Manage smart credential authenticators

Smart credentials let users authenticate to Entrust Identity as a Service (IDaaS) and configured applications. IDaaS supports the following smart credential types:

• Mobile smart credentials. The credential identity resides in the user's Mobile Smart Credential app on a mobile device.
• Physical smart credentials. A hardware device that contains the credential identity, for example, a Yubico YubiKey. To use a physical smart credential, users must install Entrust Certificate Agent for Windows on their Windows endpoint.

note

To use a Yubico YubiKey, the device firmware must be 5.4 or later.

In IDaaS, a smart credential can be used in the following ways:

• As a smart card for Smart Login, applications, and network logical access.
• As a strong authenticator for push authentication challenges.

Prerequisites

Before you assign smart credential authenticators to users, complete the following steps:

1. Configure a certificate authority (CA). See one of the following:
   • Configure an Entrust managed PKI CA
   • Configure a Microsoft CA
   • Configure an Entrust PKIaaS CA
2. Configure smart credential definitions.
3. Optional: If users will use smart credentials for Smart Login, see Manage Smart Login.
4. Optional: Modify smart credential authenticator settings.

For more information on mobile smart credentials, see the Entrust Identity Enterprise Smart Credentials Guide. For information on installing Entrust Security Provider, see the Entrust Certificate Agent for Windows Administration Guide.

Topics in this section

📄️Modify smart credential authenticator settings

Before you assign smart credentials to users, review smart credential authenticator settings and update them as needed. You can also change these settings after assignment. Changes apply to all smart credentials assigned in your IDaaS account.

📄️Configure smart credential definitions

A smart credential definition can include two digital ID types:

📄️Add a smart credential

Use this procedure to enroll a smart credential for a user in IDaaS.

📄️Edit smart credential settings

After you enroll a smart credential, review its settings to confirm they are configured correctly. Changes to smart credential settings are uploaded to the smart credential application during activation.

📄️Manage and revoke Smart Credential certificates

After you activate a mobile smart credential for a certificate authority (CA), you can manage the certificates issued to that smart credential. For more information about CAs, see Manage Certificate Authorities.

📄️Manage assigned smart credentials

After you add a mobile smart credential to a user, you can manage its lifecycle in IDaaS. This includes enabling, disabling, unassigning, unblocking, updating, and deleting assigned mobile smart credentials.

📄️Clone a smart credential definition

You can clone an existing smart credential definition in IDaaS.