MFA Guides

This String corresponds to the Bluetooth device software driver name (bluesoleil), the period in milliseconds between signal checks (500), and the number of checks over which the signal is averaged (10: default). The numeric values can be adjusted as needed to ensure optimal performance.

This setting corresponds to the choice dropdown menu position, such as Prompt with keypress being in first position (value = 0).

This setting corresponds to the number of seconds users have to authenticate once the workstation detects the Bluetooth device.

This String is not present until the RapidIdentity Windows Client Server URL is set either in the installer or within the application. The value should be entered exactly as defined in the example: http://[servername]/2fa.com/oneService/syncservice.asmx. If multiple server URLs are desired for business continuity purposes, each server URL should be entered with a semi-colon separating them. It is best practice to use a single server URL and use the DNS entry of that server name to refer to a load balancer or other distributed server technology rather than multiple URLs.

This setting allows extra time for RapidIdentity Windows Client to synchronize with RapidIdentity Server over slow network connections. The timeout value is in Milliseconds. If not configured, the default value is 20,000 (20 seconds).

This setting is designed to suppress the blue RapidIdentity Windows Client splash screen that informs the user that an operation is in progress. The value should be entered True to suppress the splash screen and False to enable the splash screen. In the absence of the registry string and value, the splash screen will be enabled.

This setting is to limit the amount of data stored locally and reduce the amount of synchronization that occurs between an enrollment Workstation and Server. This setting is useful to organizations that choose to have users enroll at a central badging or enrollment station.

Following enrollment, the user would effectively not require access to the system except when replacing their badge. This setting also prevents the syncing of data down to the local system when enrolling through RapidIdentity Server.

The value should be entered True to turn the standard installation into an Enrollment Station and False to revert back to a standard system.

For installations that are not enrollment stations, it is expected that synchronization process time will increase as more and more users are added to the local workstation.

The purpose of this setting is to log RapidIdentity Windows Client activities with the intent to perform advanced troubleshooting. This string will only be created following a request from the Identity Automation Support Team, however, the log file output can also be useful for administrators with advanced knowledge of RapidIdentity Windows Client.

To turn on application logging, add the registry string manually and use these.

Once the registry entry is created, a log file named log.txt appears in the logs folder: C:\Program Files\2FA\ONE\Client\logs.

If logging is not stopped, the log file will continue to grow until it reaches 10 MB in size, at which time a second log.txt file will be automatically created.

The purpose of this setting is to prevent the RapidIdentity Windows Client UI from being executed locally and is similar to the feature provided during the installation of RapidIdentity Windows Client called Hide Executable.

The differences between SuppressAppUI and Hide Executable are that SupressAppUI does not remove the RapidIdentity Windows Client icon from the desktop nor does it affect any RapidIdentity Windows Client entries in the Programs Menu.

Once suppressed, users will not be able to enroll or perform any function within the local RapidIdentity Windows Client application, but will have access to the GINA and Credential Providers within RapidIdentity Windows Client.

The Taskbar Icon will also be available to users. All lifecycle events previously performed in RapidIdentity Windows Client will either need to be performed within the GINA/Credential Provider or through RapidIdentity Server.

The value should be entered True to suppress the UI and False to enable the UI.

This setting is to enable the use of RFIDeas pcProx and pcProx Plus series 82 card readers to be used by RapidIdentity Windows Client.

The value of this string should be set to “True” to enable support. On 64-bit operating systems, if 32-bit Internet Explorer is to be used for access to the RapidIdentity Windows Client User or Administrator’s portal to issue or manage cards using an RFIDeas pcProx reader, a second registry setting is required.

The same String Value, EnableRFIDeas="True" must be present in the HKLM | Software | Wow6432Node | foray registry.

This String value is not required for 64-bit Internet Explorer, or for supporting RFIDeas outside of the RapidIdentity Windows Client web portals.

This setting configures the amount of time, in seconds, between initial detection of a Secured Application and subsequent detection of the same instance of the application.

This feature allows for slow application authentication times where Secured Applications would otherwise detect the same authentication screen multiple times during a single authentication process. Provide an interval value as required. The default setting is 10 seconds.