Evo now supports the creation and use of Custom Aliases for users. This means that your users can use an alias in order to authenticate and log in. Not all cases are supported the same, but let’s dive into the feature and see how this can be utilized.
Locating Aliases
In order to locate this feature and begin using it, you’ll need to log in to your Evo environment and locate a user. Let’s do that now:
- Log in to your environment (sample.evosecurity.com)
- Click on “My company” or locate a customer that you’d like to explore
- Click on the “People” tab
- Locate a user and click on the e-mail to view the User Details page
You will now notice a new tab titled “Aliases”. Click on that tab.
Here, you will see all aliases belonging to that user, and how to add/delete those aliases.
Let’s dive into the functionality here!
Adding Aliases
Adding an alias is quite simple! To do so:
- Click on the “Add Alias” button
- You should now see the Alias Creation Wizard. Simply input the alias you would like to associate with the user and click “Complete”. However, it is important that you follow the guidelines set out when creating an Alias:
- Minimum length is 2 characters
- Maximum length is 64 characters
- A valid email address, OR
- If not an email address, the username may only include: letters, numbers, periods, hyphens, and plus characters (but must not start or end with a plus symbol).
You should now see your created Alias on the “Aliases” tab of the user. At this time, we only allow 5 custom aliases per user.
Deleting Aliases
Deleting Aliases are just as simple! To do so:
- Click on the trash can icon next to the alias you wish to delete
- This will reveal a confirmation dialog to delete the alias. Click “delete” and the operation will complete
The alias should now be removed
Utilizing Aliases with Evo
Now that we’ve discussed where to locate Aliases and how to create them, let’s take a look at where they are utilized. We can use Aliases for the following:
- Evo Secure Login
- SAML
- VPN (RADIUS)
The following authentication entry points do NOT support aliases:
- Elevated Access
- Portal Logins
Using Aliases for Evo Secure Login
You can use an alias to log in to an endpoint that is secured with Evo Secure Login. To do so:
- In the portal, confirm that an alias exists for your user
- On the endpoint, input the alias username in the username field
- Input your password
- Accept the push notification or enter the one-time password (OTP) to continue
- You should now be logged in as your user by using your alias
DO NOTE: Using Aliases for Evo Secure Login requires endpoints to have version 1.1.18 (or later) of the Evo Credential Provider installed.
Using Aliases for SAML/SSO Login
If Evo is your SAML Identiy Provider for a 3rd party service through SAML, you can use Aliases to log in here as well. To do so:
- In the portal, confirm that an alias exists for your user
- Open your browser to the URL of your third-party web applications
- Once redirected to the Evo login page, input the alias username and password
- If prompted, enter the email address associated with the alias to confirm your identity
- Accept the push notification or enter the one-time password (OTP) to continue
- You should now be logged in as your user by using your alias
Using Aliases for RADIUS Login
Lastly, you can use Aliases for RADIUS server logins you may have configured. To do so:
- In the portal, confirm that an alias exists for your user
- Enter the alias username and password for your RADIUS login
- Accept the push notification to continue, or, if prompted, enter your OTP to continue
- You should now be authenticated by using your alias