Configuring Device Authentication on Windows with Passwordless Login and Push Notifications

Introduction

This tutorial shows you how to configure your Windows device to authenticate with passwordless login using Oracle Universal Authenticator.

For demonstration purposes push notifications are sent to Oracle Mobile Authenticator (OMA) on Android devices.

Objectives

In this tutorial you will perform the following tasks:

  1. Configure OMA Push Notifications for Oracle Mobile Authenticator in the Self-Service Portal.
  2. Sign in to Microsoft Windows with Passwordless login.

Prerequisites

Before starting this tutorial you must have:

  1. A running Oracle Advanced Authentication (OAA) installation deployed with Oracle Universal Authenticator.
  2. Oracle Advanced Authentication configured to use Push Notification for Android as per the following sections:
  3. Factor Verification turned on in Oracle Advanced Authentication.
  4. A Windows device with the Oracle Universal Authenticator client application installed.
  5. OMA Push Notification set as an authentication factor in the Oracle Universal Authenticator integration agent.
  6. Access to the Self-Service Portal and can login with your user credentials.
  7. Oracle Mobile Authenticator installed on an Android device. This can be downloaded from the Google Play Store.

Task 1: Configure Factors in the Self-Service Portal

In order to use passwordless login, you must have OMA Push Notification configured as the default factor in the Self-Service Portal.

To add OMA Push Notifications as a factor, see Configuring Push Notification Challenge With Oracle Mobile Authenticator in the Oracle Advanced Authentication Self-Service Portal.

To set OMA Push Notification as your default factor:

  1. In the Self-Service Portal navigate to My Authenticators.
  2. In your OMA Push Notification Challenge select the ellipsis, and select Set as Default.

Task 2: Sign In to Windows Using Oracle Universal Authenticator

Note: The instructions below assume you have not logged into this device previously with Oracle Universal Authenticator using your Oracle Access Management credentials.

Day 0 Use Case

  1. Start your Windows device and select Oracle Universal Authenticator to login:

    Description of the illustration oua_logon.jpg

  2. In the username screen, enter your Oracle Access Management username and click the arrow:

    Description of the illustration oam_username.jpg

  3. You are prompted to enter your OAM password and Windows credentials. Enter the required credentials and click the arrow:

    Description of the illustration credentials.jpg

    Note: The Windows Username takes the format of azuread\<username>.

  4. If the credentials are verified successfully, an Approve login on device message will appear as below. A push notification will be sent to Oracle Mobile Authenticator on your mobile device. On the mobile device select Allow.

    Description of the illustration approve_login.jpg

  5. If authentication is successful you will be logged into your Windows device and the Windows desktop will appear.

Day N Use Case

  1. Start your Windows device and select Oracle Universal Authenticator to login:

    Description of the illustration oua_logon.jpg

  2. In the username screen, enter your Oracle Access Management username and click the arrow:

    Description of the illustration oam_username.jpg

  3. An Approve login on device message will appear as below. A push notification will be sent to Oracle Mobile Authenticator on your mobile device. On the mobile device select Allow.

    Description of the illustration approve_login.jpg

  4. If authentication is successful you will be logged into your Windows device and the Windows desktop will appear.

Learn More

Feedback

To provide feedback on this tutorial, please contact idm_user_assistance_ww_grp@oracle.com

Acknowledgements

More Learning Resources

Explore other labs on docs.oracle.com/learn or access more free learning content on the Oracle Learning YouTube channel. Additionally, visit education.oracle.com/learning-explorer to become an Oracle Learning Explorer.

For product documentation, visit Oracle Help Center.