Skip to main content
Version: 11.1.0

Web to Workstation - Conditional Enrollment

Facts​

Control which users complete workstation registration within a single tenant. Support different user groups with the same web Relying Party.

Use Case: Organizations with employees requiring full workstation access and agents/contractors needing web-only access.

Key Features:

  • Selective workstation registration via feature flag
  • Single tenant, multiple access patterns
  • Shared web Relying Party

Prerequisites​

  • Web RP application configured for all users
  • Workstation RP application configured for full access users
  • Magic link generation configured
User Group Examples
  • Full Access Users: Employees with workstation access
  • Web-Only Users: Agents or contractors with web access only

Both groups use the same web Relying Party.

Configuration​

Feature Flags​

Enable the SKIP_WS_REGISTRATION feature flag to access conditional enrollment options.

The skipWsRegistration toggle controls workstation registration per magic link.

Default: Disabled (performs full Single Registration)

To Skip Workstation Registration:

  1. Access magic link creation screen
  2. Enable Skip Workstation Registration toggle
  3. Generate magic link

User Journey:

  1. User receives magic link
  2. User completes web registration
  3. If skipWsRegistration disabled: Proceeds to workstation registration
  4. If skipWsRegistration enabled: Enrollment complete

Mobile Behavior​

When skipWsRegistration is true, the mobile app skips workstation operations:

  • No manual certificate request option
  • No status endpoint calls
  • No certificate generation
  • No workstation data in Enrollment Service
Web-Only Users

Mobile app does not generate workstation certificates, preventing access to workstation resources.