This repository was archived by the owner on Dec 29, 2025. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 6
Add passwordless setup and sign-in #385
Open
rvzakngh
wants to merge
14
commits into
stg
Choose a base branch
from
andy-techpass-5431-passwordless
base: stg
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Changes from all commits
Commits
Show all changes
14 commits
Select commit
Hold shift + click to select a range
001c914
Add passwordless setup and sign-in
rvzakngh db9ef62
passwordless - use same screenshot for ios and android
rvzakngh 700f8e2
Add passwordless transition
rvzakngh c006bb5
address MR commments and update screenshots
rvzakngh 12fe602
add benefit of passwordless in transition page
rvzakngh ba5a28a
address MR comments, add benefits and warning of using other authenti…
rvzakngh ece9c6d
add benefits in transition page and minor edit for clarity
rvzakngh 936ab56
passwordless - add app lock
rvzakngh 5856273
add app lock to onboard page
rvzakngh 7bb7e0d
passwordless - add some links for steps requiring access to security …
rvzakngh 5c2d1b1
Merge pull request #386 from GovTechSG/andy-techpass-5432-passwordles…
rvzakngh a3538f8
passwordless faq
rvzakngh e2b868b
add more faq, minor typo/fix/formatting in transition and verify
rvzakngh ebb2509
correction as suggested by AI and also add recovery suggestion for ve…
rvzakngh File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Binary file added
BIN
+31.1 KB
docs/assets/images/access-sgts-services-using-techpass/log-in-passwordless-1.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,73 @@ | ||
| # Passwordless FAQ | ||
|
|
||
| This article provides additional information about passwordless sign-in. | ||
|
|
||
| ## Audience | ||
|
|
||
| Users with `@techpass.gov.sg` accounts. | ||
|
|
||
| ## Who is affected? | ||
|
|
||
| - **Included**: All users with **@techpass.gov.sg** accounts. | ||
| - **Excluded**: | ||
| - Users with **WoG/MOE identities**. | ||
| - Project product identities used for **synthetic monitoring**. | ||
| - **Test** and **training** product identities. | ||
|
|
||
| ## What do the affected users need to do? | ||
|
|
||
| **Existing `@techpass.gov.sg` users** that have setup multifactor authentication (MFA), follow the steps in [Setup Passwordless](transition-passwordless.md). | ||
|
|
||
| **New `@techpass.gov.sg` users** onboarding to TechPass, follow the steps in [Get invited and onboard to TechPass](get-invited-and-onboard-to-techpass.md). The steps have been updated to include passwordless sign-in setup. | ||
|
|
||
| ## How does passwordless sign-in look like? | ||
|
|
||
| With passwordless sign-in, after you enter or select your `@techpass.gov.sg` account, you will not be prompted for a password. Instead, the Microsoft Authenticator app on your mobile phone will receive a sign-in notification for you to approve the sign-in. You may also refer to [log in to TechPass using passwordless](log-in-with-techpass#authentication-for-techpassgovsg-account-using-passwordless-sign-in). | ||
|
|
||
| ## How do I verify that I have set up passwordless sign-in properly? | ||
|
|
||
| To verify, follow the steps in [Verify passwordless setup](verify-passwordless). | ||
|
|
||
| ## I have set up passwordless sign-in, but I am still being prompted for a password | ||
|
|
||
| If you have set up passwordless sign-in but the sign-in flow still prompts for a password, you may click on the **Use app instead**. | ||
|
|
||
|  | ||
|
|
||
| It may take a few minutes for the "Use app instead" option to be available if passwordless sign-in was recently set up. | ||
|
|
||
| If it still does not prompt for passwordless sign-in and the "Use app instead" option is not available after an hour: | ||
| 1. Verify that the passwordless sign-in setup is registered by following the steps in [Verify passwordless setup](verify-passwordless) | ||
| 2. Raise a [ticket](https://go.gov.sg/seed-techpass-support) with us. | ||
|
|
||
| ## I have accounts in other TechPass environments (@stg.techpass.gov.sg, @dev.techpass.gov.sg). Will this affect me? | ||
|
|
||
| Yes. Passwordless will be applied to all TechPass environments. | ||
