You can add, manage and assign security keys to users from Users section. You can add a single user or import users from a CSV file, Azure AD, SCIM and LDAP.
Add single user
Click on New User to open the wizard below and Enter the user’s information.
In next step, choose groups that you want the user be a part of.
In third step, turn the toggle on to have 3 options to assign a security key, inclucing Smartphone, Contactless Card and FIDO2 Hardware Security Key. Follow the specific instruction in related sections.
Choose Smartphone from the dropdown as Security Key Device and set the Smartphone as FIDO security key options.
By confirming the user's information in the next page, an email containing an activation link will be sent to the user and also its status will be Pending, waiting for him to activate his security key.
Choose Contactless Card in the dropdown as a Security Key Device and set a name for it. From Choose how to activate dropdown, you can either choose Activate now as an admin if you have the card physically near you or Activate by user to send a registration link for user to activate the card himself.
In case of Active now, simply click the Assign Contactless Card button and tap the card on the reader when you see Touch your security key window.
Note :In both cases, make sure you have installed the reader driver on your PC or end-user’s PC. You can download it from here.
If the card is assigned successfully, click Next and Confirm to complete the assignment. The user will receive an email containing a PIN for his card as a security key device.
FIDO2 Hardware Security Keys
If you already have a security key and you want to use it as a FIDO2 hardware security key, select the third option in the security key device dropdown. The target user will receive a registration link to set his hardware, as a FIDO2 hardware security key. From now on, the security key can be used for passwordless logins based on FIDO standard wherever it is available.
Import from a CSV File
Click Import users -> Import from a CSV File to open the wizard below. Then click Select File to upload a CSV File.
Next, select the group that you want these users to be added to. Then click next to confirm the information.
Import from Azure AD
Click Import users -> Import from Azure AD and grant the permission if requested to open the wizard below. Then click inside the dropdown to select groups in Azure AD and finally confirm your information in next page.
For complete information about User Provisioning refer to this link.