Using Privileged Access Service as an authenticator
You can use the Privileged Access ServiceAdmin Portal >Profile > Device page to get the one-time passcode (either by scanning an external source's QR code or entering the authentication key information manually). You then can use the passcode to log in to the relevant application or website.

To scan a QR code, you must use the Privileged Access ServiceAdmin Portal application on an registered mobile device.
- Log in to the Privileged Access Service application on your mobile device.
- Tap Passcodes.
The Authentication window shows any existing passcodes.
-
Tap the plus icon (+) then tap Scan QR Code.
-
Scan the external source's QR code.
The Passcodes window shows the newly generated passcode. The newly added authentication account is also added to the Passcodes page in the Accounts section of the Admin Portal.

To enter the authentication key information manually, you can use the Privileged Access ServiceAdmin Portal on your mobile device or computer. See Managing authentication keys for information on entering the authentication key information manually using your computer.
- Log in to the Privileged Access Service application on your mobile device.
- Tap Passcodes.
The Passcodes window shows any existing passcodes.
-
Tap the plus icon (+) then tap Enter Authentication Key.
-
Enter the information provided by the application or website.
-
Tap Save.
The Passcodes window shows the newly generated passcode. The newly added authentication account is also added to the Passcodes page in the Accounts section of the Admin Portal.
Using the Settings screen
The Settings screen contains device configuration information such as default browser settings, authentication settings, and other useful information.
Login Settings
Contains the Privileged Access Service service URL.
Do not change this setting unless specifically instructed to by your IT department. If the URL is wrong, you cannot use the Privileged Access Service.
Authentication
Lets you configure the following:
- Mobile authenticator—see Using multi-factor authentication.
- Application lock settings
Allows you to configure lock options for the Centrify application on your device. Configurations made by the system administrator override your user configuration.
-
Change Password
Allows you to change your Active Directory or Privileged Access Service account password. See Changing your Active Directory or Centrify application password.
Browser Settings
You use this option to set your default browser and clear browsing data.
- Tap Default Browser to select the default browser for you device.
- Tap Clear Browsing Data to delete your cache an other browsing data from the built-in browser.
Debug Information
Enables activity logging, lets you send the log file to an email address, and provides GCM and MDM diagnostic information.
Do not change the Enable Debug Logging setting—this value is set by your IT department.
Profile Management
Lets you unregister the device. See Unregistering your device for the details.
Terms
Displays the terms of use.