# User manual

This document describes the user interface and the steps that a user needs to go through to get authenticated. It is assumed that the Trust1Connector is installed.&#x20;

From the customers webpage the user is redirected to the authentication pages of Trust1Team. These pages can be branded according to the colour scheme and logo of the customer.&#x20;

### Landing page for first authentication

{% hint style="info" %}
At any time in the authentication flow the user can return to the previous page by pressing the arrow next to the titel of the authentication step (on the left side of the screen)
{% endhint %}

The user is first requested to link his mobile to his account so that in a later stage he can quickly authenticate using his mobile phone and a OTP (One Time Password)

In the top right corner that language can be changed. Default is English, but also Dutch, French and German are offered. Other languages can be added on customer request.&#x20;

Below the logo, the authentication steps are indicated. Once a step is completed the next step will light up so that the user knows where he is in the process.&#x20;

<figure><img src="https://2008314047-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FTItBZU9vNSXUfazlNCln%2Fuploads%2FP2PVAc01FmRDI88CUxuE%2FScreenshot%202024-06-04%20at%2013.45.05.png?alt=media&#x26;token=5ce9ac36-4f23-467f-894f-5dcf6d0451d7" alt=""><figcaption></figcaption></figure>

After entering a valid phone number the customer will receive a OTP on this mobile.&#x20;

<figure><img src="https://2008314047-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FTItBZU9vNSXUfazlNCln%2Fuploads%2FwurIqV5Vsu9mykTw3KTl%2FScreenshot%202024-06-04%20at%2013.48.38.png?alt=media&#x26;token=ed83be6d-b7a3-4c0c-bb45-dc7f0e1433d2" alt=""><figcaption></figcaption></figure>

The OTP is a 4-digit numerical code. The user needs to enter this number in the appropriate field. The user has a limited time ( configurable parameter) in which the OTP is valid. If the user did not receive an OTP he can request to receive a new one. (Resend OTP token)

<figure><img src="https://2008314047-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FTItBZU9vNSXUfazlNCln%2Fuploads%2FVL1WpO7yB1SWEdY1dBlc%2FScreenshot%202024-06-04%20at%2013.51.56.png?alt=media&#x26;token=667fcdf2-8a46-46e7-9302-4914ebcb23ea" alt=""><figcaption></figcaption></figure>

If the end-user enters a correct OTP, he will be redirected to the identification page (third step).&#x20;

The user can choose between different identification means: Card reader or Smart-ID

<figure><img src="https://2008314047-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FTItBZU9vNSXUfazlNCln%2Fuploads%2FEM9g3Vd0XgqxvHaoFUYF%2FScreenshot%202024-06-04%20at%2013.54.53.png?alt=media&#x26;token=d8e56333-3c85-4016-8d2d-f0f70972bc14" alt=""><figcaption></figcaption></figure>

### Card reader

If the end-user does not have a card reader connected to his device or his ID eID inserted in the card reader The Identity selection page will remain blanc. There will not be any available readers.&#x20;

If the end-user has not got the Trust1Connector installed he will be asked to do so ([installation manual](https://t1t.gitbook.io/t1authentication/trust1connector-installation-in-trust1authentication).)

The blue banner on the screen is an example on how "recent" discovered issue with an OS is tackled until a new version of the T1C is released or until the OS is updated.&#x20;

<figure><img src="https://2008314047-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FTItBZU9vNSXUfazlNCln%2Fuploads%2FRb888AA394y5bGcPvqzA%2FScreenshot%202024-06-04%20at%2013.58.09.png?alt=media&#x26;token=928b0f94-633a-4729-82de-f0baba59bc61" alt=""><figcaption></figcaption></figure>

By clicking on the available identity the certificates of the eID are read.

When the certificates are valid, the user will be receive a green confirmation that the certificates are qualified and gets a button "Authentication" that will lead him to the next step where he needs to enter his pincode.&#x20;

<figure><img src="https://2008314047-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FTItBZU9vNSXUfazlNCln%2Fuploads%2FlMNrXRhGNVHZnGEQpztz%2FScreenshot%202024-06-04%20at%2014.02.50.png?alt=media&#x26;token=98a52764-18db-41e0-9bb2-71f765f62c2b" alt=""><figcaption></figcaption></figure>

If the certificates are not valid, the token is expired or the user is trying to use the token twice, the user will get a red warning of invalid certificates.&#x20;

<figure><img src="https://2008314047-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FTItBZU9vNSXUfazlNCln%2Fuploads%2Frn1lT3WGE50fZilt6yXH%2FScreenshot%202024-06-04%20at%2014.04.49.png?alt=media&#x26;token=c40afc42-cb4b-46fd-aaac-8c970af4fc02" alt=""><figcaption></figcaption></figure>

After pressing the authenticate button the user receive a pop-up window in which he needs to enter the pin-code of his eID.&#x20;

<figure><img src="https://2008314047-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FTItBZU9vNSXUfazlNCln%2Fuploads%2FDWp9mwWgueU1M9Df72dO%2FScreenshot%202024-06-04%20at%2014.10.14.png?alt=media&#x26;token=cbee3879-58eb-48cd-9de3-d5f868f275ed" alt=""><figcaption></figcaption></figure>

After entering a valid pin-code the user will be redirected to the customers portal. The user can also cancel the authentication by pressing the cancel button.&#x20;

The user will only have 3 attempts to enter the correct pin-code. If the users enters 3 consecutive times the wrong pin-code his ID card will be blocked.&#x20;

### Smart-ID

The user can also chose to use Smart-ID as an authentication method.&#x20;

<figure><img src="https://2008314047-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FTItBZU9vNSXUfazlNCln%2Fuploads%2FEM9g3Vd0XgqxvHaoFUYF%2FScreenshot%202024-06-04%20at%2013.54.53.png?alt=media&#x26;token=d8e56333-3c85-4016-8d2d-f0f70972bc14" alt=""><figcaption></figcaption></figure>

After selecting Smart-ID the user can either enter his National Registration Number or scan the QR-code that is displayed.&#x20;

#### Using National Registration Number

The user needs to enter his National Registration Number and click continue.  In the next screen the users needs to click on authenticate to continue

<figure><img src="https://2008314047-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FTItBZU9vNSXUfazlNCln%2Fuploads%2FVULlCg7BKmYSy5pMofFi%2FScreenshot%202024-06-04%20at%2014.25.21.png?alt=media&#x26;token=81771a17-2d6e-4c3f-94ed-a5a8450f1fda" alt=""><figcaption></figcaption></figure>

The user will than receive a code on the screen and a notification on his mobile phone to verify the code. The user will have to enter his authentication pin-code (pin-code 1) in the Smart-ID app to be authenticated.&#x20;

#### Using QR-code

If the user scans the QR-code with this Smart-ID app he will  be asked to enter his authentication pin-code and is than immediatly authenticated. Please note that for security reasons the QR-code changes every second. This does not impact the functionality.&#x20;

<figure><img src="https://2008314047-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FTItBZU9vNSXUfazlNCln%2Fuploads%2FSCxNkxwOOr9tgh6N3zvv%2FQR-code%20mock-up%20(1).png?alt=media&#x26;token=6b59cbdb-1d5b-4c8d-8d7f-5b9818879d4b" alt=""><figcaption></figcaption></figure>
