Claiming Accounts in Browser Extension SSO Apps

In order to access applications from EmpowerID, you first need to claim accounts in those applications. When you claim an account in an application, EmpowerID links the account to you and makes the application available for single sign-on (SSO). This allows you to authenticate to EmpowerID and then access all your applications without needing to submit your credentials to those applications.

Browser Extension SSO applications differ from other types of SSO applications your organization may use in that they require you to install EmpowerID's browser extension, the EmpowerID SSO Client. The SSO Client is what allows you to access a Browser Extension SSO application directly from EmpowerID. You can still access those applications outside of EmpowerID; you just will not be able to experience the benefits of single sign-on. For information on installing the EmpoweID SSO Client, see Installing the EmpowerID SSO Client in Internet Explorer and Installing the EmpowerID SSO Client Chrome.

If this is the first time you are attempting to claim an account in a Browser Extension SSO application, EmpowerID will present you with a dialog asking you to "create a new password to encrypt/decrypt your secrets." You can have different types of secrets in EmpowerID; however, in this case, the secret is your credentials for the application. After you enter a password, that password becomes your master password. EmpowerID uses it to generate a certificate for your person with public and private keys, encrypting the private key with your master password. Then when you browse to a browser extension application, you will be prompted to enter your master password, which EmpowerID uses to decrypt your private key in order to retrieve the credentials you have stored for that application.

EmpowerID does not keep a record of the master password you select. Thus, you must remember your master password as it is necessary for unlocking your secrets. If you lose your master password, you can create a new one; however, any present secrets you have will be lost to you as they can no longer by unlocked.

To claim an account in a Browser Extension SSO application

  1. From the Navigation Sidebar, navigate to your personal applications by expanding Applications and clicking Login.
  2. From your Personal Applications page, click the Browse Applications icon. If you have applications, click the Browse Applications link.
  3. This directs you to the IT Shop.

    From the IT Shop, search for the Browser Extension SSO application in which you want to claim an account and then click Request Access.

  4. Click Claim Existing Account.
  5. This opens the Credential Details form for the application. This is where you add the user name and password you have in the application.

  6. Type the user name for your account in the User Name field. This is the user name you use when authenticating to the selected application.
  7. Type the password for your account in the Password field. This is the password you use when authenticating to the selected application.
  8. Click Save.
  9. If the credentials in the application account you are claiming are the same as the credentials for another application account that you have already claimed, you can opt to link the credentials rather than submitting a new set. However, as a best practice, EmpowerID only recommends this in situations where the applications are internal to your corporate environment.
    • To Link Existing Credentials
      1. Check Link to Existing Credential.
      2. In the Select a Credential dialog that appears, search for an existing credential, click the record for that credential to select it and then click Save.
  10. If this is the first time you attempt to claim an account in a Browser Extension SSO application, EmpowerID presents you with a dialog asking you to "create a new password to encrypt/decrypt your secrets." Type the password in the Password and Confirm Password fields and then click OK.
  11. Your master password cannot be the same as the password for your EmpowerID account.

    Once you complete the above, you should see the application on your Personal Applications page.

    Now that you have claimed an account in a Browser Extension SSO application, the next step is to install the EmpowerID SSO Client in your browser. For help installing the SSO Client, see Installing the EmpowerID SSO Client in Chrome.