|
|
||
| ## I am using Microsoft Authenticator with number matching push notification. Do I need to do anything? | ||
|
|
||
| Great! You are only one step away from using passwordless. You may follow the step in [Enable Passwordless sign-in in mobile app](transition-passwordless#step-4-enable-passwordless-sign-in-in-mobile-app). This step only requires you to enable passwordless sign-in in your mobile app. | ||
|
|
||
| ## I am using OATH software tokens like Authy and Google Authenticator apps. Can I continue using them? | ||
|
|
||
| No, you need to use the **Microsoft Authenticator** app. Passwordless is configured only using Microsoft Authenticator. Follow the steps in [Setup Passwordless](transition-passwordless) to transition to Microsoft Authenticator. | ||
|
|
||
| Authy and Google Authenticator **will not** be supported in the future. Raise a [ticket](https://go.gov.sg/seed-techpass-support) with us if there are special circumstances where you cannot bring your mobile device into your work premises. | ||
|
|
||
| ## When do I need to transition from Authy or Google Authenticator apps to use Microsoft Authenticator passwordless sign-in? | ||
|
|
||
| There is no deadline determined yet for the use of Software OATH tokens like Authy and Google Authenticator apps. However, they will not be supported in the future. We strongly recommend that you start using the **Microsoft Authenticator** app with passwordless sign-in. | ||
|
|
||
| ## What are the supported authenticators? | ||
|
|
||
| Only the **Microsoft Authenticator** app is supported for passwordless sign-in. Other authenticators and passkeys are not supported. Raise a [ticket](https://go.gov.sg/seed-techpass-support) with us if there are special circumstances where you cannot bring your mobile device into your work premises. | ||
|
|
||
| ## If you change, lose, or damage your phone | ||
|
|
||
| If you change to a new phone and still have access to the old phone with Microsoft Authenticator: | ||
| 1. Install Microsoft Authenticator on your new phone. | ||
| 2. Follow the steps in [Setup Passwordless](transition-passwordless) to set up passwordless sign-in on your new phone. | ||
| 3. After you have verified that you can use passwordless sign-in using the new phone, you can remove the Microsoft Authenticator linked to your old phone by following the steps in [Delete an unused sign-in method](transition-passwordless#step-8-optional-delete-an-unused-sign-in-method). | ||
|
|
||
| If you do not have access to your Microsoft Authenticator in your old phone anymore, you can regain access using Temporary Access Pass (TAP). Follow the steps in ......... | ||
|
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,56 +1,79 @@ | ||
| # Log in with TechPass | ||
|
|
||
| This article tells you how to: | ||
| This article tells you how to sign-in to a service using TechPass account. | ||
|
|
||
| - [Log in to a service using your TechPass account](#log-in-to-a-service-using-your-techpass-account) | ||
| - [Log in to TechPass Portal](#log-in-to-techpass-portal) | ||
|
|
||
| ## Log in to a service using your TechPass account | ||
|
|
||
| 1. Go to the Portal or home page of the required service. | ||
| 1. Go to the Portal or home page of the required service. Some of the services using TechPass: | ||
| - [TechPass Portal](https://portal.techpass.gov.sg/) (accessible using non-SE GSIB, Comet or GMD) | ||
| - [Console (TechBiz, StackOps, SHIP-HATS)](https://console.developer.tech.gov.sg/) (accessible using non-SE GSIB, Comet or GMD) | ||
| - [Documentation Portal](https://docs.developer.tech.gov.sg/docs) (accessible using any device) | ||
| - [GCC CMP](https://cmp.gcc.gov.sg/) (accessible using non-SE GSIB, Comet or GMD) | ||
| - [SEED Dashboard](https://dashboard.seed.tech.gov.sg/) (accessible using non-SE GSIB, Comet or GMD) | ||
|
|
||
| 2. Click **Login with TechPass**. | ||
| 3. Choose the required TechPass account. | ||
|
|
||
|  | ||
|
|
||
| 4. If you have a WOG account and logging in via your GMD, complete the following steps: | ||
| 4. You may be asked to provide other authentication method: | ||
