> ## Documentation Index
> Fetch the complete documentation index at: https://docs.truu.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Shared Workstation Badge Prerequisites

> What customers need to have in place before enabling badge authentication for TruU Shared Workstation.

Before configuring physical access badges for Shared Workstation, make sure the following prerequisites are met. TruU Shared Workstation supports passwordless workstation authentication using NFC badges, and customers can use their existing compatible badge readers and badges.

<Note>
  No integration with a Physical Access Control System (PACS) is required for workstation authentication. Badge authentication is managed through TruU using the configured badge format and user mapping.
</Note>

## Minimum Requirements

### 1. Compatible Badge Reader

* Any PC/SC-compatible NFC badge reader that supports **Keyboard Wedge Mode**
* USB-connected badge reader
* The **HID OMNIKEY 5427 G2** and **HID OMNIKEY 5427CK** have been validated and are the recommended readers

### 2. Windows Workstation

* Windows 10 or Windows 11
* TruU Shared Workstation installed
* Badge Authentication enabled through the Shared Workstation policy

### 3. Directory Integration

A supported identity directory must be connected to TruU. The directory is used to identify and authenticate users during sign-in. Examples include:

* Microsoft Active Directory
* Microsoft Entra ID
* Other supported identity providers

### 4. Badge Configuration

Before badge authentication can be used:

* Configure the badge card format in the TruU Admin Console so TruU can correctly interpret the badge data.
* Associate badges with users using one of the following methods:
  * **Manual Assignment:** Assign the badge directly to the user in the TruU Admin Console.
  * **Directory Lookup:** Store the badge identifier in a supported directory attribute (such as Active Directory or Microsoft Entra ID). During authentication, TruU automatically searches the configured badge attribute to identify the user.
* Enable Badge Authentication in the applicable authentication policy.

<Info>
  For step-by-step console configuration, see [Configuring Physical Access Badge for Shared Workstation](/docs/physical-access-badge).
</Info>

## Authentication Flow

1. The user presents an NFC badge to the badge reader.
2. The badge reader sends the badge information to the Shared Workstation.
3. TruU identifies the user based on the configured badge information.
4. Shared Workstation evaluates the authentication policy.
5. If required, the user is prompted for an additional authentication factor (for example, a PIN).
6. The user is successfully signed in to Windows.

## Existing Badge Systems

Customers can continue using their existing NFC badges and compatible badge readers. Shared Workstation does not require direct integration with a Physical Access Control System (PACS) for workstation authentication. Badge authentication is managed through TruU using the configured badge format and user mapping.

## Summary

| Requirement           | Minimum Requirement                                                                                               |
| --------------------- | ----------------------------------------------------------------------------------------------------------------- |
| Badge Reader          | PC/SC-compatible NFC reader with Keyboard Wedge Mode. Recommended model: HID OMNIKEY 5427 G2 & HID OMNIKEY 5427CK |
| Operating System      | Windows 10 / Windows 11                                                                                           |
| Identity Source       | Microsoft Active Directory, Microsoft Entra ID, or other supported directory                                      |
| Badge Configuration   | Configured in TruU Admin Console                                                                                  |
| User Mapping          | Manual assignment or directory-based lookup                                                                       |
| Authentication Policy | Badge Authentication enabled                                                                                      |
| PACS Integration      | Not required                                                                                                      |