> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Manage smart credential authenticators

Smart credentials let users authenticate to Entrust Identity as a Service (IDaaS) and configured applications. IDaaS supports the following smart credential types:

- **Mobile smart credentials.** The credential identity resides in the user's Mobile Smart Credential app on a mobile device.
- **Physical smart credentials.** A hardware device that contains the credential identity, for example, a Yubico YubiKey. To use a physical smart credential, users must install **Entrust Certificate Agent for Windows** on their Windows endpoint.

note

To use a Yubico YubiKey, the device firmware must be `5.4` or later.

In IDaaS, a smart credential can be used in the following ways:

- As a smart card for Smart Login, applications, and network logical access.
- As a strong authenticator for push authentication challenges.

## Prerequisites

Before you assign smart credential authenticators to users, complete the following steps:

1. Configure a certificate authority (CA). See one of the following:
   - [Configure an Entrust managed PKI CA](/docs/authentication-and-security/manage-certificate-authorities/configure-an-entrust-managed-pki-ca.md)
   - [Configure a Microsoft CA](/docs/authentication-and-security/manage-certificate-authorities/configure-a-microsoft-ca.md)
   - [Configure an Entrust PKIaaS CA](/docs/authentication-and-security/manage-certificate-authorities/configure-an-entrust-pkiaas-ca.md)
2. [Configure smart credential definitions](/docs/authentication-and-security/manage-authenticators/manage-smart-credentials/configure-smart-credential-definitions.md).
3. Optional: If users will use smart credentials for Smart Login, see [Manage Smart Login](/docs/authentication-and-security/manage-smart-login.md).
4. Optional: [Modify smart credential authenticator settings](/docs/authentication-and-security/manage-authenticators/manage-smart-credentials/edit-smart-credential-settings.md).

For more information on mobile smart credentials, see the _Entrust Identity Enterprise Smart Credentials Guide_. For information on installing Entrust Security Provider, see the _Entrust Certificate Agent for Windows Administration Guide_.

## Topics in this section

[📄️Settings Before you assign smart credentials to users, review smart credential authenticator settings and update them as needed. You can also change these settings after assignment. Changes apply to all smart credentials assigned in your IDaaS account.](/docs/authentication-and-security/manage-authenticators/manage-smart-credentials/modify-smart-credential-settings.md)

[📄️Definitions A smart credential definition can include two digital ID types:](/docs/authentication-and-security/manage-authenticators/manage-smart-credentials/configure-smart-credential-definitions.md)

[📄️Add a credential Use this procedure to enroll a smart credential for a user in IDaaS.](/docs/authentication-and-security/manage-authenticators/manage-smart-credentials/add-a-smart-credential.md)

[📄️Edit settings After you enroll a smart credential, review its settings to confirm they are configured correctly. Changes to smart credential settings are uploaded to the smart credential application during activation.](/docs/authentication-and-security/manage-authenticators/manage-smart-credentials/edit-smart-credential-settings.md)

[📄️Certificates After you activate a mobile smart credential for a certificate authority (CA), you can manage the certificates issued to that smart credential. For more information about CAs, see Manage Certificate Authorities.](/docs/authentication-and-security/manage-authenticators/manage-smart-credentials/manage-and-revoke-smart-credential-certificates.md)

[📄️Assigned credentials After you add a mobile smart credential to a user, you can manage its lifecycle in IDaaS. This includes enabling, disabling, unassigning, unblocking, updating, and deleting assigned mobile smart credentials.](/docs/authentication-and-security/manage-authenticators/manage-smart-credentials/manage-assigned-smart-credentials.md)

[📄️Clone a definition You can clone an existing smart credential definition in IDaaS.](/docs/authentication-and-security/manage-authenticators/manage-smart-credentials/clone-a-smart-credential-definition.md)