Docs / User Enrollment

User Enrollment

How to enroll users with wavekey using secure QR code scanning and admin-issued PIN verification.

How Enrollment Works

Each user must enroll their device with wavekey before continuous authentication can begin. Enrollment uses a two-step verification process to ensure only authorized users can register:

  1. When a user logs in to a wavekey-protected app for the first time, an enrollment QR code is displayed on screen and a 4-digit PIN is sent to the admin's email.
  2. The user scans the QR code with the wavekey mobile app.
  3. The admin shares the PIN with the user.
  4. The user enters the PIN in the app to complete enrollment.
Why PIN Verification?

The PIN prevents unauthorized enrollment if someone photographs or intercepts the QR code. Only someone with both the QR code and the admin-issued PIN can complete enrollment.

For Admins

What to Expect

When a user in your organization logs in to a wavekey-protected app for the first time, the system will automatically show them an enrollment QR code and send a 4-digit PIN to your admin email. Here's what happens next:

  1. The user scans the QR code with the wavekey mobile app.
  2. Share the PIN with the user so they can complete enrollment.
Important
  • The PIN expires after 5 minutes. If it expires, the user will need to log in again to generate a new QR code and PIN.
  • The user has 3 attempts to enter the correct PIN. After 3 failed attempts, the enrollment is locked and must be restarted.
  • Each enrollment link can only be used once.

For Users

Enrolling Your Device

  1. Log in to your organization's app as usual. If this is your first time, you'll see an enrollment QR code on screen.
  2. Open the wavekey app on your phone and scan the QR code.
  3. The app will show a PIN entry screen. Ask your admin for the 4-digit PIN that was sent to their email.
  4. Enter the PIN and tap Submit.
  5. Once verified, your device is enrolled and wavekey continuous authentication is active.

Troubleshooting

Issue What to Do
"Incorrect PIN" Double-check the PIN with your admin and try again. You have 3 attempts.
"Too many incorrect attempts" The enrollment has been locked. Ask your admin to restart the enrollment process.
"Enrollment link has expired" The 5-minute window has passed. Log in again to get a new QR code and PIN.
"Enrollment link is invalid" The link may have already been used or is incorrect. Log in again to get a new QR code.