Extended security mechanism (PIN)

When do users need to enter the PIN?

The PIN security feature is triggered by the following user actions in the mobile app:

• Setting up a new login to a system.
• Logging in to a connected system.
• Opening the Linchpin mobile app after it has been running in the background (e.g. after switching apps).

Limitations

Current limitations of the PIN security feature include:

• You can only set a numeric PIN code of four digits.
• There is no technical check for “weak” digit combinations (e.g. “0000” or “1234”).
• A 4-digit PIN code set for a system is valid for the entire app from that time onwards.
• You cannot assign different PIN codes for multiple systems or logins.
• Once a PIN code has been set, it cannot be changed or deleted.

How can I activate the PIN security feature?

Log in to your Confluence / Linchpin instance as administrator.

Navigate to Confluence administration → Linchpin Mobile → Configuration.

There you can activate the toggle switch Enable extended app security features to enable PIN protection for all mobile devices connected to your instance from the next login on.

What happens after the extended security feature is enabled?

If a user wants to add a new login to this system in the mobile app, the PIN security feature must be set up on this device.

• If the PIN security feature has already been configured, the user must enter their PIN code or use face / fingerprint recognition to add the new login.
• If the PIN security feature has not yet been configured, the user must set it up before they can add the new login.

If the user has an existing login to this system in their mobile app, the PIN security feature is activated for this login when the extended security feature is enabled in the administration area:

• There may be a short delay before the PIN security feature is enabled on the mobile device.
• The user will then need to enter their PIN code in the mobile app for any user actions in this system as described above.

In the mobile app, securely protected systems or logins can be identified in the system overview by the small “lock” icon displayed behind the protected system’s name.

What happens if a user forgets the PIN code?

For security reasons, it is not possible to simply reset a forgotten PIN code.

In this case, the user must therefore completely uninstall the app, download it again from the respective app store and set up a new login. In this context, the user must also set a new PIN code.

What happens if I disable the extended security feature again?

After you disable the extended security feature again, there may be a short delay before users are no longer required to enter their PIN codes. But the users won’t have to change anything, the request to enter the PIN will simply disappear.