Using Access Cards

Access cards offer a quick and secure method of logging in on the device. The user only needs to hold his card (or similar medium like an RFID keyring pendant) contactlessly in front of the card reader of the device to be automatically logged in. A user can have several cards (but a card can only be assigned to exactly one user).

The users' card numbers can be entered in the system in several ways.

To open the web administration, enter http://<hostname>/webadmin in the web browser (where hostname corresponds to the server on which IQ4docs WebAdmin was installed). In a client environment, enter the URL that you received from the client administrator (for example, http://server/webadmin/#/cf992178-4bd6-431c-b815-b9d734d0ded3). If you are not already logged in, log in with a user that has administrator rights (login and password) or as the IQ4docs system administrator (administrator with password admin by default).

In the web administration, click Users > User List in the menu.

The Access Cards area displays all access cards assigned to the user. One user can have several access cards, but two users may not have the same card. The maximum number of access cards can be restricted, see Set number of registrable cards per user.
In the drop-down area, you can add, activate/deactivate or delete an entry. You can also specify a date on which the validity expires (usage is then no longer possible).

If the card numbers are available in a directory service or file, they can be imported, see LDAP Import and Import From File.

Users can register their cards on the device themselves. This requires an alternative login method (e.g. PIN or username and password), see Set authentication methods.

Proceed as follows to activate the card registration.

To open the web administration, enter http://<hostname>/webadmin in the web browser (where hostname corresponds to the server on which IQ4docs WebAdmin was installed). In a client environment, enter the URL that you received from the client administrator (for example, http://server/webadmin/#/cf992178-4bd6-431c-b815-b9d734d0ded3). If you are not already logged in, log in with a user that has administrator rights (login and password) or as the IQ4docs system administrator (administrator with password admin by default).

In the web administration, click Authentication in the menu.

In the Card Registration area, activate the desired card registration methods (both methods can also be used simultaneously):

When an unknown card is held in front of the card reader while in the login screen, the device displays the message: This card is unknown. Do you want this card to be linked to your account after you have successfully logged in? If you confirm with Yes, the registration mode starts (which can be recognized by the status message: Please log in to the system to link the card to your account.). The required authentication can be carried out by any of the permitted authentication methods (including an additional card), see Set authentication methods.

There is a time limit of two minutes for authentication. If this time is exceeded, only a login will take place, but the card will no longer be linked to the user.

With this login method, the card assignment takes place after the login. The settings dialog in the Embedded Client contains a Card Learning button. After pressing the button, hold the card in front of the card reader and it is immediately linked to the user.

The maximum number of registrable cards is set to Unlimited by default. You can limit the number using the setting Number of registrable cards per user. If a user already has the maximum number of cards and registers a new card on the device, the oldest card is automatically deleted.

The setting is valid for registration by the user, for cards to be defined manually by the user and for importing card numbers.

Below you will find more information on the use of RFID transponder cards.

If a card is not to be used permanently, or is to be deactivated specifically so that it can no longer be used, make these settings in the user data record under Access Cards.

Using a suitable card reader, the card number (or comparable data) is read from the transponder card and compared with the data stored in the IQ4docs database. The cards are always accessed in read-only mode.

The card configuration determines which area of the card is read. It is installed on the card reader. This area is sent to the IQ4docs server.