Instructions: FED-LOGIN – Access app registration

End-users who are only equipped with Mobile VDI and do not have a Federal Administration smartcard, please read:
End users: FED-LOGIN totally smartcardless (External employees e.g. Mobile VDI users without smartcard equipment)
[b][c]FED-LOGIN Access[-]</span>
FED-LOGIN Access

The FED-LOGIN Access app is the convenient and secure login method if you have a Federal Administration smart card and want to use FED-LOGIN to log in from a device that does not support your smart card.

FED-LOGIN Access app – Who can use it?
×

Do you already use FED-LOGIN as a way of logging in and accessing Federal Administration applications as part of your job or contract? Do you already have a Swiss Government PKI (SG PKI) smart card enabling you to use FED-LOGIN? Then the FED-LOGIN Access app offers you some interesting options.

The FED-LOGIN Access app provides a user experience that does away with the need to enter a username or password at login. This makes it a very user-friendly login method.

FED-LOGIN Access app – Why do I need it?
×

The FED-LOGIN Access app is a convenient and secure login method if you want to use your federal identity to log in via FED-LOGIN, and are using a device that does not support your smart card. This could be a smart phone, tablet, PC without card reader or a mobile VDI solution, for example.

The FED-LOGIN Access app can be used as follows:

  • Login from the web browser of the mobile device on which the access app is installed. For this purpose, the app has a function allowing use on the same device. From 07.07.2024, the user can save the decision to use the FED-LOGIN Access app for login in the browser. This means that they will not have to choose to use the FED-LOGIN Access app again for future logins. The browser remembers this decision.
    Please note that the pop-up asking the user to confirm whether the FED-LOGIN Access app may be opened is a function of the smartphone's operating system and cannot be skipped.

  • Login from the web browser on a different device to the one on which the access app is installed. For this purpose, the app has a function for scanning a login QR code which is displayed by FED-LOGIN.

FED-LOGIN Access app – What is it?
×

The FED-LOGIN Access app is a mobile app for devices with Apple iOS or Google Android operating systems. It is available from the official app stores (Apple App Store/Google PlayStore). It can therefore be downloaded by anyone and installed on any device that meets the minimum operating system requirements. During registration, the FED-LOGIN Access app generates a key pair that is comparable to the private and public keys for your smart card's certificate. The private key is store securely on your device in a special storage area, while the public key is saved under your FED-LOGIN account. To prevent unauthorised use of the FED-LOGIN Access app on your device, access to the key is additionally secured using biometrics (Face ID or Touch ID for each device – fallback to device PIN) or a PIN set by you in the FED-LOGIN Access app.

FED-LOGIN Access app – What must I do in order to use it?
×

To use the FED-LOGIN Access app, you need to perform two simple steps. We have described them here for you.
  • Download the FED-LOGIN Access app from the App Store and install it on your mobile device.
  • Log into eIAM MyAccount with your smart card and register the FED-LOGIN Access app.

List of operating systems supported by the FED-LOGIN Access app

Installing and registering the FED-LOGIN Access app

Registration must take place on a device on which you can log in using your smart card. Click on the link MyAccount and select the FED-LOGIN tile. If you are offered a choice, select Continue with smart card and log in with your smart card. Note: In federal networks, you will be automatically logged on to MyAccount with Active Directory single sign-on. This login is too weak for the management of login methods. MyAccount alerts you to this and presents you with a button for smart card login.


Display indicating that you must log in with the smart card.
Smartcard Login
Go to the Login & Security tab. Click on the Smartcard Login button to set up the FED-LOGIN Access app login method. Registration with the smart card is required to manage login methods.



In the FED-LOGIN Access app tile, click on Register



To ensure that you are registering the access app as the authorised owner of the FED-LOGIN account, you will have to log in again using your smart card.

Click on Continue.



Using the device on which you want to install the FED-LOGIN Access app, scan the displayed QR code that matches the device's operating system.

Alternatively, you can search for "FED-LOGIN Access" in your device's app store.

Once you have finished installing the app on your mobile device, click on Continue in MyAccount.


Open the FED-LOGIN app on your mobile device. In the app, click on Scan QR code. If your device's operating system asks you to allow the app to access the camera, you must allow this. Scan the QR code using the device's camera.

You will now be prompted to select an authentication method in the FED-LOGIN Access app. This authentication method protects the app from unauthorised use. It ensures that only you, as the authorised owner of this device, can use the app to log in.

