---
description: >-
  The ZTrust Authenticator is a secure mobile application designed to offer
  different single factor as well as  two-factor authentication (2FA) options.
---

# ZTrust Authenticator App

### 1. Introduction

The ZTrust Authenticator is a secure mobile application designed to offer different single factor as well as  two-factor authentication (2FA) options, including Time-Based One-Time Passwords (TOTP), QR code scanning, Push notifications, and NFC-based authentication. These features provide additional layers of security for your accounts beyond passwords.  These features provide different types of methods for user authentication.

### 2. System Requirements

* Operating System: Android 10 or later
* Internet Access: Required for account setup, push notifications, and syncing
* Storage: 200 MB minimum
* Permissions:
*
  * Camera: For QR code scanning
  * NFC: For NFC-based authentication(NFC Enabled Device)
  * Internet: For push notifications(Allow Notification permission)

### 3. Installation

* Go to PlayStore. Link: [https://play.google.com/store/apps/details?id=com.prodevans.ZTrust](https://play.google.com/store/apps/details?id=com.prodevans.ZTrust)

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXe0696dSTUzd9I1zIc1wbUYA8Zgk3LVbYROFwvvBJ-ChS59ZxapmK9GiwH8z31hRPoEG_lcrOCyQZsgOa4BAhfj1tajzoASyzDvtQ4xhJQNLoxNXXbpaErZdRWQkBa0ImLqjbyV8Q?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

\
\


* Go to AppStore. Link [https://apps.apple.com/in/app/ztrust/id6739931418](https://apps.apple.com/in/app/ztrust/id6739931418)

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FVQRA51Jmh1SUKXViirgS%2Fimage.png?alt=media&#x26;token=3de28c4e-46e5-4c2f-8265-83babb1d08f5" alt="" width="375"><figcaption></figcaption></figure>

* Now install the application and start the initial setup.

### 4. Getting Started&#x20;

#### Initial Setup

* Visit the [ZTrust URL](https://preauth.ztrust.in/realms/ztrust-app/account) in your browser.
* Click on the Register button to register yourself , if you're not registered.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdYi0Cbn9E5VcZxxUjfTjz7n1_1uOconrxHp3gNvVRrGf9DIMa1eyPhkgYDDQSvarMpq4vXHBLyNTs5c9IhMQ3XY5aWUnOWGVlV13C9Lj0FhISAniW12ussHygBTXvl8MZaWVFW?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig 4.1

* Provide the required details to create an account.&#x20;

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXe7h82hp0X4gjEqMdzKHKMBnNY3kCEgzxkFRU_Xu-WWpJf_vIqjQ4l006cwQur5DgcLiSAgkz24sztUmIxQiAmnuZzqcv1SK8-v3xf9mFMcOwioCzFrC0kA6JjSYi7j-ABP2fbA?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig 4.2

* After successful submission, you will be redirected to a page displaying a QR code.

\


<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeZ9Qq9jkWUOKj6BbrsUmrh7RY1fc4X24225ktrNBwrsUQmim36bQkRnzm6uRDoyBudwC6HKNLZEFExpgNIDOmmiv4qHhAtsd2QI9AnmOkPM4GmhpJOeQlw5jTuIgIw34dE0ekY?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig 4.3

* Open the ZTrust Authenticator app on your mobile device and click on the    +  button.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcmi0hMV-I5BYpdRKznINvzMY4SzCWmIWkI63fnxG7ZPz9FQaO1AUYMMsc81qRqBUZDHFMcKISSfxLet6SeBMjvY4qOYEcG_KLuKP6p4GtDjVACJFzDjuEldGIujO6-8d5k0QS1?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig 4.4

* Click the "Scan QR" button will open the scanner. Use it to scan the QR code displayed in the browser.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdfKs5Lljn5-DhRLnryyO3DSsFjgiShxT5oXWcfFSg7dwL4XUGyBP8kq-Br0RKucAUNMH8FlysTkrh0dVrkYeCC8vPUwvkimpPPbQUuD9nGLnIeYz4wc0H82pX1JjuZMz1DUf-r4Q?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig 4.5

* Upon successful scanning, the app will generate a Time-Based OTP (TOTP).

