> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oloid-demo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Webkey – How to Create and Configure a Webkey Application in Tenant Admin Portal

> This document is a step by step guide on how to create and configure the WebKey application and its associated settings in the Tenant Admin Portal.

## Introduction

Tenant Admin can create and configure a WebKey application from the Tenant Admin Portal to define authentication methods, customize the login experience, and control security and session behavior.

## Prerequisite

* You must have access to the Tenant Admin portal.

## Steps to create and configure WebKey application

1. Log in to the **Tenant Admin Portal**. For more details refer [How to log in to the Tenant Admin Portal](https://oloid.help/en/articles/8462765-how-to-log-in-to-the-tenant-admin-portal).
2. On the **Applications** page, click **Create Application** in the top right corner.

   ![Webkey – How to Create and Configure a... - screenshot 1](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-dbc8dde9.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=9f9b3e6f7e494b05793a9f5853c4fe79)

   The **Create New Application** pop-up box is displayed.
3. Do the following:
   1. Enter **Application Name** and select **Application Type** as **Passwordless**.

      ![Webkey – How to Create and Configure a... - screenshot 2](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-35c83a19.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=e7d8dac17e44f6ea72d651f0ab2798e7)
   2. Click **Next**.
      The **Select Passwordless Use Case** page is displayed.
   3. Select **WebKey** > click **Create**.

      ![Webkey – How to Create and Configure a... - screenshot 3](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-9a9fda75.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=d340798fa35a77728c36a9f4663085c3)

      The Application is created successfully.

      ![Webkey – How to Create and Configure a... - screenshot 4](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-4fcf142a.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=a984613650f831ce9a2ad7f392d38755)
4. Do the following:
   1. [Configure Details tab](#configure-details-tab)
   2. [Configure Authenticator tab](#configure-authenticator-tab)
   3. [Configure Theme tab](#configure-theme-tab)
   4. DesignConfigure tab
   5. [Configure Connections tab](#configure-connections-tab)

> [!NOTE]
>
> **Note:** These are one-time settings and all the default settings are recommended.

### Configure Details Tab

1. Edit **Application Name** if required.
2. Add **Description**. (Optional)
3. View **Linked Identity Profile** to to identify the configured Identity Provider Profile.
4. Select **Time Zone** from the dropdown list. (Optional)
5. Copy **Login URL Path** to sign in to WebKey app.

![Webkey – How to Create and Configure a... - screenshot 5](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-d7313ef2.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=50f8eb25b11072ad560db77413f05549)

### Configure Authenticator Tab

You may enable one or more credential options based on your requirements.

![Webkey – How to Create and Configure a... - screenshot 6](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-544b5110.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=0cf66d0d892f17214a2f10bc41af203e)

#### Enable Username

##### Emp ID/ Primary ID

Enable Employee ID/Primary ID as Username: Enabling this option will prompt the user to enter their Employee ID or Primary ID before authentication.

> [!NOTE]
>
> **Note:** A custom label can be added which will be shown instead of Emp ID/Primary ID on the login screen.

![Webkey – How to Create and Configure a... - screenshot 7](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-72f9b6c8.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=1e86de7a768c16b964341315e1c65e7a)

##### Email

Enabling this option will prompt the user to enter their Email ID before authentication.

> [!NOTE]
>
> **Note:** Login through Email ID will not be available for Apps.

![Webkey – How to Create and Configure a... - screenshot 8](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-67de7d9d.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=a8a22e7c87747ca091ad9a1a4a31636c)

#### Credentials

##### Face

To use face as credential, enable **Face** option.

![Webkey – How to Create and Configure a... - screenshot 9](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-5e234ee6.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=13791c5e9b778e79279c6bacf1797970)

The **Advanced Settings** section is displayed.

1. Enable **Take Re-consent During Transactions** to show the re-consent form to users with invalid consent during every face authentication until they re-sign.
2. Select **Face Capture Mode** from the dropdown.
   1. The **Precision Capture (Default)** mode provides balanced performance across most environments. It delivers an optimal combination of speed, image quality, and reliable auto-capture.
      (or)
   2. The **Precision Capture X** mode offers enhanced performance and adaptability. It provides faster processing, improved image quality, and advanced auto-capture powered by machine learning.
3. Configure **Face Match Parameters**, and **Liveliness Check Parameters** on the Advanced Settings page.

> [!NOTE]
>
> **Note:** The parameters are pre-configured. This is done by Oloid admin.

Configure the following:

* [Face Match Parameters](#face-match-parameters)
* Liveliness Check Paraments

##### Face Match Parameters

> [!NOTE]
>
> **Note:** You must consult your Oloid representative before making any changes to the **Face Match Parameters** to ensure optimal authentication performance.

