Skip to main content
Version: Next Gen

Authenticator Set-up

Last updated on

To enable authentication with Beyond Identity, your employees must install the platform authenticator on their laptops or mobile devices. Depending on your specific requirements, the installation can be done in several ways:

Install for Secure Workforce​

Streamline Setup via Email​

To simplify the installation process, consider sending your employees an email that provides direct access to the download page and detailed instructions for setting up a passkey for authentication. Visit Manage Passkeys for more guidance on this.

Beyond Identity Email

Manual Download Options​

Select the appropriate download link for your device's operating system to get started:

Operating SystemDownload Link
macOS, Windows, LinuxBeyond Identity for Desktop
iOSBeyond Identity for iOS
AndroidBeyond Identity for Android

Install for Device360​

This guide walks you through the process of downloading and installing the Beyond Identity Authenticator and enrolling devices so you can start monitoring device posture.

Supported operating systems​

This release supports the following operating systems. This list will be updated as additional platforms are added.

Operating SystemVersions
macOS12, 13, 14 (Sonoma)
Windows10 (build 18363 and later), 11

Supported Beyond Identity authenticator​

Device360 is available starting in version 2.94 or later. It is highly recommended that you update to the latest version of the Beyond Identity authenticator to ensure that you can access new features.

Install the authenticator and enroll devices​

To begin collecting data and running queries on a device, you must first install the Beyond Identity authenticator on a device and enroll it. Select from the following installation options:

New customer installation and enrollment​

If you are new to Beyond Identity, you will need to download and install the authenticator on devices, and then provide users with an enrollment code that will enable Device360 to collect data.

  1. Select Inventory > Device Inventory in the left nav bar.

  2. Click Add Device.

    Add Device button

  3. Enter a device name and click Next.

    Add Device dialog add name

  4. Click the link to open the authenticator downloads page.

    Add Device dialog copy code

  5. Copy the Enrollment code. The enrollment code will expire after 10 minutes.

  6. Open the authenticator and click the + button.

    Beyond Identity Authenticator app

  7. Paste or type the enrollment code in the "Enter 9-digit code" screen to enroll the device. Note that a cursor doesn't appear on the screen.

    Beyond Identity Authenticator app

    Once the device is enrolled by entering the 9-digit code, it will be added to the Device table.

    You can now monitor and query the device.

Secure Workforce customer enrollment​

If you are a Secure Workforce customer, Device360 uses the same authenticator that allows you to securely sign into corporate applications without passwords. You will just need to generate a Device360 enrollment code and add it to your existing version of the authenticator (minimum version of 2.92).

note
  • This will not impact your Secure Workforce passkey in the authenticator.
  • Beyond Identity's Windows Desktop Login is not compatible with Device360.

  1. Select Inventory > Device Inventory in the left nav bar.

  2. Click Add Device.

    Add Device button

  3. Copy the Enrollment code. The enrollment code will expire after 10 minutes.

  4. Open the authenticator and click the + button.

    Beyond Identity Authenticator app

  5. Paste or type the enrollment code in the "Enter 9-digit code" screen to enroll the device. Note that a cursor doesn't appear on the screen.

    Beyond Identity Authenticator app

    Once the device is enrolled by entering the 9-digit code, it will be added to the Device table.

    You can now monitor and query the device.

Generate a new enrollment code​

The enrollment code expires after 10 minutes so you may need to generate a new enrollment code for a device.

  1. Select the checkbox by the Device Name.

  2. Click the Edit icon under the Actions column to open the Edit device dialog. Edit Device dialog

  3. Click Generate new enrollment code.

  4. Send the code to the user to enroll their device.

Troubleshooting installation​

Unable to see data for iOS, Android, or Linux operating systems​

Currently, Device360 is supported on Windows and macOS only.

Deleted enrollment code or passkey​

If the enrollment code or passkey is deleted, you will need to rebind the device.