Introduction

As an alternative to requiring that the end user supply their usernames and passwords, HelloID can be configured to automatically populate login credentials. The value populated by HelloID can be one provided by the HelloID Administrator, or a value constructed from user attributes.

Note that most SAML applications rely on claim values sent through their mapping sets, and not a set of credentials. If you are configuring such an application, no Credentials tab will be present.

The configuration steps are the same whether you're updating an existing application or creating a new application.

Credential Settings

On the Credential configuration screen, select Credentials are configured by admin.

User Name and Password are now available to be configured. Each one provides a number of options, detailed below.

User Name

Under User Name, choose from the following options:

• User enters user name
  The user is prompted to enter the username appropriate to the application.
• User Name is the same as user's username
  The user's HelloID username (IDP/AD) is sent to the application.
• User's first name
  The user's given name is sent to the application.
• User's last name
  The user's surname is sent to the application.
• User's contact email
  The HelloID contact email address is sent to the application.
• User's AD UPN
  If Active Directory is your IDP, the user's UserPrincipalName value is sent to the application.
• Company's name
  The company name is sent to the application. Learn more about configuring this value here.
• Select credential of another application
  This option allows you to choose any saved value from a different application to be used as the username within this application.
  
• Enter custom value
  This option presents a new field where custom data can be entered.
  • If desired, a static, plain text value may be entered here.
  • Alternatively, any configured mapped values may be selected using the following syntax {{...}}. Double curly braces surround the value and code completion will auto-populate the object variables as shown below. When a user accesses the application, their corresponding attribute value is submitted.
    

Password

Under Password, choose from the following options:

• User enters password
  The user is prompted to enter the password appropriate to the application.
• Password is the same as user's password
  The user's HelloID password (IDP/AD) is sent to the application.
• User's username
  The user's HelloID username is sent to the application.
• User's first name
  The user's given name is sent to the application.
• User's last name
  The user's surname is sent to the application.
• User's contact email
  The HelloID contact email address is sent to the application.
• User's AD UPN
  If Active Directory is your IDP, the user's UserPrincipalName value is sent to the application.
• Company's name
  The company name is sent to the application. Learn more about configuring this value here.
• Select credential of another application
  This option allows you to choose any saved value from a different application to be used as the username within this application.
• Enter custom value
  This option presents a new field where custom data can be entered.
  • If desired, a static, plain text value can be entered here.
  • Note: Object variable selection is not available for passwords.

Impact of Changes

Once the desired default credentials have been selected or entered and the changes to the application have been saved, they will be immediately available to new users and users who have not previously used the application. Any user who has already opened the application and saved their credentials will retain their saved information.

In order to clear the saved credentials for those users who have already used the application and saved their username and password, either their individual accounts will need to be edited or the application itself will need to be deleted and recreated with the admin-specified credentials option selected.

Updating Enrolled Users

To remove saved credentials from a specific user for a specific application, first navigate to Directory > Users in the HelloID Administrator Dashboard. On the users overview page, find or search for the user whose credentials you wish to clear. Then, click their corresponding Edit link.

Next, select the Credential Sets tab.

Finally, search for or scroll to the application and click on Remove credentials. Click Save when you are finished to confirm your changes.