> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oloid-demo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Windows Login - How to create and configure Windows Login application in the Tenant Admin Portal

> This document provides step-by-step instructions to create and configure Windows Login Application in the Tenant Admin Portal.

## Introduction

This section explains how to create a Windows Login passwordless application in the Tenant Admin Portal and configure the required settings to enable secure user authentication on Windows endpoints.

## Prerequisite

You must have Tenant Admin Access.

## Steps to create and configure Windows Login application

1. Log in to the **Tenant Admin Portal**.
2. On the **Applications** page, click **Create Application** in the top right corner.

   ![How to create and configure Windows... - screenshot 1](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-5da475bb.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=b9a8eb812f15afe1d5cb3cb5890affa5)

   The **Create New Application** pop-up box is displayed.
3. Do the following:
   1. Enter **Application Name.**
   2. Select **Application Type** as **Passwordless**.
   3. Click **Next**.

      ![How to create and configure Windows... - screenshot 2](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-8b24929c.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=31f6fae688ae19783f466e3b153f537d)

      The **Select Passwordless Use Case** page is displayed.
   4. Select **Windows Login** > click **Create**.

      ![How to create and configure Windows... - screenshot 3](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-ac5156f7.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=5a744bf5273cab37a53aa7dacc555d60)

      The Passwordlessapplication of type **Windows Login** is created and the configuration page is displayed.
4. Configure the following:
   1. [Details tab](https://oloid.help/en/articles/8693859-how-to-create-and-configure-webkey-application#h_d6f1c16aee)
   2. [Authenticator tab](https://oloid.help/en/articles/8693859-how-to-create-and-configure-webkey-application#h_6e2751be8f)
   3. [Theme tab](https://oloid.help/en/articles/8693859-how-to-create-and-configure-webkey-application#h_77adabc23e)
   4. [Configure tab](https://oloid.help/en/articles/8693859-how-to-create-and-configure-webkey-application#h_ba84a9ee65)
   5. Health Setup tab
   6. [Connections tab](https://oloid.help/en/articles/8693859-how-to-create-and-configure-webkey-application#h_aec78abc12)

> [!NOTE]
>
> **Note:** These are one-time settings and all the default settings are recommended.

## Configure Details Tab

1. Modify **Application Name** (if required).

   > [!NOTE]
   >
   > **Note:** Special characters are not allowed in Application Name.

2. Add **Description**. (Optional)

   > [!NOTE]
   >
   > **Note:** The description should be less than **140** characters.

3. Select your **Timezone** based on your country and region from dropdown list. (Coming Soon)

4. Select **Factor Sequence** from drop down list to activate Multi-Factor Authentication (MFA) for the Application's Endpoints. (Coming Soon)

![How to create and configure Windows... - screenshot 4](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-366b9446.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=34bf978eff2de0a9b175cb3cac946308)

## Configure Authenticator Tab

You may enable username and one or more credential options based on your requirements.

### Enable Username

**Emp ID/Primary ID:** Enable this option to prompt the user to enter their Employee ID or Primary ID before authentication.

* (Optional) In the **Custom Label** field, enter a label that appears on the login screen instead of **Emp ID / Primary ID**.

![How to create and configure Windows... - screenshot 5](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-069f5d39.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=c88675b98c40811ac07fabd051fd4cac)

Email: Enable this option to allow users to enter their email ID before authentication.

* Select the **Remember Username** checkbox to save the user after the first login. Next time, the app skips the ID entry screen and opens the authentication screen directly.

![How to create and configure Windows... - screenshot 6](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-e242efd4.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=be2b630d3aafb6c030b310cd42cd4c87)

## Configure Credentials

### Face

Do the following:

1. To use face as credential, enable **Face** option.
   The **Advanced Settings** page is displayed.
   1. Enable the **Take Re-consent During Transactions** Toggle.
   2. Take Re-consent During transactions: When enabled, shows the re-consent form to users with invalid consent during every face authentication until they re-sign.
2. Configure **Face Match Parameters**, and **Liveliness Check Parameters** on the Advanced Settings page. For more, refer to [How to configure Face credential for Windows Login Application in the Tenant Admin Portal](https://oloid.help/en/articles/11476775-how-to-configure-face-credential-for-windows-login-application-in-the-tenant-admin-portal)

   ![How to create and configure Windows... - screenshot 7](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-6fe6b41b.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=5529bce8e00b6dda5cf28bdd325a4118)

### Badge ID

To use **Badge ID** as credential, enable **Badge ID**.

