> For the complete documentation index, see [llms.txt](https://authenticator.hideez.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://authenticator.hideez.com/primary-setup-admin-guide.md).

# Primary Setup (admin guide)

There are 2 options for Windows login:

* passwordless login to the PC within AD on-premises domain
* password-based login

The following guide describes setting the environment for passwordless Windows workstation login.

To set up your system environment for passwordless login you have to [configure Active Directory Certification Authority](/primary-setup-admin-guide/configuring-an-active-directory-certification-authority.md), [add domain settings to the Hideez Server](/primary-setup-admin-guide/server-setup-for-passwordless-login.md), and then [configure SSO](/primary-setup-admin-guide/sso-configuration.md). After these steps, you can proceed to application enrollment on Server and then follow the instruction for PC passwordless login enrollment.\
\
To set up your system environment for password-based login you only have to [configure SSO on Server](/primary-setup-admin-guide/sso-configuration.md), enroll the application on Server and then follow instructions for PC password-based login enrollment.

In case you only have to use the Hideez Authenticator for OTP generation, please, [configure SSO on the Server](/primary-setup-admin-guide/sso-configuration.md) and then refer to the corresponding guide - [*Android*](/user-guide/android-guide/otp-generation.md)*,* [*and iOS*](/user-guide/ios-guide/otp-generation.md).