iOS Sign-In and Registration
============================

Use this page for the updated GovCIO COMMANDLINK account sign-in process.
This flow replaces the previous Device ID-only registration with username,
password, and required multi-factor authentication (MFA).

.. |passkey_signin_method| replace:: Face ID, Touch ID, device PIN, or screen lock

.. include:: /_includes/quickstart/login/before-you-begin.rst

Set up GovCIO COMMANDLINK
--------------------

Screens and prompts can vary by iOS version.

#. Install or update GovCIO COMMANDLINK from the App Store, then open the app.
   The new account sign-in process will not appear until you install or update to the latest version of GovCIO COMMANDLINK.
   Open your device's app store and install GovCIO COMMANDLINK or select Update if the app is already installed. After the installation or update is complete, open the app and continue with the steps below.
   If you still see only the previous Device ID registration process, return to your device's app store and confirm that the latest version has finished installing.

#. Respond to permission requests.

   .. include:: /_includes/quickstart/login/permissions.rst

   .. figure:: ../_static/iOS/ios-login-step-01.png
      :align: center
      :height: 400px

      iOS location permission prompt on first sign-in

   .. figure:: ../_static/iOS/ios-login-step-02.png
      :align: center
      :height: 400px

      iOS motion and fitness permission prompt

   .. figure:: ../_static/iOS/ios-login-step-03.png
      :align: center
      :height: 400px

      iOS notifications permission prompt

   .. figure:: ../_static/iOS/ios-login-step-04.png
      :align: center
      :height: 400px

      iOS Location permission prompt

#. Sign in.

   .. include:: /_includes/quickstart/login/sign-in.rst

   .. figure:: ../_static/iOS/ios-login-step-05.png
      :align: center
      :height: 400px

      Welcome Back sign-in screen

#. Set up multi-factor authentication.

   #. Open your authenticator app and add a new account.
   #. Scan the QR code displayed by GovCIO COMMANDLINK.

      .. figure:: ../_static/iOS/ios-login-step-06.png
         :align: center
         :height: 400px

         Set Up Verification screen with QR code and manual key

      .. figure:: ../_static/iOS/ios-login-step-07.png
         :align: center
         :height: 400px

         Enrollment details copied confirmation

   #. If you are setting up the authenticator on the same phone,
      enter the manual setup key instead.

      .. figure:: ../_static/iOS/ios-login-step-08.png
         :align: center
         :height: 400px

         Authenticator app manual key entry

      .. figure:: ../_static/iOS/ios-login-step-09.png
         :align: center
         :height: 400px

         Optional authenticator account nickname entry

   #. Return to GovCIO COMMANDLINK and select **Next**.
   #. Enter the six-digit verification code from your authenticator app.

      .. figure:: ../_static/iOS/ios-login-step-10.png
         :align: center
         :height: 400px

         Enter 6-digit verification code screen

   #. Confirm the verification code, then select **Next**.

   .. warning::

      Never share or send anyone a screenshot of your QR code,
      enrollment URL, manual setup key, or verification code.

#. Choose whether to create a passkey.

   .. include:: /_includes/quickstart/login/passkey.rst

   .. figure:: ../_static/iOS/ios-login-step-11.png
      :align: center
      :height: 400px

      Setup Passkey option screen

   .. figure:: ../_static/iOS/ios-login-step-12.png
      :align: center
      :height: 400px

      iOS passkey save destination prompt

   .. figure:: ../_static/iOS/ios-login-step-13.png
      :align: center
      :height: 400px

      Passkey Setup Complete confirmation

#. Register your device.

   .. include:: /_includes/quickstart/login/register-device.rst

   .. figure:: ../_static/iOS/ios-login-step-14.png
      :align: center
      :height: 400px

      Register Device screen for existing Device ID

Passkey notes
-------------

Your passkey may be saved in Apple Passwords or another password manager
available on your device. Follow the prompts and authenticate with Face ID,
Touch ID, or your device passcode.

Future sign-ins
---------------

.. include:: /_includes/quickstart/login/future-signins.rst