* To configure **Select Badge Input** refer to: [How to Configure Badge ID for Windows Login Application](https://oloid.help/en/articles/14698260-how-to-configure-badge-id-for-windows-login-application)
* Configure **Badge Auth Source** refer to: [How to configure Badge Auth Source in Windows Login Application](https://oloid.help/en/articles/11274692-how-to-configure-badge-auth-source-in-windows-login-application)

![How to create and configure Windows... - screenshot 8](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-926d6247.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=774693e6513e10be488f163e9ccbbd51)

### QR Code

To use **QR Code** as credential, enable QR Code for multi-factor authentication to sign into Windows Login application. For more, refer to [How to enable QR Code credential for Windows Login application in the Tenant Admin Portal](https://oloid.help/en/articles/11484322-how-to-enable-qr-code-credential-for-windows-login-application-in-the-tenant-admin-portal)

![How to create and configure Windows... - screenshot 9](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-2212c230.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=ba08fcca6868956e30822c13287e0812)

#### NFC/ID

To use **NFC/ID** credential, enable NFC/ID to sign into Windows Login application. For more, refer to [How to enable NFC/ID credential for Windows Login application in the Tenant Admin Portal](https://oloid.help/en/articles/11891768-how-to-enable-nfc-id-credential-for-windows-login-application-in-the-tenant-admin-portal)

![How to create and configure Windows... - screenshot 10](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-be670fe8.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=05d7099d4ef60ae7c4e1669d19e361e8)

## Configure MFA Credentials

### PIN

To use **PIN** as credential, enable PIN for multi-factor authentication to sign into Windows Login application. For more, refer to: [How to enable and configure PIN credential for Windows Login application in the Tenant Admin Portal](https://oloid.help/en/articles/11484425-how-to-enable-and-configure-pin-credential-for-windows-login-application-in-the-tenant-admin-portal)

![How to create and configure Windows... - screenshot 11](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-0ccb23ac.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=0e720a25b2d1deb9b7a8e9e6810bdc04)

### Password

To use **Password** as credential, enable Password for multi-factor authentication to sign into Windows Login application. For more, refer to: [How to configure Password credential in Windows Login Application](https://oloid.help/en/articles/11507597-how-to-configure-password-credential-in-windows-login-application)

![How to create and configure Windows... - screenshot 12](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-58033dba.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=95314b3ca551738c2af8cb2378a12817)

### Duo

To use **Duo** as credential, enable Duo for multi-factor authentication to sign into Windows Login application. For more, refer to: **[How to enable Duo MFA credential for Windows Login Application in the Tenant Admin Portal](https://oloid.help/en/articles/12412511-how-to-enable-duo-mfa-credential-for-windows-login-application-in-the-tenant-admin-portal)**

![How to create and configure Windows... - screenshot 13](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-7bd959bd.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=01d01e6f9b48bd910f584568585f6431)

### PingOne

To use **PingOne** as credential, enable PingOne for multi-factor authentication to sign into Windows Login application. For more, refer to: [How to Enable PingOne Multi Factor Authentication (MFA) for Windows Login Application in the Tenant Admin Portal](https://oloid.help/en/articles/12888354-how-to-enable-pingone-multi-factor-authentication-mfa-for-windows-login-application-in-the-tenant-admin-portal)

![How to create and configure Windows... - screenshot 14](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-0edaf276.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=95b96cff252f2a58c479907f3defa543)

### Okta

To use **Okta** as credential, enable Okta for multi-factor authentication to sign into Windows Login application. For more, refer to: [How to Enable OKTA Multi-Factor Authentication (MFA) Credential for Windows Login Application in the Tenant Admin Portal](https://oloid.help/en/articles/12888385-how-to-enable-okta-multi-factor-authentication-mfa-credential-for-windows-login-application-in-the-tenant-admin-portal)

![How to create and configure Windows... - screenshot 15](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-269cb593.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=a98fb795e3228e2596fe3ca127467647)

## Configure Theme Tab

You can customize theme of your login page of the Windows Login application by following the onscreen instructions. Refer **[How to Edit Theme tab for Windows Login Application in the Tenant Admin Portal](https://oloid.help/en/articles/10756679-how-to-edit-theme-tab-for-windows-login-application-in-the-tenant-admin-portal)**

![How to create and configure Windows... - screenshot 16](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-d6196dbe.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=2743ad81eb1fe52942ac738d4ae5caf6)

## Design Configure Tab

Do the following:

1. [Configure Settings tab](#configure-settings-tab)
2. [Configure rf IDEAS tab](#configure-rf-ideas-tab)
3. [Configure Epic EHR](#configure-epic-ehr)
4. Configure Customize Buttons
5. Configure Auto Updates

### Configure Settings Tab

* **Enable Auto Launch Mode:** Select this option to auto-launch the Windows Login app in the login screen.
  * **Set Time-Out for Login Screen:** Select this option to allow users to configure the maximum time the system will wait on the login screen before timing out.

