> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Manage assigned smart credentials

After you add a mobile smart credential to a user, you can manage its lifecycle in IDaaS. This includes enabling, disabling, unassigning, unblocking, updating, and deleting assigned mobile smart credentials.

## Enable or disable a mobile smart credential

You can enable or disable an **Active** mobile smart credential.

1. Click Menu icon **>** **Members > Users**. The **Users List** page appears.
2. Click the user ID. The **User Details** page appears.
3. Click the **Authenticators** tab. The **Authenticators** page appears.
4. Click Ellipsis Vertical icon for the mobile smart credential that you want to enable or disable. A drop-down list appears.
5. Click Square icon **Disable** or Play icon **Enable**, as required.
6. Click **Confirm** on the confirmation prompt.

## Unassign a mobile smart credential

When a mobile smart credential is activated in IDaaS, it is associated with an identity in the user's Mobile Smart Credential application. Unassigning the credential breaks that association so the credential can be activated again on a different device.

1. Click Menu icon **>** **Members > Users**. The **Users List** page appears.
2. Click the user ID. The **User Details** page appears.
3. Click the **Authenticators** tab. The **Authenticators** page appears.
4. Click Ellipsis Vertical icon for the mobile smart credential that you want to unassign. A drop-down list appears.
5. Click User Round X icon **Unassign**. A pop-up window appears.
6. Click **Unassign**. The mobile smart credential is now in the **Enrolled** state.
   > A new user can now activate the unassigned mobile smart credential using the link or a QR code.

## Unblock a mobile smart credential

A smart credential becomes blocked when an incorrect PIN is entered too many times in response to a mobile smart credential authentication challenge. The **Unblock** feature allows you to unlock a mobile smart credential.

1. Click Menu icon **>** **Members > Users**. The **Users List** page appears.
2. Click the user ID. The **User Details** page appears.
3. Click the **Authenticators** tab. The **Authenticators** page appears.
4. Click Ellipsis Vertical icon to the right of the **Smart Credential - PIV** that you want to unblock. A drop-down list appears.
5. Click Lock Keyhole icon **Unblock**. An **Unblock Smart Credential** pop-up window appears.

note

Users can activate a mobile smart credential authenticator from the User Portal.

## Update a mobile smart credential

If certificate authorities (CAs) or smart credential definitions have changed or expired, use **Update** to refresh the mobile smart credential. The credential must be in the **Active** state. **Update** is available only when the CA or smart credential definition has changed. The user must have an email address.

1. Click Menu icon **>** **Members > Users**. The **Users List** page appears.
2. Click the user ID. The **User Details** page appears.
3. Click the **Authenticators** tab. The **Authenticators** page appears.
4. Click Ellipsis Vertical icon for the mobile smart credential you want to update. A drop-down list appears.
5. Click Refresh CW icon **Update**. An **Activate** dialog box appears.
6. Click **Activate**.

## Delete a mobile smart credential

You can delete a mobile smart credential assigned to a user.

1. Click Menu icon **>** **Members > Users**. The **Users List** page appears.
2. Click the user ID. The **User Details** page appears.
3. Click the **Authenticators** tab. The **Authenticators** page appears.
4. Click Ellipsis Vertical icon to the right of the **Smart Credential - PIV** that you want to delete. A drop-down list appears.
5. Click Trash icon **Delete**. A confirmation prompt appears.
6. Click **Delete**.

## Validate your changes

After you perform one of these actions, confirm the expected result.

1. Enable or disable: Verify the credential state updates correctly.
2. Unassign: Verify the credential returns to **Enrolled** and can be activated again.
3. Unblock: Verify the user can complete authentication again.
4. Update: Verify the credential update is sent successfully and completed by the user.
5. Delete: Verify the credential no longer appears in the user's authenticator list.