Skip to main content
Version: 11.3.0

Setup Guide: Single Registration for Unified Passwordless Authentication

Single Registration simplifies user experiences by allowing users to register their mobile devices once and use them for passwordless authentication across both desktop workstations and protected web applications. This unified approach eliminates the need for separate registration ceremonies on each platform, reducing user friction while maintaining strong security.

Administrator and Deployment Guide

This guide addresses IT administrators and security professionals responsible for deploying Single Registration in passwordless authentication environments. For deployment guidance based on your organization's authentication footprint, see Deployment Strategies. The Logs and Audit Trail section covers monitoring and compliance requirements.

Overview​

Single Registration enables seamless passwordless authentication across multiple platforms by allowing users to register their mobile devices once and access both desktop and web resources without additional registration steps.

How It Works​

With Workstation-to-Web (WS→Web) Single Registration, the user registers via HYPR Passwordless for Windows on the desktop, and HYPR Server automatically creates both desktop and web profiles.

No new deployments

CBA Workstation-to-Web Single Registration is supported for existing deployments, maintenance only, until August 1, 2027. HYPR no longer enables it for new deployments, and works with affected customers on a transition plan. You can still register users for web authentication and workstation authentication separately.

Web-to-Workstation is deprecated

Web-to-Workstation Single Registration, where a web registration also issues a workstation login certificate, is deprecated and no longer supported. Register users for web authentication and workstation authentication separately. For a unified web and workstation experience, talk to your HYPR representative about Enterprise Passkeys.

Key Benefits​

  • Unified Registration Experience: Users register once on the desktop and gain access to both environments
  • Simplified Profile Management: HYPR Server manages linked desktop and web profiles automatically
  • Backward Compatible: Users can still register explicitly to either platform if needed
  • Audit and Compliance: Full audit trail of registration and deregistration events

Unified Single Registration Experience for Enterprise Passkeys: Saved Workstations​

Unified Single Registration Experience for Enterprise Passkeys extends Enterprise Passkey and HYPR Passkey deployments with a saved-workstation experience after QR-based unlock. When users choose to save a computer, it becomes part of their persistent passwordless workstation experience.

To enable this, confirm with your HYPR representative that the capabilities required for the Unified Single Registration experience for Enterprise Passkeys — including Save Workstation QR Pairing and the related web and workstation capabilities — are enabled for your tenant.

For end-user workflow details, see Enterprise Passkey and HYPR Passkey Setup Guide - User Experience. For administrator configuration, see Enterprise Passkey and HYPR Passkey Setup Guide - Administrator Configuration. For offline PIN behavior tied to saved workstations, see Offline Authentication.

Registration Configuration​

Workstation to Web Single Registration →​

Users register via HYPR Passwordless for Windows on desktop and automatically gain web access (existing deployments, maintenance only, until August 1, 2027).

Logs and Audit Trail​

HYPR Control Center provides comprehensive audit trail capabilities for monitoring and compliance.

Audit Trail Access​

  • HYPR Control Center Console: Administrators access the audit trail mechanism to view events
  • Event tracking: The system tracks all registration, deregistration, and authentication events
  • Filtering: Administrators search audit events by username, event type, timestamp, and status
  • Retention: HYPR stores events in the Control Center database for a limited duration

Permanent Storage​

  • Security Information and Event Management (SIEM) integration: Integrate your existing SIEM infrastructure with HYPR Server for permanent archival
  • Long-term retention: Enable permanent archival of audit events beyond the Control Center database retention period
  • Compliance requirements: Audit trails support compliance and forensic investigation requirements
  • Configuration details: Refer to the HYPR Public Documentation Guide for detailed information on audit trail configuration and SIEM integration

Next Steps​

After reviewing this guide, refer to the following resources:

For Workstation-to-Web Single Registration:

For End User Guidance: