Configuring Contactless Card Behavior

Contactless cards are, by default, set up to lock the MFA workstation when tapped to the reader when logged in. This can be changed or turned off a few different ways depending on how you want your computers and contactless cards to work out for your end users. The following instructions will show you where and how these configuration options can be found.

Methods Tab

1. Once logged in to your MFA ONE portal, go to your Methods tab.

2. On the left-hand side, click on "Contactless Card".

3. By default, you will be brought to the Profile List. Next to the appropriate profile, click "Edit".
   

4. In the pop-up window to edit the profile, you will have all the card behavior options to configure. Select the options that you require for your MFA users.
   

5. If you do not want any of the "Tap In/Tap Out" behaviors, you can uncheck the "Enable Card Behavior" box entirely.
   

6. When you're done and satisfied with your setup, click "Save".
   
   

MFA Policy/Shared Workstation Tab

In the appropriate MFA policy, you can also control the card behaviors. However, this will only affect the computer(s) and not the users.

1. Still in your MFA ONE portal, go to the Policies tab.

2. On the left-hand side, click "View All Policies".

3. Click "Edit" next to the appropriate policy.
   

4. In the pop-up window, navigate to the Shared Workstation tab.
   

5. Look for the setting: "Card Behavior Override".

6. Enable this setting by checking (✓) its box and select the behavior that you would like to override current card behaviors with. If you're unsure of what to select, please see the chart below.
   

Note: The card removal options refer to smart cards. In this article, we've been working with contactless cards, so only the tap options apply to these instructions.