This site requires JavaScript to be enabled
External Customer KB > General > OneLogin Protect for iOS
OneLogin Protect for iOS
Article: KB0010517 Published: 09/02/2022 Last modified: 09/02/2022

This article describes how to set up OneLogin Protect for iOS. OneLogin Protect for iOS is a mobile authenticator app that provides a one-time-password (OTP) as a second authentication factor. It is designed for iOS 11.0 and above.

    1. Setting Up OneLogin Protect for iOS

      If your organization requires you to use 2-factor authentication (2FA) and has enabled OneLogin Protect as an authentication method, you will be prompted to set up OneLogin Protect the first time you log in to OneLogin.

      1. On your mobile device, install OneLogin Protect from the App Store and launch it.
      2. Sign into OneLogin on a separate device and select OneLogin Protect when prompted.
      3. A QR code will appear. Scan the code with your iOS device and keep it open in your browser while you install OneLogin Protect.
      4. If your administrator requires you to secure your iOS device when you use OneLogin Protect and you have not already enabled the Passcode feature on your device, you will be prompted to set up a passcode. After enabling Passcode, return to OneLogin Protect to continue setup
      5. To add an account from the OneLogin Protect app, select + in the upper-right corner.
      6. If OneLogin Protect asks to use your camera, select OK.
      7. From the Scan Activation Barcode screen, use your iOS device's camera to scan the QR code you looked up earlier. The box will turn green once it's successfully paired to your OneLogin account.
      8. Note: If you can't scan the code, select Can't scan the code? and you'll be provided with a numeric code to enter instead. On the app, select Enter the code instead to use it instead of the QR code.
      9. The OneLogin Protect home screen will appear with the account you configured. To copy the OTP to your clipboard, tap the row. Use a long press to view the credential ID and other information used during pairing.
      10. OneLogin Protect will now appear in your Portal Profile page under the 2-Factor Authentication section.


      Setting up Protect From a Smartphone

      1. Log in to your OneLogin account. A prompt indicates that a 2-factor authentication is required. Select Continue
      2. Select OneLogin Protect from the list of available factors.
      3. Follow the instructions to download OneLogin Protect. Once the app is installed, go back to the browser and click Activate. Your account should appear in OneLogin Protect.

      Setting Up Protect From Your Profile

      1. In your Portal, open the user profile menu and select profile
      2. Select the + next to 2-Factor Authentication, which will launch a dialogue. Select OneLogin Protect and your device type.
      3. Proceed from the add account step from Setting up OneLogin Protect section to scan the code and register your device

      Backup and Restoring Accounts

      Protect can backup and restore accounts across any device or operating system. To back up your Protect accounts:

      1. Launch Protect on your smartphone and swipe right to view the menu.
      2. Tap Backup
      3. On the next screen, tap Backup Now.
      4. You should recieve a confirmation that your account data was successfully backed up.

      We strongly encourage all users to update to the newest version of OneLogin Protect. If you're using an older version, below are the steps to restore your Protect accounts:

      1. Log in to Protect and swipe right to view the menu.
      2. Tap Restore.
      3. In the viewer that appears, scan the QR code from your saved Recovery Kit, or enter the digits from the security key instead.
      4. Enter the email and master password you created in the Backup steps (above). Your previously saved accounts will appear.

      Screenshot of OneLogin Protect iOS main screen with demonstration accounts.
      FaceID/TouchID AuthenticationYour administrator may require your organization's users to enable biometric authentication to access OneLogin Protect. If your device prompts you to enable biometric authentication, tap "Sign in with FaceID" (or TouchID on iPhone 8 and below) and follow the on-screen prompts to enable OneLogin Protect to authenticate your identity with iOS biometrics.
      Warning: losing your QR code or master password will render your backup data inaccessible. If this occurs, the end user will need to use a different email and master password to create a new backup copy.


I got a new or replacement device, did not back up, and can't log in.

Please contact your administrator so they can manually revoke your old device. Once the old device is removed from your account, you can register your new or replacement device. If you know you will be getting a new device, unpair and revoke your old device from your Profile page and then register your new device. To unpair your device, go to the Profile page. Under 2-Factor Authentication, find the OneLogin Protect row and click Revoke.

I can't scan the barcode.

Make sure OneLogin Protect can access your camera. From the app, open the menu and click Settings. Make sure the camera toggle is on.

I don't see notifications on my phone or tablet.

Make sure OneLogin Protect notifications are set up. From the app, open the menu and click Settings. Turn on the Allow Notifications. Note: Apple Watch notifications are also managed by your iPhone settings and not by the OneLogin Protect settings section. Any functionality that OneLogin Protect provides your Apple Watch is native to the Apple platform and not officially supported by OneLogin. If your administrator requires biometric verification to log in, the notification that arrives on your Apple Watch will need to be confirmed with a device that uses biometrics.

Push notifications don't work.

The push notification connection may take up to a few hours to complete. In the meantime, you can use a manual code entry if you do not receive a push notification. You may also try again with a new code (new codes are generated every 30 seconds). If it still fails, contact your administrator because there may be a network issue. If your phone isn't on a network connection but your laptop is, manually enter the OTP into your browser.

OneLogin Protect is using an incorrect email address.

Under some circumstances, Protect for iOS may default to using the email address associated with the user's iPhone. You can correct this in your admin branding settings:

  1. From the Admin account, go to Settings > Branding.
  2. Click Login Screen and scroll down to Recipient Email Field.
  3. Select Email in the Recipient Email Field drop-down.
  4. Save.

Expand/Collapse Comments
Was this helpful?