Super Gluu User Guide#
This guide will show how to use the Super Gluu two-factor authentication mobile application. It covers initial set-up, managing keys and logs, and general settings.
Screenshots below are shown in iOS. Android is roughly the same.
Camera Access Prompt#
After installation, Super Gluu will request access to use your camera, which is used to scan a QR code to set up your two-factor authentication.
Choose Login Method#
For additional security, Super Gluu gives you the option to configure either a passcode or TouchID to access Super Gluu. This choice can be changed in the application settings later.
After 5 unsuccessful attempts to enter the passcode, the app is locked for 10 minutes.
Confirm Push Notification#
Next, it will ask for permission to send push notifications from the Gluu Server. This choice can be changed later in the device settings. More information about the push notification will be covered later in the document.
After configuration, the main screen is displayed. It features the main enrollment button in the center and the menu button in the top right.
QR Code Enrollment#
To enroll a device, enter the credentials in your Gluu Server web app to generate a QR code, then click the
Scan QR Code button on the Super Gluu app's Home screen:
After it scans the code and the server returns the request correctly, it will prompt to
Deny. To continue the enrollment/authentication process, click
The timer on the top right of the screen shows the time limit to choose to
Deny. As time runs out, the number's color will change: yellow if it's under 20 seconds, red if it's under 10.
Next, it will redirect to the main page and display a success message.
After pressing the menu button, you'll get the option to view logs, keys, settings, and help files. You can also check the current app version in the bottom right corner. Tapping it for several seconds will show the details of the latest commit.
Each time it enrolls or authenticates a device, the app will save corresponding logs in the Logs tab. The log details whether authentication was successful, with more details available if the log is tapped on.
Clear these logs if desired by swiping left on the log, then tapping the red button.
The Log tab will report about the enrollment and authentication process and displays who logged in, when, and from where. Just tap on the log to get to the information screen.
The information screen contains data about:
- Gluu server name & server URL
- IP address & location
- Time & date
This tab contains all available keys for each Gluu server. A key is a unique file that is generated during enrollment, and is used to authenticate the device on the server. If a key for a server is deleted, enroll again with a new key.
To change a key's name, swipe left on it and tap the green button. To delete a key, swipe left on the key, then tap the red button.
In the Settings tab, there are options to configure the passcode or TouchID.
Super Gluu can receive push notifications from Gluu Servers. The server can send an enrollment or authentication request to the application, as if it scanned the QR code directly.
After choosing to receive push notifications either during initial setup or through the Settings tab later, enroll through the server. Super Gluu will send a token to the server, which will be used to send push notifications to the device.
After receiving the notification, tap
Deny directly from the push menu.
Super Gluu can receive a notification when the application is running in the foreground. It will look just like the original authentication screen.
Device Settings, iPad Support#
There are a few options for Super Gluu in the device settings - push notifications, location, access to camera, and passcode protection. Any change made in the device settings will take effect in the application.
Super Gluu can run on iPads, and the layout is the same for all IOS devices.
For more information, please see the Gluu Website