    ![How to create and configure Windows... - screenshot 17](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-ed63d81f.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=f23abe9d08ddfd0fefe0f2517c31274f)
* **Use Groups for Authorization:** *Coming Soon*
* **Validate Windows Credential:** Select this option to ensure Oloid Agent checks the validity of the user’s Windows credentials before logging in.

  ![How to create and configure Windows... - screenshot 18](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/eb2db23d-d635-4de9-9c1b-5339989e909d-6dff0f86.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=866feb78392abcb0663699703ee3ce56)
* **Enable Passkey:** Turn on **Enable Passkeys** toggle button to allow users to log in using Passkey credential.

  ![How to create and configure Windows... - screenshot 19](https://mintcdn.com/oloid-999c42b2/_2QeNOMqsB3hmeKh/images/intercom/9352266/4ca57c09-bbde-4364-9747-4fb2b48a86a3-6446d918.png?fit=max\&auto=format\&n=_2QeNOMqsB3hmeKh\&q=85\&s=586f822bda740e1157c036cbe4f5c617)
* **Allow Credential Updates and Enrollment:** Select this option to allow users to self-enroll or update their credentials.
  * Enable **Hide Option to Save Windows Credentials** toggle to hide the Save credentials option from the enrollment screen after Windows domain credentials are validated.
  * Select **Auto-save credentials on successful validation when the Save choice is hidden** checkbox to automatically save validated Windows credentials to the user’s Oloid account when the Save credentials option is hidden.
  * Enable **Allow Login Through Local Credentials** to allow users to log in to Windows using their local Windows credentials. For more, refer to [How to Configure Allow Login Through Local Credentials](https://oloid.help/en/articles/13615407-windows-login-how-to-configure-allow-login-through-local-credentials)

    ![How to create and configure Windows... - screenshot 20](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-a09096cc.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=018473bf200f8e5e05608b374b149842)
* **Capture Windows User Events:** Select this option to capture Windows events for user logins, logouts, locks, unlocks, and credential provider details. All captured data is stored in the transaction tab.

  ![How to create and configure Windows... - screenshot 21](https://mintcdn.com/oloid-999c42b2/_2QeNOMqsB3hmeKh/images/intercom/9352266/8727ac67-5f34-4de8-8861-02ebc11aa335-c6a77e11.png?fit=max\&auto=format\&n=_2QeNOMqsB3hmeKh\&q=85\&s=50bac1a98e6b9bf834654a527a8181fb)
* Enable **Auto-recover Endpoint** to automatically validate and sync the endpoint configuration during login module launch.

  ![How to create and configure Windows... - screenshot 22](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-4b1bc976.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=59ac1721ce94822c2817d89a0b7c66fc)
* **Enable Manual Capture Accessibility:** Turn on this option to allow users to manually capture their face during face authentication.

  ![How to create and configure Windows... - screenshot 23](https://mintcdn.com/oloid-999c42b2/_2QeNOMqsB3hmeKh/images/intercom/9352266/999da614-7e89-4423-8022-4e974504770d-b33ddb4b.png?fit=max\&auto=format\&n=_2QeNOMqsB3hmeKh\&q=85\&s=3481bf4b0df788db5cc5eaca94dfcc41)
* **Enable Auto Authentication of Oloid Apps Using Oloid Session toggle.**
  Enabling this toggle will allow user to auto-authenticate the user using the Windows session, into Oloid apps after device login.

  ![How to create and configure Windows... - screenshot 24](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-9421cdf7.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=54a7afe60f697b7e12bf083e3940b048)
* **Enable Badge Out:** Select **Badge out using Windows Service** option to allow users to log out of their Windows system using their badge. For details, refer to [Windows Login - How to configure Enable Badge Out option](https://oloid.help/en/articles/10616183-windows-login-how-to-enable-badge-out-option)

  ![How to create and configure Windows... - screenshot 25](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-6cf36057.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=1349e887e14cd3250339afed24eb0af9)
* **Master Admin override passcode:** Follow the onscreen instruction to create master admin override passcode. For details, refer [How to create device-admin passcode for Supervisor App](https://oloid.help/en/articles/9244629-how-to-create-device-admin-passcode-for-supervisor-app)

  ![How to create and configure Windows... - screenshot 26](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-410f3bf9.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=ff4509407f00d61e88a8504422ceac37)
* **Apply Endpoint Template**: Select a Windows Login endpoint template that is applied during the endpoint pairing process.

