Skip to main content

AuthFlow 1.1 Configuration

Overview​

Covers setting the AuthFlow 1.1 preferences in ATAK and using AuthFlow to log in to the MCHMR TAK Server (tak.mchmr.us) with your Tactical ID credentials.

Requires ATAK 5.7 or higher

AuthFlow 1.1 will not run on ATAK versions earlier than 5.7. If you haven't installed AuthFlow 1.1 yet, start with Upgrading to AuthFlow 1.1.

Prerequisites​

Steps​

Set the AuthFlow preferences​

  1. Open ATAK and tap the hamburger menu in the top-right corner of the map.

    ATAK map view with the hamburger menu in the top-right corner

  2. In the Tools panel, scroll down and tap Settings.

    Tools panel with Settings near the bottom of the list

  3. On the My Preferences screen, tap Tool Preferences.

    Settings / My Preferences screen with the Tool Preferences row highlighted

  4. On the Tool Preferences screen, tap Specific Tool Preferences.

    Tool Preferences screen with the Specific Tool Preferences row highlighted

  5. On the Specific Tool Preferences screen, tap AuthFlow Preferences.

    Specific Tool Preferences screen with AuthFlow Preferences listed

  6. On the AuthFlow Preferences screen, tap Username claim.

    AuthFlow Preferences screen listing Redirect URI, Scope, Username claim, Token name and Select truststore

  7. Make sure Username claim is set to the literal word email (type the word "email", not your actual email address), then tap Done.

    Username claim dialog with the value email entered

  8. Back on AuthFlow Preferences, tap Select truststore and choose Trust all certs.

    Select truststore dialog with Trust all certs selected

Log in with AuthFlow​

  1. Return to Settings and tap Network Preferences.

    Settings / My Preferences screen with the Network Preferences row highlighted

  2. On the Network Preferences screen, tap Network Preferences.

    Network Preferences screen with Network Preferences and Network Connection Preferences

  3. Tap Network Preferences again.

    Network Preferences options: Data Package, Quick Connect and Network Preferences

  4. Under Server Connections, tap Manage Server Connections.

    Network Connection Preferences screen with Manage Server Connections under Server Connections

  5. Tap the three-dot menu in the top-right corner.

    Server connections list with the three-dot menu in the top-right corner

  6. Tap Auth Flow.

    Three-dot menu with Add, Remove All, Quick Connect, Data Package and Auth Flow

  7. Enter tak.mchmr.us as the server address and tap OK.

    Auth Flow dialog with tak.mchmr.us entered as the server address

  8. The Tactical ID login page opens in your browser. Enter your Tactical ID email or username and tap Log in, then enter your password on the next screen and continue.

    Tactical ID (IdentityHub) login page with the Email or Username field highlighted

  9. After you log in, you're returned to ATAK, which shows Initializing… Registering device with TAK Server. Wait for it to finish.

    Initializing dialog reading Registering device with TAK Server

  10. When registration finishes, a Registration complete message reads TAK Server registration succeeded. Tap OK. You are now authenticated to the MCHMR TAK Server.

    Registration complete dialog reading TAK Server registration succeeded, with an OK button

Troubleshooting​

  • Registration doesn't succeed after logging in: you should see TAK Server registration succeeded (Step 18). If not, check the two preferences below and try again from Step 9.
  • Login fails with a registration error: double-check Username claim is set to the literal value email (see Step 7).
  • Certificate errors when connecting: confirm Select truststore is set to Trust all certs (see Step 8).
  • AuthFlow isn't listed in the Auth Flow menu or preferences: confirm AuthFlow 1.1 is installed — see Upgrading to AuthFlow 1.1.