1. Turn on **Strict Error Handing** toggle to skip the error and perform a direct one-to-one face match.
2. Turn on **Enable Virtual Camera** to allow third-party virtual camera app to be used for face capture. If a user attempts to spoof the system using a third-party app, this feature helps detect and flag potential spoofing attempts.
3. Turn on **Additional Face Match** toggle to perform a one-to-one face match alongside the standard face matching process.
4. Adjust the **Face Match Threshold** slider or enter a value directly into the input box to set the face match threshold value.

![Webkey – How to Create and Configure a... - screenshot 10](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-1f3b0b1b.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=7932f957c5113b67ed6d1f72dbe8638e)

##### Liveness Check Parameters

> [!NOTE]
>
> **Note:** You must consult your Oloid representative before making any changes to the **Liveness check parameters** value to ensure optimal authentication performance.

1. **Min Liveness Probability**: Specifies the threshold used to determine whether an image is live or spoofed.
   1. Default value: 0.5
   2. Images with a liveness probability of **0.5 or higher** are classified as live.
2. **Min Liveness Quality**: Specifies the minimum quality required for an image to be suitable for a liveness check.
   1. Default: 0.1
   2. Images with a quality score of **0.1 or higher** are considered suitable for liveness verification.

![Webkey – How to Create and Configure a... - screenshot 11](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/de4c4faf-cbd9-475f-a84d-92435494c0ec-de636f66.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=ce0d6857869984e70ea496f47b4a9273)

##### Additional Settings

1. **Enable Manual Capture Accessibility** toggle to allow users manually capture their face during the face recognition process.
   1. Select **Disable Auto-capture** to disable automatic face capture. When enabled, users must manually capture their face using:
      1. **Enter** or **Space bar** on desktops and laptops.
      2. **Tap anywhere** on the screen for mobile and tablet devices.

         ![Webkey – How to Create and Configure a... - screenshot 12](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/cbfdcc0c-f8a9-41d6-bc33-05608deb21cb-83468eca.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=9b1c4837fbf37f7ea77de987908f54ee)
2. **Enable Timed Auto-Capture** to allow the system to automatically capture the user's face if it is not captured within a set time.

* Set the **Time-out Duration** in seconds.
* After the timer ends, the system captures the face automatically, even without user action.

  ![Webkey – How to Create and Configure a... - screenshot 13](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/e6ec0a7e-7a2e-4ab2-8495-3e300d813fb9-ec6003d6.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=fabdd61a7d05188226b5a41546b2b02e)

**Configure Image Capture Resolution.**

* **Select Capture Resolution** from the **Select Resolution** dropdown list.
* **Low: 640×480:** Lower quality image.
* **Medium: 1280×720:** Balanced quality.
* **High: 1920×1080:** High-quality image, Best clarity.

![Webkey – How to Create and Configure a... - screenshot 14](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/6c601886-1feb-45a2-ae6f-2e52c62348c1-f3ca8371.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=4196b1fb49f1823289ba56d12cf413b3)

Enable **Adjust Video Preview Container Spacing From Top** toggle to move the face capture preview upward for better alignment with the camera.

* Click **Save**.

![Webkey – How to Create and Configure a... - screenshot 15](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/df2e78b4-85fc-49af-89b2-08877c93f027-f4bc5f44.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=c4daa599dc0c9d8f69c50fef44d57fe9)

##### Badge ID

To use **Badge ID** as credential, enable **Badge ID**. Select a **Badge Type** from the dropdown list.

![Webkey – How to Create and Configure a... - screenshot 16](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-6d45df99.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=d815767cf361403261b202274c800955)

> [!NOTE]
>
> **Note:** Enable Badge ID, then enable PIN for multi-factor authentication (if applicable).

##### QR Code

1. To use QR Code as credential, enable **QR Code** option to sign in to WebKey application.
   By default, the front camera opens for QR code scanning.

2. Enable **Show Camera Flip button** to allow users to switch between the front and rear cameras.
   This option displays a camera flip button on the preview screen during QR code scanning.

3. Under **Default camera selection**, select a camera option:
   * **Front Camera** (default)
   * **Rear Camera**

     > [!NOTE]
     >
     > **Note:** This feature is available only for iOS devices and Android devices.

4. Click **Save**.

![Webkey – How to Create and Configure a... - screenshot 17](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-df39492c.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=04f50b886671a618a78b3c5bc1ebbafb)

##### NFC/ID

To use NFC/IDcredential, enable **NFC/ID** to sign in to WebKey application from your desktop/laptop.

The **NFC/ID option** section is displayed.

Do the following:

1. Enable **Use Web-NFC** to allow NFC Login from the Mobile Phone and Tablet browser that supports NFC (such as Google Chrome on Android)
2. Enable **Replace the Credential Label - NFC Tag** to replace the default **"NFC"** or **"NFC Tag"** label with a custom name.
3. Enter the new label in the **Replace label with** field. Example: Replace **NFC Tag** with **RFID**.
4. Provide **NFC Scan Instruction** to guide users on scanning their NFC badge for login.
5. **Authentication Success Message**: Enter a message to display when authentication is successful.
6. **Authentication Failure Message**: Enter a message to display when authentication fails.

