[Access Control] Frequently Asked Questions about the Transition to the New Login Screen

The change to the login screen applies to all users.
Therefore, it is not possible to apply it to only some users.

However, before applying the setting to all users, admins can try out the "New Login Screen."
For more details, please refer to the following article.
[Access Control] How to Try the "New Login Screen" as an Admin Only

You can check the current migration status and activation status from [Domain Settings] in the HENNGE Access Control Administration.
If "Login ID" is set, you are using the new login screen.

No, switching the login screen will not forcibly disconnect existing authentication information or sessions.
Therefore, switching will not cause all users to be prompted to sign in again to services such as Google or Microsoft.

The new login screen will be displayed when users explicitly log out or when the Access Control login session expires.

No, there is no need to change URLs or update any SSO URLs or configuration values already set in each integrated external service.

After migrating to the new screen, accessing the old URL will automatically redirect to the new screen.
This redirect will be maintained permanently, so you can continue to use your bookmarks without updating them.

No, the new login screen is not case-sensitive when entering information.
It is not necessary to match the ID (including uppercase and lowercase letters) exactly as displayed in the Administration.

When logging in from a device with a Device Certificate installed, the new login screen prioritizes authentication using the Device Certificate.
If you do not wish to use the Device Certificate, please click [Cancel] or similar on the certificate selection screen to proceed.
* The certificate selection screen may vary depending on the browser.

This feature is only available in the browser where it was enabled from the Administration.
Therefore, in browsers other than the one where the feature was enabled (including browsers displayed during device login), the normal login screen will remain.

For more details, please refer to the following article.
[Access Control] How to Try the "New Login Screen" as an Admin Only

This behavior occurs because the login mechanisms differ between the screens.
By using the "Try the New Login" feature, you can experience the intended behavior.
* If you want to test with a non-admin account, consider temporarily changing the setting to "New Login" during off-peak hours or times with minimal impact.

For more details, please refer to the following article.
[Access Control] How to Try the "New Login Screen" as an Admin Only

The "Try the New Login" feature is only available on web browsers, so you can try it on a PC or smartphone web browser.
However, it cannot be tested within desktop or mobile applications.

This is because the feature uses "cookies" issued to the browser, and therefore does not apply outside the browser (in applications).
* A sample video showing the authentication screen transitions within the app will be published on the Help Center, so please refer to it as well.

The browser may have retained a history of selecting a different Device Certificate.
Please consider uninstalling and reinstalling the Secure Browser app, or clearing the cache of your device's default browser.
How to Clear Browser Cache and Use Non-Cache Mode

The new login screen uses the OS's standard secure authentication system, and authentication with Secure Browser launches the OS's default browser.

Usernames and passwords are saved using the OS's default browser functionality.
Therefore, whether or not information is saved depends on the settings of your OS's default browser, not Secure Browser.

For more details, please refer to the following article.
[Secure Browser] Changes When Using Secure Browser with the "New Login Screen"

To log in using a Device Certificate on the new login screen during Chromebook device login, configuration changes are required.
Please check [Device Settings] in the following article and correct any differences.
[Access Control] Single Sign-On (SSO) Connection Procedure for Chromebook

This behavior may occur depending on your Google Workspace settings.
Please check [Create an SSO Profile for Google Workspace] in the following article and correct any differences.
[Access Control] Single Sign-On (SSO) Connection Procedure (Google Workspace)

For details on the specification change for the login ID of the initial admin account, please refer to the following article.
Change of Login ID for Initial Admin Account

Please inform users in advance that "the design of the login screen will be updated" and share an image of the new screen.
If the content to be entered as the login ID will change (e.g., from employee number to email address), please also announce the details of this change.

It is also possible to test the new login screen with specific general users.
From the [Try the New Login] screen introduced in the article below, admins can obtain the URL under [If you want general users to try it, click here] and share it with users who will be testing.
[Access Control] How to Try the "New Login Screen" as an Admin Only
* The URL is the same for all users.

If you have configured filtering based on the previous tenant identifier (URL-based), updates are required.
Please adjust your filtering settings (such as allow lists) to include the higher-level domain "ap.ssso.hdems.com".

Yes, the configured logo image will continue to be displayed on the new login screen with a "1:3 ratio".

However, due to the layout of the new login screen, if you set an image with a nearly square ratio, the entire image may be reduced in size, resulting in large margins, or if the logo contains text (e.g., "Single Sign-On"), the text may become compressed and difficult for users to read.

💡 Quick Tip
The new login screen provides an account selection screen to skip entering the login ID next time. To ensure your logo displays nicely on this screen as well, we recommend designing your logo as a horizontally long image with a 1:3 ratio.



❌ Example of using a square logo as-is (text becomes compressed)
If the logo is resized to fit the display area, any text in the logo will become very small and difficult for users to read.
 

⭕ Example of using a horizontally long (1:3 ratio) logo (looks clean)
As shown in the sample, rearranging elements horizontally improves visibility for users.

The end of service is scheduled for the end of June 2027.
We may announce updates again via the Help Center, so please refer to the article below and consider subscribing to "Release Information" and "Notices".
How to Use the Help Center PUSH Notification Feature

No, there will not be a connection error.

After the old login screen is discontinued, all customer access will be automatically redirected to the new login screen, regardless of whether the migration was performed by the admin.

It is possible as long as the "old login screen" has not been discontinued.
Please revert from [System] – [Domain Settings] – [Login] in the Access Control Administration.

It is possible to configure the "Remember this login" screen to not be displayed for all users.
* It is not possible to configure it for only some users.

In the Access Control Administration, go to [System] – [Domain Settings] – [Login] – [Appearance], and turn off the toggle for "Display remember login".

You can do so by selecting "Forget this account" from the menu button (...) to the right of the account displayed on the login screen.