Login and Logout Options - GateKeeper Proximity.

Login Options Available on GateKeeper®.

GateKeeper is built dynamically to fit into many different user scenarios. GateKeeper Proximity has four different login options:

	2FA Login Factor 1: Have your token with you (something you have) Factor 2: Type your PIN (something you know) This login option is two-factor authentication and is the most secure login option recommended. It is the quickness of getting into your car and the security of bank card (debit card PIN).
	Touch to Login Just touch your token to your USB sensor to login automatically. This login option is perfect for logging in quickly into shared workstations with multiple users. Any user can touch their token to login quickly without typing anything.

How to use GateKeeper in 2FA mode?

Please make sure you have your GateKeeper Client desktop software installed on your computer and your token registered (GateKeeper Halberd key fob or GateKeeper Trident phone app) before setting up 2FA. To set up 2FA with GateKeeper:

1. Open your GateKeeper Client application on your PC and click Settings.
2. Under Unlock Method, select the option "GateKeeper with PIN Login" - all set!

You'll need your GateKeeper token with you (factor 1) and type in your token's PIN (factor 2) to log in.

How to set 2FA for GateKeeper from the desktop application.

How to log in by tapping your key to your USB sensor?

GateKeeper proximity authentication can unlock your computer when the user touches their token to their USB proximity sensor. Touch to unlock can be set from the GateKeeper Client desktop application.

1. Open your GateKeeper Client application on your PC and click Settings.
2. Under Unlock Method, select the option "Touch Login" - all set!

Now just tap your GateKeeper token to your USB receiver, and the computer will unlock.

Log in to your computer by touching your key to your USB reader.

What if I don't have my token with me?

If you do not have your token with you, there are multiple alternatives to logging in.

OTP Login with Google Authenticator	Set up a backup OTP login to your computer using Google Authenticator, Microsoft Authenticator, Duo, and more. This is very useful when you don't have your token with you and need to login.
Set up your Phone as your Backup Token	If your admin allows you to have more than one token registered to your profile, download the GateKeeper Android or iOS app (Trident) to use your phone as your token to login, same as your GateKeeper token.
Login with your Original Windows	If your admin allows you to use your Windows password as a backup login, simply type in your original password to login as you normally would without your token.

Lock Options Available on GateKeeper.

GateKeeper Proximity locks in one of three ways:

1) when the user leaves the area of the computer (proximity),

2) when the user clicks the lock button on the side of the token (button lock), or

3) due to lack of keyboard/mouse activity (inactivity).

Admins can control what happens when GateKeeper locks. All computers in the same Group will be subject to the same configurations for lock setting.

	Walk out of Range Simply walk away from the computer with your token. The computer will determine that you are leaving and automatically lock when you're far enough away. For more information on how GateKeeper's proximity engine decides to lock, click here.
	Press the Lock Button On the side of the GateKeeper token is a button that locks the computer instantly when pressed. On the phone, there is also a lock button on the app to lock the computer from your phone.
	Inactivity Timeout This feature helps to ensure that computers lock even if users accidentally leave their tokens at their workstation and leave. The computer will lock after the inactivity timeout period selected by the admin.

Below are the options for what action to take when locking the computer, along with their explanations:

Set on Client computer:	Allows end-users to choose the settings on the Client application on their own computers.
Disable:	Turns off the feature. Not recommended.
Lock Workstation:	Auto-locks the computer. Leaves the current session active and available for any user to login.
Disconnect Session:	Locks the computer and enables switching between local or AD user accounts on Windows 7 and Mac (OS 10.13 and 10.14) computers.
Logout:	Logs the user out from the computer.

Click here to see how to change lock settings.

For any additional questions or concerns regarding security, proximity settings, computer locking, credential management, or compliance, please contact GateKeeper Enterprise support using the Support Ticket form on https://gkaccess.com/support/ or email [e-mail].

--------------------------
GateKeeper unlock and lock options; locking with gatekeeper; logging in with gatekeeper; Passwordless options;