OneLogin Protect for Android is a mobile authenticator app that provides a one-time-password (OTP) as an additional authentication factor. Since you likely always have your phone nearby, it makes for an easy and convenient way to authenticate your account. OneLogin Protect is also available for iOS.

Prerequisites:

• A mobile device running Android 5.0 (Lollipop) or above

Installing OneLogin Protect

The OneLogin Protect mobile app can be installed directly from the Google Play Store on your Android device. It may require the following permissions:

• Disable Your Lock Screen - To scan your registration QR code (we use the Google QR library, and this is required through Google).
• Full Network Access - The registration process uses our APIs, and this is also needed to perform multi-factor authentication (MFA).
• View Network Connections/View WiFi Connections - To check if there is network access. We verify this before making API calls.
• Play Install Referrer API - Added by default for Google, tracks where the app was installed from for debugging purposes.

Adding an Authentication Factor

Your administrator may require biometric authentication for OneLogin Protect. If your device prompts you to enable biometric authentication during setup, tap Yes and follow the on-screen prompts.

Using Your Android Device

1. Log in to your OneLogin portal from the browser on your Android device.

2. If your admin has required multi-factor authentication (MFA) and you have not already configured at least one additional authentication factor, you may see a prompt requesting that you add one now. If so, tap Continue and follow the prompts on your screen.

   1. Otherwise, go to your Profile and choose Security Factors from the menu.
      
       

      
       

3. Tap Add Factor and select OneLogin Protect from the list of enabled authentication factors, then tap Activate.
   
    

   If OneLogin Protect does not appear in the list, contact your admin to ensure it has been enabled.

4. Tap Activate to launch the OneLogin Protect app. If prompted, confirm that you want to open the link with Protect either Just Once or Always.
   
    

5. Your OneLogin portal now appears in the home screen of OneLogin Protect and can be used for future authentication.

Using Your Computer or Another Device

1. Log in to your OneLogin portal from a web browser and go to your Profile. In the Security Factors menu, click Add Factor.

    

   

    

2. Select OneLogin Protect from the list of enabled authentication factors.

    

   

    

   If OneLogin Protect does not appear in the list, contact your admin to ensure it has been enabled.

3. In the OneLogin Protect app, tap the + in the lower right corner to add an account.

    

   

    

4. If OneLogin Protect requests permission to use your camera, tap Allow. The camera activates, ready to scan a QR code.

    

   

    

5. Click Activate in your web browser. Verify that iPhone & Android is selected in the dropdown menu and scan the QR code with your mobile device.
   
    

   If you're unable to scan the QR code, consult the Troubleshooting steps below to check your camera settings or use an alternate code method.

6. When the code is accepted, the mobile app displays a green check and refreshes, displaying your account ready to authenticate.
    

Authenticating with OneLogin Protect

1. The next time your OneLogin account requires authentication, the login screen advises that your Android device is ready for your approval.

    

   

    

2. OneLogin sends a notification to the device. Tap the notification, then select Accept. Unlock your device to allow one OneLogin to automatically send the OTP and log you in to your portal.

   
   If you don't receive the push notification, attempt the Troubleshooting steps below to check your notification settings or use an alternate OTP method.

Removing OneLogin Protect

Deleting an account from the device will not disable the account. You may still receive push notifications if the device remains registered and is the default factor. Follow these steps to fully remove OneLogin Protect from your authentication factors.

1. Return to Security Factors in your OneLogin Portal. Open the menu to the right of OneLogin Protect and click Remove.

    

   

    

2. If your admin has required MFA, you may be prompted to choose or create a new primary factor. Follow the prompts on your screen, then click Remove to confirm you want to remove OneLogin Protect.

Troubleshooting

I can't scan the QR code to add OneLogin.

1. Ensure that OneLogin Protect has access to your camera.

   1. In your device settings, go to App info for OneLogin Protect and tap Permissions.

       

      

       

   2. Verify that Camera appears under Protect's ALLOWED Access.

       

      

       

   3. If it doesn't, tap Camera and then change its toggle to Allow.

2. If you're still unable to scan the code, you can enter it manually.
   1. On your mobile device, tap Enter code instead.

       

      

       

   2. On your other device, click Can't scan the code? and verify that iPhone & Android is selected in the dropdown menu.

       

      

       

   3. Enter the displayed Activation Code into the mobile app and resume configuration.

      
       

I'm not receiving push notifications to authenticate my account.

When your device is first added as a factor, the push notification connection may take a few hours to complete. If you're still not receiving push notifications after this time, verify that notifications are turned on and that OneLogin Protect has permission to send them.

1. Ensure that notifications are turned on in OneLogin Protect.

   1. Open the OneLogin Protect menu and go to Settings.

       

      

       

   2. Verify that Allow Push Notifications is toggled on.

       

      

       

2. Ensure that OneLogin Protect has permission to send notifications.

   1. In your device settings, go to App info for OneLogin Protect and tap Notifications.

       

      

       

   2. Verify that all notifications are toggled on.

      

3. If you're still not receiving push notifications, contact your administrator about possible network issues preventing communication between your account and OneLogin Protect app. In the meantime, you can manually grant access by opening OneLogin protect and tapping Tap to unlock to view and enter your OTP. The OTP changes every 30 seconds and is indicated by the timer wheel to the right.