Download & Log In to the Chrome River Mobile App

Chrome River is an optional hybrid application that offers customers an easier way to log in to the full Chrome River app using mobile biometrics like fingerprint and face identification. By downloading Chrome River to your mobile device, you can easily create, submit, and approve expense reports and invoices on-the-go, approve transactions, upload receipts and much more.

• For details on our separate receipt-capture app, Emburse Chrome River, see the Emburse Chrome River App help center.

System Requirements

Chrome River is available for Apple iPhones running the latest iOS and for Android phones running Nougat and all newer versions of Android.

Download Chrome River

1. Open the Apple App Store or Google Play app and search for "Chrome River."

2. Click on the blue CR icon to download Chrome River.

Setup and Email Verification

The first time you open Chrome River, you will be required to verify your email address. This step must only be completed once; the next time you launch the app, you will be taken directly to the login page.

1. Enter the primary email address associated with your Chrome River account, then tap GET STARTED.

2. Once your email has been verified, you will be redirected to the login page.

SSO Login

If your organization uses a Single Sign-On service like Octa, OneLogin or Microsoft, you will be taken to that login screen when you open Chrome River.

To log in, use the credentials provided by your organization for authentication with your Single Sign-On provider.

STANDARD Login

If your organization does not use Single Sign-On, you will be taken to the standard Chrome River login screen.

To log in, use your Chrome River user ID, password and company ID.

Enable Device Security for Login

You will be notified that the app requires device security the first time you log in via Chrome River. Additionally, you may choose to enable device security to have your credentials automatically populated on the login form. You will then simply give your fingerprint (Android and iOS); use Face ID (iOS); or enter a PIN, passcode, or pattern to autofill the credentials.

You will not need to check the Remember Me box on the login screen, nor will you need to enter your password the next time you log in (for up to 90 days, depending on configuration—see Session Length & App Unlock, below).

1. Make sure the device security selector is on, then tap CONTINUE.

2. Your device will prompt you to confirm the use of biometrics. Tap OK.

3. The next time you log in, your credentials will be automatically filled in for you via the biometric or other security method on your device.

If you turn off the device security toggle or tap DON'T ALLOW, you will not be able to use your device's biometric login with Chrome River until you enable it inside the Chrome River app via Account Settings > Personal Settings > Enable [Security Type]. Apple users will first need to enable biometrics in their device settings. If you are an Android user, skip to Step 3.

1. Access your Apple device's SETTINGS screen, then tap on CHROME RIVER.

2. Tap the toggle to switch on biometric identification.

3. Now open Chrome River on your Apple or Android device and tap your USER ICON. Then tap SETTINGS.

2. Tap PERSONAL SETTINGS.

3. Tap ENABLE FACE ID or ENABLE FINGERPRINT AUTHENTICATION, depending on your device's capabilities.

Session Length & App Unlock

The length of a user's session in the Chrome River app depends on how your organization has configured access.

Standard Login or SP-initiated SSO

If your organization uses the standard Chrome River login or SP-initiated Single Sign-On (SSO) login for the Chrome River app, you will remain logged in for at least 30 days. The session will be extended by 30 days every time you use the app, up to a maximum of 90 days.

If the app remains idle for 15 minutes, you will need to unlock it via your biometrics or your device's PIN, but you will not be required to log back in.

IdP-Initiated SSO 

If your organization uses IdP-initiated SSO login, your session length on the Chrome River app will be identical to the one your organization has set for Chrome River access via web browser.

For more information on IdP- and SP-initiated SSO, see the "Certificate Authentication for the Chrome River App" section of Introduction to Single Sign-On (SSO).

Enable Camera Access

The first time you attempt to upload an image by taking a photo with your device's camera, you will be prompted to allow Chrome River to access the camera.

If you tap DON'T ALLOW, the camera screen will remain black any time you attempt to take a photo with your device from inside Chrome River. If you later decide to allow Chrome River to access your device's camera, follow these steps to enable it.

iOS

1. Access your device's SETTINGS screen, then tap on CHROME RIVER.

2. Tap the toggle to switch on camera permission.

Android

1. Access your device's Settings screen and tap APPS & NOTIFICATIONS.

2. Tap APP INFO.

3. Tap CHROME RIVER.

4. Tap PERMISSIONS.

5. Tap the toggle to switch on camera permission.

Log Out

To log out of Chrome River, tap your USER ICON, then tap LOGOUT.

ADMIN: Configure Your Organization's SSO Login Page

If your organization uses Single Sign-On, an administrator will need to be sure that the SSO login page is correctly configured for access via the Chrome River application. Complete details on SSO can be found in Single Sign-On Admin Screen.

1. Tap the MENU button in the upper left corner, then ADMIN SETTINGS.

2. Tap SECURITY > SINGLE SIGN-ON.

3. If the SSO Redirect URL section already has a URL populated, it is more than likely your organization already has a working SSO login page configured for the Chrome River mobile application. Only update this link if your users are not seeing the correct SSO Login page.

If the SSO Redirect URL section is blank or your users will not be able to access Chrome River via the app, click the pencil icon to enter or edit the URL.

4. Enter the full URL your organization's users should click to access Chrome River.

• If you have the link bookmarked, edit the bookmark in order to copy the full, original link—NOT the link that appears in the address bar once the browser has redirected to your SSO login page.

Examples

Your organization's SSO will either be IDP-initiated or SP-initiated. Each of these has a unique URL format, and SP has two formatting options. Here are some examples:

• IDP: piedpiper.chromeriver.com
• SP: https://app.chromeriver.com/login/sso/saml?CompanyID=[piedpiper]
• SP: https://app.chromeriver.com/login/sso/saml/mercury?CompanyID=[piedpiper]

5. Click SAVE.

6. Now test the link on your own mobile device by installing—or deleting and reinstalling—the Chrome River app and confirming that you are able to log in to Chrome River through your SSO login page.

7. Instruct your organization's users to delete and reinstall the Chrome River app in order to access the new URL you entered.