FAQ - OneID profiles statuses and re-enrollments

Last modified on 22 Sep, 2026. Revision 9


This article covers some frequently asked questions about OneID when used with Clavister IdAuth Cloud.

Why do I receive the message “You already have the maximum number of allowed OneID/OneTouch profiles”?

Your account has reached the maximum number of registered OneID or OneTouch profiles. This commonly happens when OneID has previously been activated on another device, or when the application has been reinstalled and registered again.

To resolve the issue:

  1. Open the Auth Manager on https://iam.shieldit.sase.eu/auth-manager (replace shieldit with your tenant name)
  2. Sign in using the same account you are trying to register in OneID.
  3. Locate your registered OneID profiles.
  4. Remove an old or unused profile.
  5. Return to OneID and restart the activation process.

Be careful not to remove a profile that is still actively used on another device.

I no longer have access to my old device. Can I remove its OneID profile?

Yes. Sign in to the Auth Manager using another available authentication method and remove the profile belonging to the old device.

What happens when I remove a OneID/OneTouch profile?

The removed profile can no longer be used to approve authentication requests. The OneID application on that device need to be activated again before it can be used.

Only remove profiles that are no longer needed or that you intend to replace.

I have changed or replaced my phone. How do I activate OneID on the new device?

Sign in to the Auth Manager and remove the OneID profile associated with your old device. You can then start a new OneID activation on the replacement device.

Related articles

How to - Use Roles in IdAuth Cloud to limit user access to OneConnect
8 Feb, 2026 sase oneconnect core userauth oidc