--- title: What users see for FIDO2 slug: access-guide/what-users-see-for-fido2 docTags: createdAt: 2026-10-09T06:41:07.088Z --- FIDO2 is a feature available with the UEM client. The UEM clients are: Go or Mobile\@Work, and Authenticate. If FIDO2 solution is configured, users can authenticate and access enterprise cloud services from third party managed devices with Authenticate installed. When a user tries to log in, a push notification is sent to all active devices. When the user allows push notification on any appropriate device, access is granted for the session. However, on all other devices, the sessions become invalid and deactivating on this device does not deactivate on other devices. The following provide information about the user experience with FIDO2: - [Workflow for registered browsers](docId:1XnaW7faS2H3ZgBZbprte) - [Workflow for non-registered browsers](docId:1XnaW7faS2H3ZgBZbprte) - [Workflow on Android devices](docId:1XnaW7faS2H3ZgBZbprte) - [Workflow on iOS devices](docId:1XnaW7faS2H3ZgBZbprte) - [Workflow for Desktop login](docId:1XnaW7faS2H3ZgBZbprte) ## Workflow for registered browsers A browser that launches after a successful Authenticate registration, is a registered browser. For a registered browser, when user tries to open the service provider, Ivanti Access automatically invokes Authenticate and authenticates the user using FIDO2. If step up authentication is configured, user is prompted to either present biometrics or approve a push notification sent to registered mobile device. The following provides an example of the authentication workflow with a registered browser: Click to expand and view the images :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/XN2Bvzu-PQhQcIqbvI91e_regbrowsersalesforce.png" alt caption size="66" width="663" height="518"}>>:inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/gN7HxX6a2pqTNtwriXGlR_regbrowserfingerprint.png" alt caption size="29" width="288" height="215"}>>:inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/o0kvWv8Mdwzp3oodxxHSr_regbrowserpushnotification.png" alt caption size="34" width="338" height="239"}>>:inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/ZSmDxDjtfbKbtKcx7tcs__regbrowsersalesforceloggedin.png" alt caption size="79" width="788" height="453"} ## Workflow for non-registered browsers Non-registered browser are browsers that are not default browsers and other browsers that are not registered with Authenticate. The non-registered browsers must authenticate using either Authenticate, QR Code, or with Passwords. The following provides an example to login using Authenticate: Click to expand and view the images :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/XN2Bvzu-PQhQcIqbvI91e_regbrowsersalesforce.png" alt caption size="66" width="663" height="518"}>>:inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/NKgSLaCnK2ulODi7Y3RKP_nonregbrowseroptions.png" alt caption size="34" width="340" height="240"}>>:inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/gN7HxX6a2pqTNtwriXGlR_regbrowserfingerprint.png" alt caption size="29" width="288" height="215"}>>:inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/ZSmDxDjtfbKbtKcx7tcs__regbrowsersalesforceloggedin.png" alt caption size="79" width="788" height="453"} The following provides an example to login using QR Code: Click to expand and view the images :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/XN2Bvzu-PQhQcIqbvI91e_regbrowsersalesforce.png" alt caption size="66" width="663" height="518"}>>:inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/NKgSLaCnK2ulODi7Y3RKP_nonregbrowseroptions.png" alt caption size="34" width="340" height="240"}>>:inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/SAVewgfgt9km--lcvLiLi_nonregqrcode.png" alt caption size="39" width="392" height="407"}>>:inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/mLC7WT7zPPVSh1lXhLtG-_nonregqrpushnotification.png" alt caption size="38" width="377" height="131"}>>:inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/ZSmDxDjtfbKbtKcx7tcs__regbrowsersalesforceloggedin.png" alt caption size="79" width="788" height="453"} The following provides an example to login using username and password credentials: Click to expand and view the images :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/XN2Bvzu-PQhQcIqbvI91e_regbrowsersalesforce.png" alt caption size="66" width="663" height="518"}>>:inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/NKgSLaCnK2ulODi7Y3RKP_nonregbrowseroptions.png" alt caption size="34" width="340" height="240"}>>:inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/NKgSLaCnK2ulODi7Y3RKP_nonregbrowseroptions.png" alt caption size="34" width="340" height="240"}>>:inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/BqLjv--ZEeY3GtkjQos5R_regbrowsercredentials.png" alt caption size="23" width="227" height="228"} ## Workflow on Android devices This section provides information for the various end user interactions on Android devices. - [Unlocking a desktop on Android devices](docId:1XnaW7faS2H3ZgBZbprte) - [Activating a password-less sign-in on Android device](docId:1XnaW7faS2H3ZgBZbprte) - [Deactivating a password-less sign-in on Android device](docId:1XnaW7faS2H3ZgBZbprte) - [Ending a browser session](docId:1XnaW7faS2H3ZgBZbprte) ### Unlocking a desktop on Android devices To unlock a FIDO2 windows or mac desktop, you must authenticate from your device. ### Unlocking a Windows desktop The following provides an example to authenticate on a device using Go, when a user tries to unlock his FIDO2 enabled Windows desktop: | | | | | | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/nBQH8Vx8RF0i81MAdkYuT_windowsunlock4.png" alt caption size="90" width="279" height="486"} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/TszUs_cwFcsS9kDZ3PNXy_windowsunlock3.png" alt caption size="90" width="274" height="486"} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/US3QNh5UlrJ7SSrcoQfcP_windowsunlock2.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/EYPgq8Td-a9BUOo-CLltc_windowsunlock1.png" alt caption size="50" width="265" height="471"} | | | | | | ### Unlocking a Mac desktop The following provides an example to authenticate on a device using Go, when a user tries to unlock his FIDO2 enabled Mac desktop: | | | | | | --------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/up6tp3sIm6aNiNYy6_0UP_macunlock1.