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcQuTY9YFtChj0ooUemfkeFYHt8O4Y0Y4G-StOxxJxHpCzr3tQ0MaOScl0ZusIEOEX-h3MWoSqjx-k_zUrcuIpx2iHZpK8GQdoh0Ma7m2RPMiP12HZ7AvXnuzB9X8oD7maNOaRGRQ?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig 4.6

* Enter the generated OTP in the TOTP field on the browser page and click Submit.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfY3iVbGIRbqYfAVuI47DCOruF5n8olsb9oKedFTuotOq_hFPFRoOMYzWbEMdBI23-JjzssAk9EMC4brw0xSmXkPG-KUc1YzELM7d5v6smpE4LGKJ94fE4Xzt5np2SXD7GITGnbMg?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig 4.7

* You are now successfully logged into the self-service portal of ZTrust.
* On your mobile device, confirm your password in the ZTrust Authenticator app and log in.&#x20;

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcuFxIrRoD4s99Cj0eqpQvH-DLYzXx77pdmmw5zpHjolJbTX4TnIWz__wnPHBWBJEQgcibwccph2ixaEXbCfQohuZZPZhmAQWWsQmQ1_nolyWorYU2997YZv2ReBUxdPZo9BARh1g?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig 4.8

* You will be successfully logged into the app.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfsyJer0HVPUghUT12FU_nA0VsDVPy8jI6L55ws2d6Z5x6KNOYG1Z1zJxcwQCKiEwC8riFJIWPlnQwNqrZSKT50_sAf0WhgeCGMelUtLgosSg8PZMhAGtX1KrLcv7mfUA2pRf9McA?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

\


#### Adding a New Account Manually

1. Open the app and tap the "+" button as seen below.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcmi0hMV-I5BYpdRKznINvzMY4SzCWmIWkI63fnxG7ZPz9FQaO1AUYMMsc81qRqBUZDHFMcKISSfxLet6SeBMjvY4qOYEcG_KLuKP6p4GtDjVACJFzDjuEldGIujO6-8d5k0QS1?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig:4.1

\


2. Choose Configure Manually option to add an account:

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdfKs5Lljn5-DhRLnryyO3DSsFjgiShxT5oXWcfFSg7dwL4XUGyBP8kq-Br0RKucAUNMH8FlysTkrh0dVrkYeCC8vPUwvkimpPPbQUuD9nGLnIeYz4wc0H82pX1JjuZMz1DUf-r4Q?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig:4.2

\


* The Login Page will appear once the Realm Name and the Ztrust URL are successfully provided. Users need to ensure that both the Realm Name and the Ztrust URL are entered correctly for the login page to display.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcnRdnMzZafDJRRC8ZPwsE-wJtDhrNd9IMAxUblkFq3Yh8KHBbbg9veC58loiGO8GjFE2koz_ulkPVYGhzfTwRf79kBcaesNsxpcuKVYfSkb-Ar8psfr7GKjq2D9DB5y0KQngLXnA?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig:4.4

* After entering the Realm Name and URL it will validate the realm  and URL.

\


<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfA_g8Lj67V1G2XGp4f8p32Mb0n4q-qlrCJ5aI5b3jbMZUXA6CZ3xBaCXvVJh0WIy69wvFQKGtjfUNLTiYdxDlN4Ripn_Pj1hSDGzbe_ETOvIBTT_bTONxM-3lgJvcGF9k5tZxGsg?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig:4.5

\
\


* On this page, we input our pre-registered "Username" and "Password" from the "Ztrust SSO."If "Password" and "Username" are correct, then the following fig:4.6 will show up. Your account will be added successfully.

&#x20;

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcUmmJ52kCnFoFZGQZFLmiaGSdE2bAKU69ifc3T-BFxov4GoO3xGryinZKNTNRyH9w_19VAG8VyDoKRwuJ_lNnWzdXrcM5qmnqfwjkl4D9CUXZ0JDNsXXO5pFWEDPe8JJX55hOlsg?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig:4.6

5\. Biometrics and MPIN Login:

If the user wants an alternative way to add an account, there are two options: “Biometric” and “MPIN”, there is a separate way.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfA_g8Lj67V1G2XGp4f8p32Mb0n4q-qlrCJ5aI5b3jbMZUXA6CZ3xBaCXvVJh0WIy69wvFQKGtjfUNLTiYdxDlN4Ripn_Pj1hSDGzbe_ETOvIBTT_bTONxM-3lgJvcGF9k5tZxGsg?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig: 5.0

5.1.Biometrics:

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfA_g8Lj67V1G2XGp4f8p32Mb0n4q-qlrCJ5aI5b3jbMZUXA6CZ3xBaCXvVJh0WIy69wvFQKGtjfUNLTiYdxDlN4Ripn_Pj1hSDGzbe_ETOvIBTT_bTONxM-3lgJvcGF9k5tZxGsg?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig: 5.1.1

* When 'Biometric' is selected, the screen shown in Fig. 5.1.2 will appear, which activates biometric authentication. Once successfully authenticated, the account will be added, as shown in Fig. 4.6.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdgXJ3JwHIjnPzAMMusAHZc3nY_lgoABvAU4PAiDf6rs1RNAV6Zv9TNpfuP1AEHON783nIlXA6E7UprDS2QefHJg0REtTGhEi7l8z7wk_pwCm72AheDrYV2x3SCXwWNkjmltqYs?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig:5.1.2

\


&#x20;    5.2.MPIN Login:

* If the user selects 'MPIN,' he/she will be navigated to another page, as shown in Fig. 5.2.1 Here, they need to enter the PIN that is already registered in the “Ztrust SSO.” After entering the PIN, the account will be successfully added, as shown in Fig. 4.6.

