We have some self-imposed restrictions. We want to make sure a card is being issued to the right person so they go through a lot of validation steps. We don't want something as secure as a smart card being issued in one click. But the number of steps is as minimal as it can be and as easy to use as you would hope it would be, but it's certainly more than one click. Still, it takes seconds to enroll a user. It's quite quick. You select the user and say "enroll." But then there's the other side of that, which is the user activating their credential. Generating the certificates for the user is incredibly easy, but deploying those users' certificates requires a little more involvement because you want to make sure it's the correct user pulling the credential loading it into the card. Overall, it's intuitive and simple.
