Mobile authentication

Authentication workflows

There are three options for authentication workflows in the mobile app. The Native workflow gives users a simple, streamlined experience entirely contained within the app, while the Webview workflow allows the user to log in via a browser window within the app. The third option, the Mobile browser workflow, allows additional workflow options using the device's default mobile browser. You can configure authentication for your app to suit your needs.

The Native workflow supports manual and LDAP authentication methods. All other authentication methods are supported by the Webview and Mobile browser workflows.

Native

The native authentication workflow is entirely contained within the Totara Mobile app. Users will authenticate on the app by working through the following steps:

1. Enter the organisation's URL in the text field and select Enter.
2. If the URL is valid or invalid:
   • If the URL is invalid select OK to try again.
   • If the URL is valid you will see your organisation's branded login page.
3. If you can't remember your username or password you can have your details sent to your email address and your password reset.
4. Type your username and password and select Enter.
5. If successful you will be taken to the app home page.

Webview

The webview authentication workflow allows users to complete most authentication actions in a browser window displayed within the app.

Users will authenticate by working through the following steps:

1. Enter the organisation's URL in the text field and select Enter.
2. If the URL is valid or invalid:
   • If the URL is invalid select OK to try again.
   • If the URL is valid you will see the Totara login page in a web browser within the app.
3. If you can't remember your username or password you can have your details sent to your email address and your password reset, or if you don't have an account you can create one.
4. Type your username and password and select Enter. 
5. You will then be returned to the app home page.

If any additional actions are required, such as agreeing to Site policies or completing Required profile fields, you will be prompted to do these in a mobile browser before completing other actions on the app. When prompted select Go to browser to open a browser tab and complete the required actions, or select Logout to leave the app without completing the required actions.

When viewing your Totara site in your mobile browser, for example after completing the required actions outlined above, you will see a banner asking if you would like to return to the app. Select either Go to app to return to the mobile app home page, or select Continue in browser to start exploring the site in the mobile responsive view.

Mobile browser

The mobile browser authentication workflow allows users to complete all authentication actions in a tab on their mobile web browser, then return to the mobile app without needing to reauthenticate.

This option is suitable with complicated authentication processes, as a web browser allows full access to the required authentication workflows.

Users will authenticate by working through the following steps:

1. Open your preferred mobile browser on a device with the app installed. Note that if the authentication method is set to mobile browser then entering a URL in the app will prompt you to go to your mobile browser.
2. If you can't remember your username or password you can have your details sent to your email address and your password reset, or if you don't have an account you can create one.
3. Type your username and password and select Enter. 
4. Complete any required actions, such as agreeing to site policies or completing required user profile fields.
5. You will then arrive on the site home page / landing page.
6. When logged in to your Totara site in a mobile browser you will see a banner asking if you would like to return to the app. Select either Go to app to return to the mobile app home page (note that you will not need to reauthenticate), or select Continue in browser to start exploring the site in the mobile responsive view.

Manage devices

App users are able to check which devices they have used to access the mobile app by going to their user profile, then Admin block > Manage mobile devices. For each listed device the user can see when they initially registered the device and when they last accessed the app using the device.

Users can log out of a specific device by selecting the Logout icon (), or log out from all devices by selecting Logout from all devices.

Notifications for suspended users

When you suspend a user, if they are logged in with the app open then they will be logged out as soon as they navigate to another page. If the app is not open then they will be presented with the login page and won't be able to log in.