"No-password" sign in refers to the fact that, when an administrator has configured the system a certain way, you don't have to type in a password to get to your IdentityNow Launchpad. This is also known as Integrated Windows Authentication (IWA) or Kerberos.
- Following these instructions does not guarantee that you will have "no-password" sign in. Your administrator has to enable it for your company first. If you are not sure if this option is available to you, contact your IT department for assistance.
- Even when you have this configured correctly, some apps you use might force you to sign in to IdentityNow to use high-risk pages or features. For more information, see Surf 237 Why am I being asked to sign back in to IdentityNow?
The information that follows describes the trust settings you need to define for the following browsers:
* Your administrator has the ability to configure the settings for these browsers remotely for your entire organization using group policies. If they have done this, you will not need to make any changes to the browser installed on your computer.
The following browser does not require any special trust settings:
- Safari on Mac
NOTE: Chrome on Mac does not support "no-password" sign in.
To set up your Firefox browser so you don't have to enter a password to sign in, you must complete these instructions for the Firefox browser.
It is likely that your administrator has already configured these settings remotely. However, if you're having problems, you can follow these instructions to verify that your browser is set up correctly.
NOTES to Administrators only:
- SailPoint recommends using group policies to configure these settings. Click here for instructions.
- Read this section carefully. If this violates your company's security policies, click Alternative configurations for IWA trust settings on Internet Explorer for other options.
1. Go to Internet Options > Security.
NOTE: The instructions for getting to this panel depend on the version of IE you are using. See the help in IE for assistance.
2. Click Trusted Sites.
|3. Click Sites.|
4. In Add this website to the zone, type the domain name for the IdentityNow server:
NOTE: Check with your IT administrator to confirm the correct value. If your site uses a custom URL or this URL does not seem to be working, contact your IT department for assistance.
5. Click Add.
The site displays as shown in the example on the right.
6. Click Close.
|7. Click Custom Level.|
8. Scroll to the bottom of the list of settings to User Authentication
9. Select Automatic logon with current user name and password.
10. Click OK.
11. Click OK again to close Internet Options.
Chrome honors the trust settings configured in Internet Explorer. Therefore, to use "no-password" sign in on Chrome, follow the instructions here to set up Internet Explorer.