Passwordless “Leasing” scheme #

Version 0.5 added a passwordless authentication using a leasing scheme.

Leaseholders (AKA Lessor) #

Users can be designated to be leaseholders. A leaseholder can “lease” an authenticated session (aka logged in user) to another user on request.

Lessee #

Users can be designated to be a lessee. A lessee cannot log in directly. They need to request a lease from a leaseholder.

How to Grant a lease to a lessee Method 1 #

If a Lessor has possesion of the device it is quite easy to lease the device to a Lessee.

1. Leaseholder logs onto a device with their normal login.
2. Select Settings (gear icon) -> Lease to bring up the “Lease This Client” page.
3. Enter in the lessee identifier. Either the user name for the user in the system or if they have entered an email address you can use their email address.
4. Click “Lease this client”.

Now the LESSEE will be logged into that device.

How to Grant a lease to a lessee Method 2 #

Sometimes the LESSEE is not logged into a device and they need to log in. In this case they can request a login from a LESSOR.

1. LESSEE: At the login page enter the user identifier of the LESSEE, click next.
2. LESSEE: On the next page there will be a box that requires the name of the “Lessor” (the person that can grant a lease, the leaseholder). In that box the LESSEE will enter in the manager’s identfier & click “Request Lease”.
3. LESSEE: Then you will be on the “Lease Requested” page. Follow the instructions on the page: “Contact the person that approves your lease. They will provide you with a PIN for completing the lease.”
4. LESSOR: Once contacted by the LESSEE the LESSOR can then go to Settings (gear icon) -> Lease.
5. LESSOR: On the “Lease This Client” page you will see the list of Active Leases. There will be an item on the list that is a REQUEST along with the user name and the machine identifier. To grant the lease click “Grant Lease”
6. LESSOR: The Active Leases item state will change to PENDING and will show a 4 digit number. Share the 4 digit number (PIN) with the Lessee
7. LESSEE: The Lessee will see the “Lease PIN” page and they enter the PIN that was shared by the LESSOR. Click “Verify PIN”.
8. LESSEE: The Lessee will not be logged into the application.
9. LESSOR: The Lessor will now see the granted lease in the Active Leases list. Note that there is a date shown, this is the date the lease expires.

Revoking a lease #

1. LESSEE:go to Settings (gear icon) -> Lease
2. LESSEE:see the list of active Leases. Click “Cancel Lease” for the lease that you want to revoke.

Note: a lease is per user/per device. To revoke all of a single user’s leases you must revoke all leases in the list.

Renewing a lease #

1. LESSEE:go to Settings (gear icon) -> Lease
2. LESSEE:see the list of active Leases. Click “Renew Lease” for the lease that you want to renew.
3. LESSEE: note that the expiration date of the lease has been extended 90 days from the date the button was pressed.

Note: a lease is per user/per device. To renew all of a user’s leases you must renew all leases in the list for that user.