Guide for Hideez Enterprise Server on Cloud

Step 0. Sign in to your Admin account using your email and password.

Make sure to use the credentials of your Administrator account:

Step 1. Enable multi-factor authentication for your Administrator account

We advocate for the adoption of additional security measures and are actively transitioning away from the reliance on login credentials for authentication. To enhance the security of your Administrator account, consider implementing the following authentication methods:

Go to Profile and set up an additional authentication method for the Admin's account:

• OTP Authenticator (Login+Password+One Time Password)

• FIDO2 Authenticators (platform/cross-platform authentication by physical security keys, Passkey)

• Hideez Authenticator (Android/IOS mobile app)

Step 2. User Enrollment

1. Manual Enrollment

Send email invitations to employees, allowing them to self-enroll. You will need to enable Single Sign-On (SSO) for each employee and decide whether you want them to sign in without having to enter usernames and passwords at all, or simply add passwordless MFA to the traditional password-based authentication.

2. Importing employees from Active Directory

You can import up to users from your Active Directory, saving time and effort. Additionally, you can choose to change the domain password.

Step 3. Configuring SAML and OIDC

Hideez Server allows you to enable passwordless Single Sign-On (SSO) based on the SAML and OpenID Connect (OIDC) protocols. These protocols are utilized to verify a user’s identity when an employee tries to access web or mobile applications. 


To configure Hideez Server as an Identity Provider for passwordless SSO, go to Settings → Parameters → SAML / OIDC, and proceed with SAML or OIDC configuration:

• Configuring your server as an Identity Provider

• Configuring OpenID Connect

Step 4: Enable Passwordless Single Sign-On on the server using Passkeys or the Hideez Authenticator App.

After employees have received the invitation letter, they are prompted to finish self-enrollment by choosing one of the available passwordless authentication methods:

Method 1. FIDO2 Authenticator: Cross-platform or platform authenticators (Passkeys).

They may include:

• Biometric authentication using Android devices;

• Touch ID / Face ID using iOS devices;

• Windows Hello;

• External security keys (like Hideez Key or YubiKey).

To create a Passkey on a smartphone or tablet, your employees will be prompted to scan the QR code on their PC:

Method 2. Hideez Authenticator app

You can find our mobile app on Google Play and the App Store.

Hideez Authenticator enables passwordless Single Sign-On (SSO) through the use of one-time QR codes. This is particularly valuable for users with smartphones lacking biometric capabilities. The app serves as a substitute for biometric login methods while ensuring a secure passwordless experience.

To activate Hideez Authenticator as an SSO method, an employee will have to follow the onscreen steps in the application:

After creating the user profile, employees can enhance security by adding more authentication methods. They can enroll additional devices (smartphones/tablets/laptops) as FIDO2 authenticators or register the Hideez Authenticator app.

Step 5. Desktop login for Windows PCs.

You can utilize the Hideez Authenticator mobile app to unlock your PCs running on Windows 10/11. To do this, ensure the following three conditions are met:

1. Install the Hideez Client on your workstation.

2. Authorize your workstation on your Hideez Server.

3. Enroll in Hideez Authenticator by scanning the QR code on your workstation.

1. Hideez Client Installation

• Download .exe or .msi (x86, x64) installation file

• Open and proceed with all steps, then click Install:

• Configure your Hideez Client in Wizard:

2. Authorize your workstation on your Hideez Server.

• Go to the section Workstation on your server, select Workstation, and click Approve:

• Restart your PC or click Reconnect on Hideez Authenticator:

The indicator of connection of your server will have a green color:

3. Enroll Hideez Authenticator by scanning the QR code on your workstation.

There are two methods for unlocking your PC using the Authenticator. Depending on the method, you'll need to use your Hideez Authenticator mobile app with the Hideez Client desktop program.

• Passwordless PC Authorization

• Password-based PC Authorization

Enrollment for Passwordless PC Authorization

1. Open Hideez Client→Mobile Authenticator→ Passwordless Authorization-> Setup

2. Open Hideez Authenticator and select the QR scanner.

3. Scan the QR code on the computer by smartphone.

4. Confirm action on Hideez Authenticator and wait until the account is created. The account will appear in the section Accounts→ Workstation.

Enrollment for Password-based PC Authorization

1. Open Hideez Client→Mobile Authenticator→ Password-bassed Authorization→ Setup

2. Open Hideez Authenticator and select the QR scanner.

3. Scan the QR code on the computer using a smartphone.

4. Confirm action on Hideez Authenticator

5. Choose Account type and put User name, Domain, Password, and click Safe.The account will appear in the section Accounts→ Workstation.

Unlock Workstation by Hideez Authenticator

1. Open Hideez Authenticator.

2. Scan the QR code on the log screen.

3. Select an account on the Hideez Authenticator app.