\


<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXe9Pth3Q0DSbxr7prPUk1OrYhxsmPA3xlWt0yPmexTH1TWrHO8Hne4riHMg0gekiSB5ZyUaeMYVDUBB6SbaKys1d4sh_AKIUwauCW4zl4oLYOoPwDUxAmb6TUNaQ7gDTJKL-ITtog?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig: 5.2.1

#### 6. Push Notifications

* The user first has to select the Push Notification in the “ZTrust SSO” 2FA. (Refer Fig. 6.1.)

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXf4Uh0gUAkP3BQSlBnhD7nigh-cUNuqfQEs889GNabFuWN8k_0XocdSo9P3ZKmEPbKqoKYy4OmBFZb2oWLT3Zqht3kbPktuOV-cGK8k1T2FcBkqu3BW1cj1RBOAztPZTZrRsKNJNb0Qn4Jrq6Vt4sY2Z_v8?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig: 6.1

* ZTrust Authenticator can receive push notifications from supported services. When logging in, a notification is sent to your device, and you can approve or deny the login attempt with a single tap.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeydPSk-B615m8-WLay_z2eMVIW7bEm6OICLGxbpc-K1bQSNkhzduFUI30qeof4PkLHeo2wQ_mXLih165VCb92gC4wFMNQjNROd494zgKEzVIHJAqIsCETbmxPpBT5fTJ6Dzn5t3Q?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Figure: 6.2

* Setup: In the profile page, if we enable 'Push Notification,' as shown in Fig. 6.2, this will make the device the primary device. A notification, as shown in Fig. 6.3, will be sent from the 'Ztrust SSO.' By clicking 'Accept,' the device will be set as the primary device, and if we click 'Deny,' the request will be rejected.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcBprBOoDZlBmUTWrPYZqyJzGzmw4CYRWe0DPwLILsqCqJTZk0wQIYGxtOlRTFjlM5IDkDeA26PN1cB445qcLhVXXtaOjcHq1zrOSeBZSiAUjm3BLwBFf5kmUDyUTvhsl-IpGZUHA?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig:6.3&#x20;

#### 7. Authentication Through QR Codes

* The user first has to select the QR Code Authentication in the “ZTrust SSO” 2FA. (Refer Fig:6.1)
* Some services provide a QR code during the 2FA setup. ZTrust Authenticator can scan this code to automatically add the service to your list of accounts.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXf6h6DHdHGzdAJcLi67LBLDz2H294CwXuzHbhWNWthUy9_oATDekFvgqqeaNikqMIRgvATm-qj-1Plz_daAd7J5nMWvqf--pYNLqLOmGAbhjfgYWQenpUCoNDirKsG-4kmrK49KSQ?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig: 7.1

* Follow the on-screen instructions from the service to generate a QR code, then scan it using the "Add Account" feature in the app.

#### 8. Time-Based One-Time Password (TOTP)

* TOTP generates a 6-digit code that refreshes every 30 seconds. This code is used in combination with your password to log in.
* Add the service using the QR code or manual setup, and the app will start generating TOTPs immediately.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXegzx3XbFqdZMBWd7dNPOakWaHl6cttORp6e36pSMQ5Tz6SxgVROQBBFh0aiH9qs60ImoxuCjyLmqqs1XH6YLIwBknLmnB6HnDnP6CIcN2Ylb_OnkCQMYvfSckGz-mFsv2r2OBpng?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig: 8.1

#### 9. NFC-Based Authentication

* How It Works: For devices and services that support NFC-based authentication, you can simply tap your phone on an NFC tag or reader to authenticate securely.
* Setup:You must register your NFC card before you can enable NFC in your account. When you click "ResisterThe NFC card," a pop-up window similar to the one in Fig:9.1 will appear.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcVhIfKbOfMqepiXv5MY9nxQ74XJaLArS6f7HC0Qs2RFaWbtTz6n05wuNkNp2EWoX2Vih8uURZiYFsXrhNLGFFt2n2Yoc3sZ8k21qd0uLYeYiHFy26MWaWDSVfhDsoYqfxPQluerqISUy-FbxRFngru3zuC?key=mU1qx1ariZF7XfFSp0gX9A" alt=""><figcaption></figcaption></figure>

Fig:9.1

* Now When you tap your NFC card, the pop will close and you will be able to register your card.&#x20;

As soon as 'Ztrust SSO' sends a request for an NFC card to be used as the primary device, we must tab your card in order to do this.
