...
Configure the offline Token Download Endpoint
Include Page
Configure the DualShield MFA Server
...
Depending on the types of OTP tokens used by your users, edit the token policy, e.g. SafeID/Time-Based, and enable the option "Enable Offline Logon"
SSO Service Provider for EAM
This step is only required if the MFA server used for the Entra-joined PC is Entra rather than DualShield, i.e. Architecture D1 & E1. Otherwise, skip this step.
...
| title | Architecture.... |
|---|
...
Token Download Application ID
You have already set up an enterprise application in your Entra ID tenant for Computer Logon MA:
(Set up an enterprise application in Entra ID for Computer Logon MA)
Also, you have already created an SSO service provider in DualShield for EAM integration:
(Create an SSO service provider in DualShield for EAM integration)
Now, in your DualShield Admin Console, edit the SSO service provider for EAM and add value of the "Token Download Application ID" option:
...

