iPad and iPhone

Product overview

A shared iPad that knows who picked it up.

OLOID iOS Launcher replaces the device passcode with the worker themselves. They show their face or tap their badge, the iPad opens, and the applications they need are already signed in.

An iPad showing the OLOID sign-in screen with two options: Login with Face and Login with Badge.
01What a worker meets when they pick the device up — no keypad, no shared secret.

The problem with a shared device

A passcode everyone knows protects nobody.

A tablet that moves between people usually ends up with one passcode the whole shift knows — taped to the back, or passed along at hand‑over. It is slow, it cannot be attributed to anyone, and it is the first thing to leak. Taking it away is only possible if something faster replaces it.

A SHARED PASSCODE One secret, known by the whole shift Written down where it can be read Changing it means telling everyone No record of who actually used it A PERSON SIGNS IN Their own face, or their own badge Nothing to memorise or pass on Leaving ends the session The session belongs to a named identity
The device stays shared. The identity using it stops being.

Signing in

Their face, or the badge already in their pocket.

The worker chooses from the methods the device is configured for. Both take about a second, and neither asks them to remember anything.

  • Face — captured by the iPad’s own camera, with on‑screen guidance while it frames.
  • Badge — the same physical credential that already opens doors on the site.
  • Signing out returns the device to the sign‑in screen, so the next person starts their own session.
The OLOID sign-in screen on an iPad offering Login with Face and Login with Badge.
02Picking a method. Nothing is typed.
The iPad after sign-out, showing a confirmation card naming the worker and the time they logged out.
03Signing out closes the session and records who left, and when.

Identity

One session token, into the IdP you already run.

Signing in at the iPad issues a session token for that person. It federates with the identity provider the organisation already operates, so the worker arrives at each application as a named identity from your directory — on a device that several people share.

  • Microsoft Entra ID
  • Okta
  • Ping Identity
ON THE IPAD Face or badge OLOID Session token Issued for that person, for that session only Microsoft Entra ID Okta Ping Identity
The apps a worker opens see an identity from the directory you already run.

Credentials

A password and passkey manager, built in.

Not every application can take a session token. The launcher carries its own vault so those still open signed in: it holds passwords and passkeys for the worker and fills them in on their behalf, in the browser and in native iPad applications.

  • Passkeys sit alongside passwords, so applications can move forward one at a time.
  • The worker never sees or types the secret, so it cannot be shared or carried to the next shift.
  • Credentials belong to the person, not the iPad — they follow the worker to whichever device they pick up.
OLOID VAULT Passwords Passkeys Held for the worker, never shown FILLED IN Web applications Anything the worker reaches through the browser Native iPad applications Including those that never learned to federate
Where an application cannot take the session token, the vault signs the worker in instead.

See it running

Watch a worker pick it up.

Screen recordings from an iPad in a working deployment.

Sign in and open an app. A worker picks their sign-in method, is recognised, and lands in a work application that is already signed in — no device passcode at any point.

Video loads only when you press play.

At a glance

What the launcher does.

Runs onShared iPad and iPhone devices.
ReplacesThe shared device passcode, and the per‑application sign‑ins that follow it.
Sign-inFace captured by the device camera, or the worker’s existing physical badge.
IdentityA per‑worker session token federated with Microsoft Entra ID, Okta or Ping Identity.
CredentialsBuilt‑in password and passkey manager that fills web and native iPad applications.
Hand-overSigning out ends the session and returns the device to the sign‑in screen.