OneLogin Protect for Android is a mobile authenticator app that provides a one-time-password (OTP) as a second authentication factor. Since you likely always have your phone nearby, it makes a great second authentication factor. OneLogin Protect is designed for Android 5.0 (Lollipop) and above.
Install and set up OneLogin Protect
On your mobile device, install OneLogin Protect from the Google Play Store and launch the app. Upon download, the app requires the following permissions:
Disable Your Lock Screen - To scan your registration QR code (we use the Google QR library, and this is required through Google).
Full Network Access - The registration process uses our APIs, and this is also needed to perform multi-factor authentication.
View Network Connections/View WiFi Connections - To check if there is network access. We verify this before making API calls.
Play Install Referrer API - Added by default for Google, tracks where the app was installed from for debugging purposes.
Click the + in the lower right corner to Add first account.
If you're prompted to allow OneLogin Protect to use your camera, click OK. A box appears, ready to scan a QR code.
On a separate device, login to your OneLogin portal.
From the portal, go to Profile. Under 2-Factor Authentication, click the + plus sign. Your QR code appears in a pop-up. Scan it from your first device.
Note: Some users may automatically receive a QR code the first time they register with as a new user with OneLogin. In that case, the same steps are used to configure OneLogin Protect; install Protect, then scan the QR code as below.
Use the phone's camera to scan the QR code that appears on your laptop. The box turns green once your phone is paired (registered) to your OneLogin account.
If the code doesn't scan for you, click Enter the code instead in the app, and in your browser click on Can't scan the code? to receive a registration code.
The OneLogin Protect home screen appears with the account you configured.
If you are prompted to Enable Push Notifications, click Enable.
The next time you are prompted to authenticate, the login screen notifies you that it's waiting for your approval.
OneLogin sends a notification to your mobile device. Tap the notification to view, select Accept. Unlock your device and OneLogin automatically sends the OTP and logs you in.
Set up OneLogin Protect directly from mobile
Log in to your OneLogin account on your mobile device. A prompt indicates that 2-factor authentication is required. Click Continue.
Select OneLogin Protect from the list of available factors.
Follow the instructions to download OneLogin Protect. Once the app is installed, go back to the browser and click Activate. Your account appears in OneLogin Protect.
Android Biometric Authentication
Your administrator may require your organization's users to enable biometric authentication to access OneLogin Protect. If your device prompts you to enable biometric authentication, tap "Yes" and follow the on-screen prompts to enable OneLogin Protect to authenticate your identity with Android biometrics.
Backup and restore your accounts
Protect can back up and restore accounts across any device or operating system.
To back up your Protect accounts:
Launch Protect on your smartphone and swipe right to view the menu.
Tap Backup.
On the next screen, tap Backup Now.
You're sent a confirmation that your account data was successfully backed up.
Note: the loss of your QR code or master password will render your backup data inaccessible. If this occurs, the end-user will need to use a different set of email and master password to create a new backup copy.
We strongly encourage all users to update to the newest version of OneLogin Protect. If you're using an older version, below are the steps to restore your Protect accounts:
Log in to Protect and swipe right to view the menu.
Tap Restore.
In the viewer that appears, scan the QR code from your saved Recovery Kit, or enter the digits from the security key instead.
Enter the email and master password you created in the Backup steps (above). The saved accounts will appear.
Important note: OneLogin Protect backup and restore functionality requires an active and configured Google Drive account on the mobile device. We are currently awaiting approval on the Sign in with Google permission for our Android app to resume the ability to sign into a Google Drive account, if no pre-configured account exist. If you don't have a pre-configured Google Drive account on your mobile device, you will not be able to sign into one until the permission approval process completes.
Unpair your device
To unpair your device, go to the Profile page. Under 2-Factor Authentication, find the OneLogin Protect row and click Revoke.
Troubleshooting
I can't scan the barcode.
Make sure OneLogin Protect can access your camera. From the app, open the hamburger menu and click Settings. Make sure the camera toggle is on.
I don't see notifications on my phone or tablet.
Make sure OneLogin Protect notifications are set up. From the app, open the hamburger menu and click Settings. Turn on the Allow Notifications.
Push notifications don't work.
The push notification connection may take up to a few hours to complete. In the meantime, you can use a manual code entry if you do not receive a push notification. You may also try again with a new code (new codes are generated every 30 seconds). If it still fails, contact your administrator because there may be a network issue.
If your phone isn't on a network connection but your laptop is, manually enter the OTP into your browser.