[Access Control] Frequently Asked Questions about the Transition to the New Login Screen

Changes to the login screen apply to all Users.
Therefore, it cannot be applied to only some Users.

However, before applying the setting to all Users, Admins can try the "New Login Screen".
For details, please refer to the article below.
[Access Control] Try the "New Login Screen" for Admins Only

You can check the current migration status and activation status from ［Domain Settings］ in the HENNGE Access Control Administration.
If "Login ID" is set, you are using the new login screen.

No, switching the login screen will not forcibly disconnect existing credentials or Session Status.
Therefore, it is not expected that switching will cause services such as Google or Microsoft to prompt all Users to re-sign in simultaneously.

The new login screen will be displayed when a User explicitly logs out, or when the Access Control login Session Status expires, etc.

No, there is no need to change the SSO URLs or configuration values already set for each connected external service.

After migrating to the new screen, accessing the old URL will automatically redirect you to the new screen.
Since this redirect is maintained permanently, you can continue using your Bookmarks without updating them.

No, the new login screen is not case-sensitive for input.
It does not need to exactly match the ID (with mixed case) displayed in the Administration.

When logging in from a device with Device Certificates already installed, the new login screen is designed to prioritize authentication using the Device Certificate.
If you do not wish to use the Device Certificate, please click ［Cancel］ or a similar option on the Certificate selection screen to proceed.
*The display of the Certificate selection screen differs depending on the browser.

This feature is only available on the browser from which it was executed via the Administration.
Therefore, browsers other than the one on which this feature was executed (including the browser displayed when logging in from a device) will continue to show the normal login screen.

For details, please refer to the article below.
[Access Control] Try the "New Login Screen" for Admins Only

This behavior occurs because the login mechanism differs between each screen.
By using the "Try the new login experience" feature, you can experience the intended behavior.
*If you wish to try this with an account other than an Admin account, please consider temporarily changing the setting to "New Login" during a time with minimal impact.

For details, please refer to the article below.
[Access Control] Try the "New Login Screen" for Admins Only

The "Try the new login experience" feature is only available in web browsers, so you can try it in a web browser on a PC or Smartphone.
On the other hand, it cannot be tried within desktop apps or mobile Connected Applications.

This is because the mechanism relies on a "cookie" issued to the browser, and by design, it does not apply outside the browser (in Connected Applications).
*A sample video showing the authentication screen transition within apps is planned to be published on the Help Center, etc., so please make use of that as well.

The browser may be retaining a history of having selected a different Device Certificate.
Please consider uninstalling and reinstalling the Secure Browsers app, or clearing the cache of the device's default browser.
How to clear the Cache in the Browser?

The new login screen has migrated to a login mechanism that uses the OS's standard secure authentication System, and authentication in Secure Browsers launches the OS's standard browser.

The Username and Password information is saved by the OS's standard browser feature.
Therefore, whether or not it can be saved depends on the settings of your OS's standard browser, not on Secure Browsers.

For details, please refer to the article below.
[Secure Browser] Changes When Using HENNGE Secure Browser with the "New Login Screen

To log in using a Device Certificate on the new login screen when logging into a Chromebook device, a configuration change is required.
Please check ［Device Settings］ in the article below, and correct any settings that differ.
[Access Control] Chromebook Single Sign-On (SSO) Connection Procedure

Depending on the Google Workspace Configuration, this behavior may occur.
Please check ［Creating an SSO Profile for Google Workspace］ in the article below, and if there are any different settings, please correct them.
[Access Control] Single Sign-On (SSO) Connection Procedure (Google Workspace)

For details regarding the specification change of the Login ID for the initial Admin account, please refer to the following article.
[Access Control] Changing the Login ID of the Initial Administrator Account

Please inform your Users in advance that "the design of the login screen will be updated," and provide them with an image of the new screen.
Additionally, if the content entered as the Login ID will change (for example, changing from an employee number to an Email Address), please be sure to announce this change as well.

It is also possible to test the new login screen with specific end Users.
As an Admin, please obtain the URL from ［If you want end users to try this feature］ on the ［Try the new login experience］ screen introduced in the article below, and share it with the Users who will be testing it.
[Access Control] Try the "New Login Screen" for Admins Only
※The URL is the same for all Users.

If you have configured filtering settings based on the conventional Tenant identifier (URL-based), action is required.
Please adjust your filtering settings (such as an allow list) to cover the upper-level domain, "ap.ssso.hdems.com".

Yes, the Logo image you have already set will continue to be displayed at a "1:3 ratio" on the new login screen as well.

Please note that due to the layout of the new login screen, if you set an image with a ratio close to square, the overall image may appear shrunk with large margins, or if the Logo contains text (for example, "Single Sign-On"), the text may become distorted and difficult for Users to read.

💡 Tip
The new login screen includes an account selection screen that allows Users to skip entering their Login ID from the next login onward. To ensure your Logo displays nicely on this screen as well, we recommend designing it optimized for a horizontal image with a 1:3 ratio.



❌ Example of using a square Logo as-is (text becomes distorted)
Since the Logo is shrunk overall to fit the display area, any included text becomes very small and difficult for Users to read.

⭕ Example of adjusting to a horizontal (1:3 ratio) format (displays nicely)
By rearranging the elements into a "horizontal layout" as shown in the sample, visibility for Users is improved.

This is scheduled for the end of June 2027.
We may provide additional Notices via the Help Center, so we recommend referring to the article below and considering subscribing to "Release Information" and "Notice."
How to get PUSH notification from the Help Center

No, a connection error will not occur.

After the old login screen is discontinued, all customers' access will be automatically redirected to the new login screen, regardless of whether the Admin has completed the migration.

This is possible as long as it is done before the "old login screen" is discontinued.
Please perform the rollback from ［System］－［Domain Settings］－［Login］ in the Access Control Administration screen.

It is possible to configure settings so that the "Remember this login" screen is not displayed to any Users uniformly.
※It is not possible to configure settings to hide it for only specific Users.

Please go to ［System］－［Domain Settings］－［Login］－［Appearance］ in the Access Control Administration screen, and turn off the "Display remember login" toggle.