Registration created
Progress log
Delete App Registration?
This removes it (and its service principal) from Entra ID. This cannot be undone from here.
Registration no longer exists
This registration no longer exists in Entra ID.
Edit App Registration
Changes are saved directly to the existing registration in Entra ID.