Skip to main content

Introduction

The Chrome Vault application in the Tenant Admin Portal enables secure passwordless access to stored credentials. Admins can configure authentication methods such as Face, Badge ID, NFC/ID, and Oloid Session.

Prerequisites

Steps to Create and Configure Chrome Vault Application

  1. Log in to the Tenant Admin Portal.
  2. On the Applications page, click Create Application on the top right corner. Test Chrome Vault - screenshot 1 The Create New Application pop-up box is displayed.
  3. Do the following:
    1. Enter Application Name.
    2. Select Application Type as Passwordless.
    3. Click Next. Test Chrome Vault - screenshot 2 The Select Passwordless Use Case screen is displayed.
    4. Select Oloid Vault.
    5. Click Next. Test Chrome Vault - screenshot 3 The Select Vault Type pop-up box is displayed.
    6. Select Chrome Vault.
    7. Click Create Test Chrome Vault - screenshot 4 The Chrome Vault application is created, and the configuration page is displayed.
  4. Configure the following tabs:
    1. Details tab
    2. Authenticator tab
    3. Configure tab
    4. Connections tab
Note: These settings need to be configured only once, and it is recommended to keep the default values.
Test Chrome Vault - screenshot 5

Configure Details Tab

The Details tab is used to configure the basic application information, such as the application name, description, and time zone. Do the following:
  1. Update the Application Name (if needed).
  2. Add the Description (Optional).
  3. Select the Time Zone from the drop-down menu.
  4. Click Save. Test Chrome Vault - screenshot 6

Configure Authenticator Tab

This tab is used to enable the login methods you want to support such as Face, Badge ID, NFC/ID and Oloid Session.
Note: You can enable one or more credential options based on your requirements.

Face

The Face authenticator enables users to authenticate using facial recognition for secure passwordless access. Do the following:
  1. Enable Face toggle. Test Chrome Vault - screenshot 7 The Advanced Settings page is displayed.
  2. Configure the Face Match Parameters and Liveness Check Parameters on the Advanced Settings page.
    Note: The parameters are pre-configured. This is done by Oloid admin.
  3. Click Save.

Additional Settings

  • Configure Image Capture Resolution: Select the preferred resolution from the Select Resolution drop-down.
    Note: If the selected resolution is not available, the browser will default to the closest supported resolution.
  • Click Save. Test Chrome Vault - screenshot 8

Badge ID

The Badge ID authenticator allows users to authenticate using a badge for quick and secure access. Do the following:
  1. Enable Badge ID Toggle. Test Chrome Vault - screenshot 9 The Advanced Settings page is displayed.
  2. Select RFID Badge Type from the drop-down.
  3. Click Save. The Badge ID is configured successfully.

NFC/ID

The NFC/ID authenticator allows users to authenticate by tapping an NFC card or ID badge on a supported reader, enabling quick and secure passwordless access.
  1. Enable the NFC/ID toggle. The NFC/ID toggle is enabled successfully. Test Chrome Vault - screenshot 10

Oloid Session

The Oloid Session feature uses the existing Oloid authentication session to securely authenticate users without requiring re-authentication.
Note: Ensure Include user token in session response is enabled in Endpoint Integration Settings under Passwordless Session Token, as the Oloid session token works only for endpoints that include the user token in the session response.
Do the following:
  1. Enable the Oloid Session toggle.
  2. Select the Session Expiry Time with the help of drop-down.
    Note: The maximum expiry time is 60 minutes.
  3. Click Save. Test Chrome Vault - screenshot 11 The Oloid Session is configured successfully.

Setup Configure Tab

Do the following:
  1. Configure Settings tab
  2. Customize Buttons tab

Configure Settings Tab

Vault Behaviour The Vault Behavior section is used to control how Oloid Vault behaves during login, browser interaction, password handling, passkey usage, and session-based actions. Do the following:
  1. Enable Auto-Submit: Enable the toggle toautomatically submits prefilled passwords from Chrome Vault to websites.
  2. Enable Copy Password: Enable the toggle to allow users to copy passwords from the Oloid Vault home page after logging in.
  3. Enable Face Camera to open in a new Tab: Enable the toggle to open the face camera in a new tab for Chrome Vault users.
  4. Enable Saving Passkeys: Enable the toggle to allow users to securely store and use passkeys within the Chrome Vault application for websites that support passkey authentication.
  5. Enable Browser Lock: Enable the toggle to lock the browser when the user signs out of Oloid Vault or triggers Browser Lock manually.
    Note: Select Lock browser when OS (Windows / MacOS / Linux) user locks screen to automatically lock the browser when the system screen is locked.
  6. Clear Browser Redirect URL: Enter the URL that opens in a new tab when a different user unlocks the browser using a Windows transaction.
  7. Clear Browser data: Select the applicable data to clear browser data when a new user unlocks the browser or when Logout All is triggered.
  8. Enforce Login via Vault: Enable the toggle to require authentication to specified URLs using Oloid Vault instead of manually entering credentials. Do the following:
    1. Enable the Enforce Login via Oloid Vault toggle.
    2. In the Add URL field, enter the login URL where Vault-based authentication must be enforced.
  9. Click Save. Test Chrome Vault - screenshot 12 The Vault Behaviour is configured successfully.
Set Time-out durations for Re-authentication This setting is used to define the session and inactivity time-out durations for Chrome Vault to ensure secure user sessions. Do the following:
  1. Session Limit: Set the maximum duration a user can remain signed into the Chrome Vault per session.
    Note: The maximum session limit is 24 hours.
  2. Inactivity Timer: Enable the toggle and set the time duration to protect user sessions from unauthorized access.
    Note: Set the timer to automatically log off the user after a specified period of inactivity.
  3. Click Save. Test Chrome Vault - screenshot 13
Apply Endpoint Template This section isused to apply a predefined endpoint template to configure the endpoint with the required settings. Do the following:
  1. Select the Endpoint Template from the drop-down.
  2. Click Save. Test Chrome Vault - screenshot 14 The endpoint template is added successfully.

Customize Buttons Tab

This section is used to customize the button label of your application’s authentication page by following the on-screen instructions. Do the following:
  1. Enter the Button Label.
  2. Click Save. Test Chrome Vault - screenshot 15 The Customize Button is configured successfully.

Configure Connections Tab

This tab is used to select the connections that provide the set of users allowed to authenticate via chrome vault application. Do the following:
  1. Select + Add Connections. Test Chrome Vault - screenshot 16 The Add Connections pop-up box is displayed.
  2. Select connection from the drop-down list and click Add.
Test Chrome Vault - screenshot 17 The connection is added to the application successfully.