| - If you have a **WOG account** and logging in via your GMD, refer to [Authentication for WOG account via GMD](#authentication-for-wog-account-via-gmd) | ||
| - If you have a **@techpass account**, refer to | ||
| - [Using passwordless sign-in](#authentication-for-techpassgovsg-account-using-passwordless-sign-in) | ||
| - [Using password and authenticator push notification](#authentication-for-techpassgovsg-account-using-password-and-microsoft-authenticator-push-notification) | ||
|
|
||
| a. Enter the verification code displayed for your SG Govt M365 profile on your Authenticator app. | ||
| ## Authentication for WOG account via GMD | ||
|
|
||
| b. Click **Sign in**. | ||
| ?> If you have setup passwordless sign-in for your WOG account, proceed to step 3. | ||
|
|
||
| c. Proceed to step 6. | ||
| 1. Enter the verification code displayed for your SG Govt M365 profile on your Authenticator app. | ||
|
|
||
| 5. If your TechPass log in ID's domain is ```techpass.gov.sg```, enter the password of your TechPass account and click **Sign in**. For example, if your TechPass ID is [email protected], you need to enter your TechPass password. | ||
| 2. Click **Sign in**. | ||
|
|
||
| You are prompted to authenticate your sign-in. A number is shown on your browser. | ||
| 3. You are prompted to authenticate your sign-in. A number is shown on your browser. | ||
|
|
||
|  | ||
|
|
||
| 6. On the Authenticator app, enter the number shown on your browser. | ||
| 4. On the Authenticator app, enter the number shown on your browser. | ||
|
|
||
| 7. Select **Yes** or **Done** on the app. | ||
| 5. Select **Yes** or **Done** on the app. | ||
|
|
||
| You have successfully logged in to the service using your TechPass account. | ||
|
|
||
| ## Log in to TechPass Portal | ||
| ## Authentication for @techpass.gov.sg account using passwordless sign-in | ||
|
|
||
| 1. Using your non-SE GSIB or GMD device, go to the [TechPass Portal](http://portal.techpass.gov.sg/). | ||
| 2. Click **Login with TechPass**. | ||
| 3. Sign in to your TechPass account or choose the required TechPass account. | ||
| ?> If you have **@techpass.gov.sg** account and have not set up passwordless sign-in, refer to: [Enable passwordless sign-in](get-invited-and-onboard-to-techpass#step-7-enable-passwordless-sign-in-in-mobile-app) | ||
|
|
||
|  | ||
| 1. If you have setup passwordless sign-in but the sign-in flow still prompts for password, you may click on the "Use app instead" | ||
|
|
||
|  | ||
|
|
||
| ?> If passwordless sign-in has just been recently setup, it may take a few minutes for the "Use app instead" option to be available. | ||
|
|
||
| 4. You are prompted to approve your sign-in. A number is shown on your browser. | ||
| 2. You are prompted to approve your sign-in. A number is shown on your browser. | ||
|
|
||
|  | ||
|  | ||
|
|
||
| 5. On the Authenticator app, enter the number shown. | ||
| 3. On the Authenticator app, enter the number shown. | ||
|
|
||
| 6. Select **Yes** or **Done** on the app. | ||
| 4. Select **Yes** or **Done** on the app. | ||
|
|
||
| You have successfully logged in to the TechPass Portal. | ||
|
|
||
| ## Authentication for @techpass.gov.sg account using password and Microsoft Authenticator push notification | ||
|
|
||
| 1. Enter the password of your TechPass account and click **Sign in**. For example, if your TechPass ID is [email protected], you need to enter your TechPass password. | ||
|
|
||
| 2. You are prompted to authenticate your sign-in. A number is shown on your browser. | ||
|
|
||
|  | ||
|
|
||
| 3. On the Authenticator app, enter the number shown on your browser. | ||
|
|
||
| 4. Select **Yes** or **Done** on the app. | ||
|
|
||
| You have successfully logged in to the service using your TechPass account. | ||
|
|
||
|
Collaborator
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Let's add the step to use biometrics for App lock |
||
|
|
||
|
|
||
|
|
||
|
|
||
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
can help me format it abit?
Uh oh!
There was an error while loading. Please reload this page.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.