As an administrator, you can push a MobileID install link to users, and then users can click the link to install both the MobileID app and their MobileID token. (Installing MobileID by link is supported on Windows, Android and iOS, but not on MacOS).

Installing MobileID by link requires the DualShield Deployment Service (DDS) to be accessible from the public network. 

To set up the Deployment Service portal, complete the following steps

Logon Procedure defines how users will be authenticated when they attempt to login to the portal. You can define a logon procedure of 1-step, 2-step and 3-step verification, for instance.

In the Admin Console, select "Logon Procedures"

There is a pre-defined logon procedure named "Deployment Service". 

To change its logon steps, click its context menu, select "Logon Steps"

You can define the logon steps according to your own requirements

In the Admin Console, select "Applications"

There is a pre-defined application named "Deployment Service"

Normally, you do not have to make changes to the default setup.

Realm is a group of user domains. It defines who is allowed to access the application that's associated with the realm.

In the Admin Console, select "Realm"

There is a pre-define realm named "Deployment Service"

You must change the domains that are to be included in this realm, e.g. deepnetid.com


If you also plan to enable OOBA by push authentication, then the DualShield SSO is also required. SSO provides the function of OOBA registration and verification.  


  • No labels