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/O4ZhLe8ia9viIuI5pfj5l_macunlock2.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/19Pk-NHME14ybT-GLkesr_macunlock3.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/nWDTTxSofmZ4vJn61JOSL_macunlock4.png" alt caption size="50" width="227" height="447"} | | | | | | ### Activating a password-less sign-in on Android device To activate a FIDO2 Android device, (If it is not already done during enrollment) go to Go > Menu > Settings > Authenticate and turn on the toggle button. Follow authentication as shown below: | | | | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/LyGKX-huIh98wK6F6ItNH_activateandroid2.png" alt caption size="80" width="229" height="448"} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/wyiOA2DVlHlRHbMrnpNfm_activateandroid1.png" alt caption size="90" width="279" height="545"} | ### Deactivating a password-less sign-in on Android device To deactivate an Android FIDO2 device, turn off the toggle button in Go > Menu > Settings > Authenticate. | | | | | ----------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/xgtIuyev8Y5eKF70WWghi_endbrowserandroid1.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/wyiOA2DVlHlRHbMrnpNfm_activateandroid1.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/LyGKX-huIh98wK6F6ItNH_activateandroid2.png" alt caption size="30" width="229" height="448"} | ### Ending a browser session You can end a browser session from Go > Menu > Settings > Authenticate > End Browser Session. Ending a browser session automatically signs you out of the company websites on the browsers. :::hint{type="info"} This option is available only if the user has active browser sessions running. ::: | | | | | ----------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------- | | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/xgtIuyev8Y5eKF70WWghi_endbrowserandroid1.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/cAnfhpHlAsbxVSRmjemUU_endbrowserandroid2.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/m4ySPktZaMQi56xtfbVyc_endbrowserandroid3.png" alt caption} | ## Workflow on iOS devices This section provides information for the various end user interactions on iOS devices. - [Unlocking a desktop on iOS devices](docId:1XnaW7faS2H3ZgBZbprte) - [Activating password-less sign-in on iOS device](docId:1XnaW7faS2H3ZgBZbprte) - [Deactivating password-less sign-in on iOS device](docId:1XnaW7faS2H3ZgBZbprte) - [Ending a browser session on an iOS device](docId:1XnaW7faS2H3ZgBZbprte) ### Unlocking a desktop on iOS devices To unlock a desktop on an unlocked mobile , go to Go > Menu> Settings > Authenticate. | | | | | | ------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------ | | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/yr6yzSW6QVi_EcpQttuyA_desktopunlockiosunlocked1.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/78UM5siLZsG_4rwHhhxZ__desktopunlockiosunlocked2mac.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/vJfNVnVK5DzphuIK2LUuB_desktopunlockiosunlocked3.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/YbEaSrh7QjACN8K2rHUn9_desktopunlockiosunlocked4.png" alt caption} | To unlock a desktop on a locked mobile, go to Go > Menu > Settings > Authenticate. | | | | | | ------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- | | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/tThDBDaXjKMC7HfmrlJ9f_desktopunlocklocked1.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/suykJFMo6TlVdId3yzQlA_desktopunlocklocked2.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/4sa2gCBFnFHLoq9irAo8K_desktopunlocklocked3.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/XSo_7hL_tte2YFJtJmSFZ_desktopunlocklocked4.png" alt caption} | ### Activating password-less sign-in on iOS device To activate a FIDO2 iOS device, go to Go > Menu> Settings > Authenticate and turn on the toggle button. Follow authentication as shown below: | | | | | ----------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------- | | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/uh4p4mWzwsLyPlVRYcA3y_activateios1.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/qZClPtcZAeppNswGugQ4A_activateios2.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/xEAeIKlKzReR4AWJ6G4bl_activateios3.png" alt caption} | ### Deactivating password-less sign-in on iOS device To deactivate an iOS FIDO2 device, turn off the toggle button in Go > Menu > Settings > Authenticate. | | | | | ----------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------- | | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/uh4p4mWzwsLyPlVRYcA3y_activateios1.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/qZClPtcZAeppNswGugQ4A_activateios2.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/xEAeIKlKzReR4AWJ6G4bl_activateios3.png" alt caption} | ### Ending a browser session on an iOS device You can end a browser session from Go > Menu > Settings > Authenticate > End Browser Session. Ending a browser session automatically signs you out of the company websites on the browsers. | | | | | | ------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/3HPRTMjQxVw65TmNiNeIj_endbrowserios1.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/BuqAdFRuq3_lJUqM_-xyH_endbrowserios2.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/pbXPyl2xbae9NuOhSl3s3_endbrowserios3.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/uj-Hly0SHwdjA_HFolQsn_endbrowserios4.png" alt caption} | | | | | | ## Workflow for Desktop login You must login to a desktop and approve the push notification on your mobile device. | | | | | | ------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------ | | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/xDmul3q1E1F9BPflsdUVJ_desktoplogin1.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/Qn1i2QWJw3DM-brqahQuN_desktoplogin2.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/WjQpNOlAmzg2ynnSNszHq_desktoplogin3.png" alt caption} | :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/iCUprw1ulNPjUpONnRke3_desktoplogin4.png" alt caption} |