Cornerstone CSX iOS App - Log In

Mobile learners can log into the Cornerstone CSX app using any of the following methods, if available:

  • System Credentials
  • SSO
  • Biometric Information

Before configuring login credentials, the user must first register their device.

PERMISSION NAME PERMISSION DESCRIPTION CATEGORY
My Account Devices - Manage Grants ability to access the Devices tab of My Account. The Devices tab enables users to register their mobile devices with the Cornerstone application. This permission cannot be constrained. This is an end user permission. Mobile

Register Device

The Devices tab of the My Account page allows users to register their mobile phones, tablets or computer. Users must register their mobile phone, tablet, or computer on this page in order to log in to the Cornerstone desktop or Cornerstone CSX mobile app using a unique device key. Users can also disconnect devices from the Offline Player and mobile application.

Within the desktop version of the Cornerstone system, navigate to My Account > DeviceS. The tab name may appear differently in your portal, depending on the display name configured by the administrator via My Account Preferences. If the tab name is longer than the maximum visible characters, then the full name can be viewed by hovering over the tab. Note: The Devices tab only displays if enabled by the administrator.

The Device Registration login Method does not support Biometric configuration. Biometric login is only available if users log in using Credentials/SSO methods.

Add Device

  1. In the first field, enter a name for the device. For example, if it is a mobile phone, you may enter "Mobile Phone" or the brand of mobile phone. Note: The device name entered here will not persist on the Devices tab after the user’s initial login to the Cornerstone CSX App.
  2. In the second field, enter a temporary five-digit PIN. The PIN must be five numbers, and it will only be used during device registration setup. Click NEXT to proceed to the next step.
  3. The next step displays instructions that must be completed within the Cornerstone CSX app. Do not close the pop-up until the registration process is complete within the Cornerstone CSX app, as the device key and temporary PIN are required to register the device. After completing the registration process, click the CLOSE button. The registered mobile device appears on the Devices tab.

Disconnect a Registered Device

To disconnect a registered device, navigate to the Devices tab of the My Account page and click the DISCONNECT button next to the device. This opens a confirmation pop-up. Click OK to disconnect or click CANCEL to stay connected.

After removing your device, you will not be able to log in using that device again unless a new pairing is created.

Device Entries on the Devices Page

Users are asked to name their device during the device registration process. This device name does not persist on the Devices tan after the user’s initial login to the Cornerstone CSX app. Rather, users can expect to see a maximum of two system-generated device entries per registered device.

Why two device entries?

Because users who register a device ultimately authenticate with a PIN, a backup entry is created and associated with the user. This allows the user to log into the app in the future with their stored PIN, as well as log in offline. One of these entries is always stored and displayed on the Devices tab. Additionally, a backup entry is created with every login. Therefore, a user can expect the following on the Devices tab:

  • When logged into the Cornerstone CSX app, a maximum of two device entries per registered device displays.
  • When logged out of the Cornerstone CSX app, one device entry displays. This is a backup entry.
  • The device entry displays as follows: mobile_backupsession <date time>.
  • The timestamp and date correspond to the time and date the user last logged in to the Cornerstone CSX app.
  • The backup entry timestamp updates with each login.

How do device entries appear?

After initial login, the device name entered by the user displays with a backup device entry as follows:

For subsequent logins, the Devices tab displays as follows:

When logged into Cornerstone CSX app:

Note: The date and timestamp are localized to the user’s location, based on their user record.

When logged out of Cornerstone CSX app:

Note: The date and timestamp are localized to the user’s location, based on their user record.

Biometric Authentication

When a user initially accesses the Cornerstone CSX app, they are first prompted to enable biometric authentication for the app. If the user does not enable biometric authentication, the app will then prompt the user to configure a PIN.

  • To enable biometric authentication, tap the OK button when prompted, and complete the setup process with your phone. Once biometric authentication is configured, the user will be prompted for biometric authentication each time they log in, unless they change their authentication method via the Settings tab.
  • To bypass enablement of biometric authentication, tap the Cancel button. You will then be prompted to configure a PIN instead.

The Device Registration login Method does not support Biometric configuration. Biometric login is only available if users log in using Credentials/SSO methods.

Biometric Reauthentication

If the user's attempt to enable biometric authentication fails, they will be prompted to reauthenticate.

The user can attempt to try again, or they can cancel the biometric authentication setup. The user will be prompted to configure a PIN if they cancel the biometric authentication setup.

Configure PIN

If the user does not configure biometric authentication, the user is then prompted to configure a PIN for future logins.

Users can create a six digit PIN Code which they will be prompted for each time they log into the Cornerstone CSX app. After configuring a PIN, the user will be prompted for that PIN each time they log into the app, unless the user changes their authentication method. Login authentication settings can be changed at any time from the Settings tab of the app.

Considerations

Depending on your organization's portal and application configurations, the beginning of your users' login experiences may differ slightly. See below for details:

  • For SSO Users: Upon entering a valid portal name, "smart" logic is applied during login. If a user is configured for SSO, upon tapping the Next button, the user is navigated to the SSO page.
  • For Credential Users: Upon entering a valid portal name, "smart" logic is applied during login. If a user's portal has no SSO configurations, upon tapping the next button, the user is navigated to the credentials page.

  • For organizations using both SSO and credentials: Upon entering a valid portal name, users are directed to the Username page. Upon entering their username, the app checks whether the user is in an organizational unit that has SSO enabled in Mobile Preferences.

    • If YES: User is navigated to the SSO page

    • If NO: User is navigated to the Learn App password screen

  • If a portal has no SSO configurations and a user taps the Alternative Device link, the SSO option will not appear.
  • If a user is offline, the Alternative Device link is disabled .
  • The Alternative Device link is in a disabled state until a valid portal name is entered.

SSO Sign On

If SSO functionality is enabled, users can log into the application via SSO either by using their portal log-in information or biometric information. Note: Users can only use biometric information to log in after they have logged in at least once using SSO and associated their biometric information with their login.

To access the SSO Sign On page on the app, swipe the Credentials login page to the left. Then, populate the following fields:

  • Portal - The name of your organization's learning portal
  • Username - Your username for your organization's learning portal

After populating the required fields, tap the Log In button. If the SSO authentication is successful, you are granted access to the application. If the credentials are incorrect or an error occurs, an error message displays and you can attempt to re-enter your credentials.

Note: The Log In button is disabled until all required fields are populated.

Note: The SSO page is visible even for organizations that do not support SSO.

After a user logs in to the Cornerstone CSX app with SSO, they are prompted to associate the biometric information that they have on their phone to their login.

  • When a user associates the biometric information on their phone with their login, the user can then log in to the Cornerstone CSX app using the SSO login method and fingerprint or facial recognition, depending on their device.
  • If a user chooses not to associate the biometric information on their phone with their login, then the user can make this association from the Settings page within the app.

Authentication Settings

To reconfigure the authentication settings for the app at any time, the user can navigate to the Settings tab. To enable a different form of authentication, toggle the switch for that authentication type to the On position. The app will prompt the user to configure the enabled authentication type.

Language Considerations

If the user's portal language is different than their device's language, when the user logs in for the first time, an alert displays in the user's device language, stating that a new language has been detected, and in order for the app to switch to the user's portal language, the app must be restarted. Users only need to restart the app one time in order for the language change to take effect. When the user logs in again, the entire application displays in the user's portal language instead of their device language. If the portal language is the same as the device language, no alert displays.