  ![How to create and configure Windows... - screenshot 27](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-d0974a45.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=3b31a4afb05976ba1f902ff15adc0d91)
* **Enable Proxy Configuration** to configure proxy settings for secure network communication through a proxy server.
* Do the following:
  * Enter **Proxy URL**.
  * Enter **Port**.
  * Enter **Username**.
  * Enter **Password**.
* Click **Save**.

![How to create and configure Windows... - screenshot 28](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-d316fb6d.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=c3702d6f0b356cf051335540bd3c7e5e)

### Configure rf IDEAS Tab

1. Do the following:
   1. Select **RFID Reader Type** from the **Select RFID reader type** dropdown .
   2. Enter **Description**. (Optional)
   3. Click to browse the file or drag the file to upload/download.
   4. Click **Save**.
      The application is updated successfully. For more details, refer [How to upload/download HWG file in Oloid Portal](https://oloid.help/en/articles/9215874-how-to-upload-download-hwg-file-in-oloid-portal)

      ![How to create and configure Windows... - screenshot 29](https://mintcdn.com/oloid-999c42b2/_2QeNOMqsB3hmeKh/images/intercom/9352266/d1badd34-3b27-432b-877e-0c31491fd6b4-b5308797.png?fit=max\&auto=format\&n=_2QeNOMqsB3hmeKh\&q=85\&s=dc38347244b24efcd77a0e7962e5a8c3)

### Configure Epic EHR

**Epic EHR for Windows Login** in the Tenant Admin Portal which enables secure authentication into Epic applications using Windows Login. For more information please refer to: [How to Configure Epic EHR in the Tenant Admin Portal](https://oloid.help/en/articles/13714282-how-to-configure-epic-ehr-in-the-tenant-admin-portal)

![How to create and configure Windows... - screenshot 30](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-e597e4f1.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=9d2d6c6c8cdff324ac56ec40aae4251f)

### Customize Buttons Tab

* **Customize Authentication Button Labels**: Enter customized **Button Label** to display on the Windows application.
* Select **Enable Badge Options** to display on the Windows Login app.
  * Do one of the following:
    * Select **Enroll Badge Only** to enable Badge login
    * Select **Enroll Badge + Pin** to enable Badge and Pin login.

      ![How to create and configure Windows... - screenshot 31](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-eb04807e.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=d3ec9eca9d4000d4f7f37a4ffcfcd2cb)

### Configure Auto Update Tab

Auto update features keep all Windows Device Agents up to date without manual effort. It allows the tenant admin to install the latest version or select a specific version. They can also schedule updates to run at a set time, with options to retry if an update fails.

For more, refer to [How to configure Auto Update feature in Windows Login Application in Tenant Admin Portal](https://oloid.help/en/articles/11114161-how-to-configure-auto-update-feature-in-windows-login-application-in-tenant-admin-portal)

![How to create and configure Windows... - screenshot 32](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-74452ad4.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=868f04785478613b0229ce223de5263d)

## Configure Health Setup

Do the following:

1. Enter **Server Name**
2. Enter URL in the **Add URL that needs to be monitored** field and click **Add**
   The Health Setup tab is configured.

   ![How to create and configure Windows... - screenshot 33](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-117e8fd2.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=efee426eeca674d2ddbd9a66c30f90a3)

## Configure Connections

Do the following:

1. Select **+ Add Connections** to map a connection to the application.

   ![How to create and configure Windows... - screenshot 34](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-279076cd.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=09f02f2133c00543e81f0ec9e073c452)
2. On the **Add Connections** pop-up box, select connection name(s) from the **Select Connection** dropdown list and click **Add**.

![How to create and configure Windows... - screenshot 35](https://mintcdn.com/oloid-999c42b2/BM8MHlxgdsqNhOTx/images/intercom/9352266/image-8d154977.png?fit=max\&auto=format\&n=BM8MHlxgdsqNhOTx\&q=85\&s=5db5a8fea5f65be07de18722172f1b5d)

> [!NOTE]
>
> **Note:** Click **Save** after each action to save your configuration.

The **Windows Login** application is configured and listed on the Application page.

***

##### Video Tutorial

Watch the videos to create and configure Windows Login App:

1. [How to create Windows Login application - Video Tutorial](https://oloid.help/en/articles/9643270-how-to-create-windows-login-application-video-tutorial)
2. [How to configure Windows Login application - Video Tutorial](https://oloid.help/en/articles/9645213-how-to-configure-windows-login-application-video-tutorial)

***

##### Keywords