Getting started with BlackBerry Enterprise Identity
BlackBerry Enterprise Identity
BlackBerry Enterprise Identityprovides single sign-on (SSO) to cloud services. With single sign-on, users don't have to sign in multiple times or remember multiple passwords. Administrators can also add custom services to
Enterprise Identityto give users access to internal applications.
What is my user account?
Your user account is typically the account (such as
Microsoft Active Directory, or LDAP) that you use every day to log in to your organization account. The password is the same one that you use every day.
If you use multiple accounts, after you enter your email address,
BlackBerry Enterprise Identityrecognizes that there is more than one account associated with your address and you must select the correct account to log in with. Here are some examples of user accounts that you might use:
- BlackBerry UEMlocal user - <username>
- Microsoft Active Directory- <username>
- LDAP - <username>
- AzureActive Directory - <user>@<yourorganizationsdomain>.com
- BlackBerry Online Account- <email address>@<yourorganizationsdomain>.com>
To view more information about the accounts that display, hover over the name of the account.
If you select the wrong account, you can click the back button to return to the user account screen.
Can I use a different account
If you want to use a different account, click the ‘Use a different account?’ link. You will be returned to the Sign in page where you can enter credentials for the account that you want to use.
What if I forgot my password?
If you forgot your password, click the ‘Forgot password?’ link. An email message that will allow you to change your password is sent to the email address that is associated with your user account.
Note that the Forgot password link is visible only when you are signing into the
BlackBerry UEMconsole with a
BlackBerry UEMlocal user, and when you are signing in with a
BlackBerry Online Account. For other account types, contact your administrator to reset your password.
How do I use BlackBerry Enterprise Identity with BlackBerry 2FA?
BlackBerry Enterprise Identitywith
If your administrator has set up
BlackBerry Enterprise Identityto use
BlackBerry 2FAfor authentication, after entering your credentials,
BlackBerry Enterprise Identitymay prompt you with two choices:
- If you click ‘Send authentication request’, you will receive a prompt on your device that you must accept before you can log into the service.
- If you click ‘Enter one-time password’, you must get the password from a hardware token that was issued to you, or from theBlackBerry UEM ClientorBlackBerry 2FAapp on your device, then enter the password.
What happens when I allow Location permission?
If your organization is using
BlackBerry Intelligent Securityand
BlackBerry Enterprise Identityprofiles, the first time that you log in to a service, after you enter your username you might be prompted with a location permission screen, which presents you with two options:
- Allow:BlackBerry Intelligent Securitywill collect your location history when the app's location permission is enabled
- Maybe later: You will be asked for permission in the future each time that you log in
When you click Allow, your browser will prompt you for location permission.
BlackBerry Intelligent Securityuses your location history to establish trusted locations. Trusted locations are used to verify your identity and allow you to connect to your work network and resources. For more information, click the Learn more link on the Location permission screen.
Note: If you deny the browser location permission,
BlackBerry Intelligent Securitycannot establish your trusted location which might affect the level of authentication that is required for your user account.
BlackBerry Intelligent Securityfinishes its risk analysis, you will be prompted to enter your password, and a Remember this client screen will display.
The next time you log into the same service using the same browser, you will not be prompted for your username, Location permission, or Remember this client screens.
What happens when I 'Remember this client'?
When you select the ‘Remember this client’ option, you give your browser permission to store your account information. You should only select this option if you are the only person that uses the computer or device that you are logging in with.
If you select “I agree” on the Remember this client screen, the browser is saved in
BlackBerry Enterprise Identity, and displays in the
BlackBerry Enterprise IdentityTrusted browsers page of
BlackBerry UEM Self-Service.
How do I switch my language?
To switch your language, click the down arrow icon at the bottom left-hand side of the sign in screen and select the language that you want to use.
Selecting an enterprise, tenant and domain
After you enter your username, if
BlackBerry Enterprise Identitydetects that your organization has multiple enterprises, tenants or domains, you must select an option in the list before clicking next.