Deployment Guide

Functionality During the Grace Period
During a specified Grace Period, after every log on, the Additional Credentials notification displays when the user has not yet enrolled
the minimum credentials required to satisfy a changed Sign-in Option. The message content is: Additional credentials are available for
enrollment.
If additional credentials are available, but are not required, the message displays only once after the policy has been changed.
Clicking the notification has the following results, depending on the context:
• If no credentials have been enrolled, the Setup wizard displays, allowing Administrative Users to configure computer-related
settings and offering users the ability to enroll the most common credentials.
• After initial credential enrollment, clicking the notification displays the Setup wizard within the DDP Security Console.
Functionality After Grace Period Expires
In all cases, after the Grace Period has expired, users cannot log on without having enrolled the credentials required by the Sign-in
Option. If a user attempts to log on with a credential or credential combination that does not satisfy the Sign-in Option, the Setup
wizard displays on top of the Windows Logon screen.
• If the user successfully enrolls the required credentials, they are logged into Windows.
• If a user does not successfully enroll the required credentials, or cancels the wizard, they are returned to the Windows Logon
screen.
6. To save the settings for the selected role, click Apply.
Configure Password Manager Authentication
On the Password Manager page, you can configure how users authenticate to Password Manager.
To configure Password Manager authentication:
1. In the left pane, under Authentication, select Password Manager.
2. To choose the role you want to set up, select the role in the Apply sign-in options to list: Users or Administrators. All of the
changes that you make on this page will apply only to the role that you select.
3. Optionally, select the Do not require authentication check box to allow the selected user role to be automatically logged on to all
software applications and Internet websites with credentials stored in Password Manager.
Configuration Tasks for Administrators
25