   ![Webkey – How to Create and Configure a... - screenshot 18](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-ca50b620.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=24e9f69597832dd89a0b7d85d49d4448)

   > [!NOTE]
   >
   > **Note:** Enable NFC/ID, and then enable PIN for multi-factor authentication (if applicable).

#### MFA Credentials: PIN

To use PIN credentials, enable **PIN** as a multi-factor authentication method for signing into the WebKey application.

![Webkey – How to Create and Configure a... - screenshot 19](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-5bed9d0c.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=c97302b725d61e5ccdb2eb7147293157)

### Configure Theme Tab

You can customize theme of your login page of the WebKey application by following the onscreen instructions.

![Webkey – How to Create and Configure a... - screenshot 20](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/b6827278-4ee2-47dc-917b-2184ab7c3867-02693297.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=8c75ac9163d4bfb032efe5ce85fec970)

### Design Configure Tab

You can set up the configure tab by configuring browser settings and customizing button labels.

#### Configure Settings Tab

![Webkey – How to Create and Configure a... - screenshot 21](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-ef88c283.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=ee5128c81509fcad733db9eb33fa441b)

**Do the following:**

1. Enable **Inactivity Session Time Out** toggle button to automatically return to the previous screen if credential capture fails within the set time-out duration.
2. Enable **Auto-Authentication using Local transactions** toggle button will allow user to auto-authenticate into Webkey after device login.
3. Enable **Continue Without Local Transaction** toggle button will allow user to authenticate manually without giving an error if local authentication transaction is not found.

#### Client Authentication

1. **Enable Custom User Agent** to allow users to log in to WebKey app from custom browsers.
2. Select **Enable Browser Fingerprint** to allow WebKey login to function only on registered browsers.
   Do one of the following:
   1. Select **+ Browser Fingerprint** to manually add browser fingerprint.
   2. Select **Transactions** > **Action** dropdown > **Add Browser Fingerprint to Application**. For more information, see [How to configure Browser Fingerprint for WebKey](https://oloid.help/en/articles/9545445-how-to-configure-browser-fingerprint-for-webkey)
   3. Click **Save**.
   4. Select **Add Device** to register devices for Webkey Login. Refer: [How to configure Custom User Agent in WebKey Application](https://oloid.help/en/articles/11659241-how-to-configure-custom-user-agent-in-webkey-application)

#### Configure Customize Buttons Tab

![Webkey – How to Create and Configure a... - screenshot 22](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-1a45c54f.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=53c37dee7cfed5fbc85b916f1c4cfdf1)

Do the following:

1. Enter customized **Button Label** to display on the Web Key application.
2. Select **Enable Face Enrollment** option to add a customized button label and enrollment URL to the login page of the WebKey application.
3. Select **Enable Custom Button** option to add a customized button label and redirect URL to the login page of WebKey application.

   > [!NOTE]
   >
   > **Note:** Click **Save** after each action to save your configuration

##### Enable Custom Button in Authentication Flow

This option allows you to add a custom button to the authentication screen and define its behaviour based on user interaction.

![Webkey – How to Create and Configure a... - screenshot 23](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-de892109.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=688c0e15fc19d78a388c3f92e73f91c8)

To configure Custom Button in Authentication Flow do the following:

1. Turn on the **Enable Custom Button in Authentication Flow** toggle.
2. **Button Label**
   Enter the text to be displayed on the custom button in the authentication page.
   *Example: Back*
3. **Redirect URL**
   Enter the URL where the user will be redirected when the custom button is clicked.
4. **Show button only on authentication failure page**
   Select this checkbox to display the custom button **only when authentication fails**.
   If not selected, the button will be visible on the main authentication screen.
5. Click **Save**.
   The Custom button is enabled for authentication flow.

### Configure Connections Tab

Do the following:

1. Select **+ Add Connections** to map a connection to the application.

   ![Webkey – How to Create and Configure a... - screenshot 24](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-00d2a882.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=c85190be59e443c4d843016f4c9c872d)
2. On the **Add Connections** pop-up box, select connection name(s) from the **Select Connection** dropdown list and click **Add**.

   ![Webkey – How to Create and Configure a... - screenshot 25](https://mintcdn.com/oloid-999c42b2/gvDYTYWtoG8hE509/images/intercom/8693859/image-c3fef77f.png?fit=max\&auto=format\&n=gvDYTYWtoG8hE509\&q=85\&s=1d082a02c8180a9f916b55639c86c181)

> [!NOTE]
>
> **Note:** Click **Save** after each action to save your configuration.

The **WebKey** application is configured and listed on the Application page.