Enroll with the UserLock Push application
Set up the UserLock Push app on your phone as your MFA method, then approve sign-in requests or enter a code when you're offline.
UserLock Push is a mobile app for iOS and Android. When you sign in, UserLock sends a notification to your phone, and you approve or deny the request. When your phone has no Internet access, you enter the one-time code (TOTP) displayed in the app instead.
You can use UserLock Push to sign in to:
your Windows computer, locally or through Remote Desktop
RD Gateway, RD Web and RemoteApp connections
VPN connections
web and cloud applications your organization protects with UserLock
The app can also store codes for other accounts that use an authenticator app, such as Gmail, GitHub or Microsoft 365.
A smartphone with iOS or Android.
Your domain credentials.
If you already use another MFA method, ask your administrator to reset your MFA configuration first.
When you work outside your organization’s network, an Internet connection on your computer.
On your phone, open the App Store or Google Play, search for UserLock and install UserLock Push.
On your computer, sign in with your Windows credentials.
When UserLock asks you to set up MFA, select Push Notifications.
In the UserLock Push app, scan the QR code displayed on your computer.
Tap Continue to complete enrollment.
If UserLock asks you to set up an additional method, follow the on-screen instructions. If you can’t, contact your administrator.
Enter your Windows credentials. A push notification is sent to your phone.
Approve the request from the notification.
If your phone is offline or the notification doesn’t arrive, select Enter code on your computer, then enter the code displayed in the app.
⚠️ Important
If you receive a request you didn’t start, deny it, change your password immediately and contact your administrator.
UserLock Push accounts can’t be moved to a new phone.
Contact your administrator, who resets your MFA configuration: you then enroll again on your new phone at your next sign-in.
If you enrolled an additional method or saved recovery codes, use them to sign in in the meantime.