[Access Control] Frequently Asked Questions about the Transition to the New Login Screen

Changes to the login screen are applied to all users globally.
Therefore, it cannot be enabled for specific users only.

However, administrators can try out the "new login screen" before applying the settings to all users.
For more details, please refer to the article below.
[Access Control] Trying out the "New Login Screen" as an Administrator Only

You can check your current migration and activation status under [Domain Settings] in the HENNGE Access Control admin console.
If it is configured to use "Login ID", you are already using the new login screen.

No, switching the login screen will not forcibly disconnect existing credentials or active sessions.
Therefore, we do not anticipate any impact such as users being prompted to re-sign into services like Google or Microsoft all at once immediately after the switch.

The new login screen will appear naturally when a user explicitly logs out or when their Access Control login session expires.

No, you do not need to perform any URL modification work, nor do you need to change the various SSO URLs or configuration values already set up on integrated external services.

After migrating to the new screen, any access to the old URL will be automatically redirected to the new screen.
Since this redirect will be maintained permanently, you can continue using your existing bookmarks without updating them.

No, the new login screen is not case-sensitive for text entry.
It does not need to perfectly match the exact case of the ID displayed in the admin console.

When logging in from a device that already has a device certificate installed, the new login screen is designed to prioritize authentication using that device certificate.
If you do not wish to use the device certificate, please click [Cancel] on the certificate selection prompt to proceed.
*Note: The appearance of the certificate selection prompt varies depending on the browser.

This feature is only effective within the specific browser where you activated it from the admin console.
Therefore, other browsers (including the built-in browser windows that open during native app logins) will continue to display the standard/old login screen.

For more details, please refer to the article below.
[Access Control] Trying out the "New Login Screen" as an Administrator Only

This behavior occurs because the login mechanism differs between the actual screens.
By using the "Try out the new login screen" feature instead, you can experience the intended and proper behavior.
*If you want to test this with non-admin accounts, you may also consider temporarily changing the setting to the "New Login Screen" during hours with minimal user impact.

For more details, please refer to the article below.
[Access Control] Trying out the "New Login Screen" as an Administrator Only

The "Try out the new login screen" feature can only be used within web browsers, so you can test it on a PC or smartphone web browser.
On the other hand, it cannot be tested inside desktop applications or mobile native apps.

This is because the preview mechanism relies on issuing a specific browser cookie, which does not apply outside of that browser environment (i.e., inside applications).
*We plan to publish sample videos in the Help Center showing the authentication screen transition within apps, so please feel free to utilize them.

The browser might have cached your previous selection of a different device certificate.
Please consider deleting and reinstalling the Secure Browser app, or clearing the cache of your device's default web browser.
How to Clear Browser Cache and Use Non-Cache Mode

With the new login screen, the system has migrated to a login mechanism that utilizes the OS-standard secure authentication system. When authenticating via Secure Browser, the OS-standard browser is launched.

Usernames and passwords are now designed to be saved within the OS-standard browser's built-in functionality.
Therefore, whether passwords can be saved depends on the configuration of your device's default/OS-standard browser, rather than Secure Browser itself.

For more details, please refer to the article below.
[Secure Browser] Changes When Using Secure Browser with the "New Login Screen"

To log in using a device certificate on the new login screen during Chromebook device startup, you need to adjust your settings.
Please check the [Device Settings] in the following article and correct any discrepancies.
[Access Control] Chromebook Single Sign-On (SSO) Connection Procedures

Depending on your Google Workspace configurations, this behavior may occur.
Please verify the [Create an SSO Profile for Google Workspace] section in the article below and correct any misconfigurations.
[Access Control] Single Sign-On (SSO) Connection Procedures (Google Workspace)

Regarding the changes to the Login ID specifications for initial administrator accounts, please check the following article for detailed information.
[Access Control] Changes to the Login ID for Initial Administrator Accounts

Please inform your users in advance that "the design of the login screen will be updated" and share the new screen image preview with them.
Additionally, if the required input for the Login ID changes (e.g., changing from an employee ID to an email address), please ensure that this specific change is included in your announcement.

If you currently filter access based on the traditional tenant identifier (URL-based), updates will be required.
Please adjust your filtering configurations (such as allowlists) to permit the higher-level domain: "ap.ssso.hdems.com".

Yes, your configured logo image will continue to be displayed on the new login screen, rendered at a "1:3 aspect ratio".

However, due to the layout of the new login screen, using an image with an aspect ratio closer to a square may result in the logo being shrunk excessively, creating large empty margins. If your logo contains text (e.g., "Single Sign-On"), it may become small or blurry, making it difficult for users to read.

💡 Quick Advice
The new login screen features an account selection screen to allow users to skip typing their Login ID from the next login. To ensure your logo looks clean on this screen as well, we highly recommend **optimizing your design for a wide, landscape image with a 1:3 aspect ratio**.



❌ Example of uploading a square logo as-is (text becomes blurry)
Because the entire logo shrinks to fit the display area, any text inside it becomes extremely small and difficult for users to recognize.
 

⭕ Example of uploading an optimized landscape logo (ratio 1:3) (looks clean)
Rearranging your logo elements horizontally, as shown in the sample, significantly improves visibility for your users.

It is scheduled for the end of June 2027.
We will post updates on the Help Center closer to the date. We highly encourage you to refer to the article below and subscribe to our "Release Notes" and "Announcements" sections.
How to Use the Help Center PUSH Subscription Feature