Select the desired authentication method on your mobile device:

  1. PIN authentication – Set a PIN (this is not the same as your device PIN).
  2. Face ID/Touch ID – This biometrics-based method is recommended as it combines convenience and security. If it cannot be used subsequently for a login, the app will request that you enter the device PIN.
After the authentication method has been set up, a confirmation message will appear.


To finish, click on Back to Login & Security.


This completes the registration process. You can now use your FED-LOGIN Access app for strong authentication (QoA50).

You can register a maximum of five FED-LOGIN Access apps on different mobile devices.


Important notice
If you lose your mobile device, delete the FED-LOGIN Access app on your mobile device, manually delete your account in the FED-LOGIN Access app, or reset all data and settings in the FED-LOGIN Access app (option under Settings menu), you may have to reinstall the app, and you must in any case reregister in MyAccount.

Frequently asked questions

How can I add the second authentication method (PIN or Face ID/Touch ID)?
×

Click on the link MyAccount, select the FED-LOGIN tile and log in with your smart card.
Click on "Register" and click through the menu (2x "Continue" without selecting anything else) until the QR code appears on the screen. Using the app that is already registered and installed on your mobile device, scan the QR code on the screen in MyAccount. You can now enter the missing second authentication method. Your FED-LOGIN Access app now supports both authentication methods and offers you a choice when you log in.

How can I rename my registered mobile device?
×

You can change your mobile device's displayed name only via the FED-LOGIN Access app on the device itself. Renaming can be useful for managing multiple devices in MyAccount. In particular, if you have registered more than one device, it is easier to tell the different devices apart for management purposes. To do this, open the FED-LOGIN Access app on your device and click on the cogwheel symbol at top right. This takes you to the app settings. Under "DEVICE", click on the field with the current device name. You can now enter the desired name for the mobile device and confirm it.

I have accidentally deleted an account in the FED-LOGIN Access app on my mobile device. What must I do to restore it?
×

You must reregister the FED-LOGIN Access app in MyAccount as described in these instructions.

How can I remove a registered mobile device?
×

To delete a mobile device, please follow the instructions:
FED-LOGIN - Removing an Access App account

I have entered the incorrect PIN five times, and now I can no longer use the FED-LOGIN Access app
×

If PIN verification fails five times, you will have to delete your account in the FED-LOGIN Access app and reregister the app for this mobile device in MyAccount. See also "How can I add the second authentication method (PIN or Face ID/Touch ID)?"

What must I do if the FED-LOGIN Access app stops working?
×

The FED-LOGIN Access app is an alternative login method to your smart card. If you have problems with the FED-LOGIN Access app, you can delete it from your mobile device, reinstall it and reregister it at any time.

What must I do if I replace my mobile device?
×

Delete the FED-LOGIN Access app account on your old mobile device as described in the instructions.
FED-LOGIN - Removing an Access App account

Install the FED-LOGIN Access app on your new mobile device and register it as described in these instructions.

What must I do if I have reset or replaced my mobile device without having first deleted my accounts via the registered FED-LOGIN Access app?
×

Your first choice when deleting a registered FED-LOGIN Access app should always be the access app itself. If this is no longer possible, for example because the mobile device is faulty, you have accidentally deinstalled the app or for other reasons, you can also use MyAccount to delete registered FED-LOGIN Access apps. You can find the instructions under
FED-LOGIN - Removing an Access App account

Which options do I have for managing the accounts in the FED-LOGIN Access app?
×

Consult the Help in the FED-LOGIN Access app FED-LOGIN Access app Help & Impressum

Use of the FED-LOGIN Access app for non-productive environments (acceptance/reference) (only for users who also use REF and/or ABN instances in addition to the eIAM PROD instance)
×

The FED-LOGIN Access app for production (PROD) also supports the FED-LOGIN IdP in the acceptance environment (ABN) and reference environment (REF). However, registration must be done separately in the relevant MyAccount in PROD, ABN and REF.


You can access MyAccount in the non-productive environments via the following links:
MyAccount acceptance environment (ABN)
MyAccount reference environment (REF)

If you use more than one account, we recommend that you give your accounts distinctive names in the FED-LOGIN access app, for example by adding REF or ABN as a prefix. This will help you to avoid deleting the wrong account by mistake. The FED-LOGIN access app recognises which environment is being used for the login, and only shows you accounts from that environment.