Shared PCs
Shared Workstations with Individual Accounts
For environments where individual accounts are used on shared PCs, no additional configurations are required outside of IDmelon’s standard security key and passkey onboarding processes. To log in to a shared workstation with their own account is to have their existing identifier enrolled in IDmelon with their passkey.
Because IDmelon transforms existing identifiers into security keys, there is no need to onboard every user on every device in their environment. Additionally, there is no limit to the number of users that can use each device.
As a result:
- After onboarding, users can access all devices within the environment with their individual account
- There is no individual onboarding needed for every device
- There is no limit in the number of users allowed to log in to a workstation
Note: For on-prem AD environments using IDmelon’s FCP, users are required to enter their password the first time they use their security key to log in. Afterward, the user does not have to re-enter their password for any other workstation within the same environment.
Shared Workstations with Generic Accounts
When using shared or generic accounts, it is common for multiple users to access different shared accounts from various workstations. This scenario is illustrated in the diagram below.
Traditional shared credentials, such as common passwords, can create significant security and auditability challenges. IDmelon eliminates these issues by:
- Allowing users to use their own credentials to access shared accounts, and
- Creating a log trail that shows the credential used to access the shared account at that point in time
To set up a shared account, please refer to this document.
After setting a up a shared account, please follow this document to ensure that users access the correct shared account in the right workstation.
Note: For on-prem AD environments using IDmelon’s FCP, it is recommended for admins to set the shared account’s password in the IDmelon Panel. This way, users do not have to enter the shared account’s password themselves.