This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
institute_lorentz:2fa-key [2021/06/07 09:29] – [Preliminary Actions] lenocil | institute_lorentz:2fa-key [2021/10/08 09:05] (current) – [Introduction] lenocil | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== | + | ====== 2FA Setup via a FIDO2 Security Key ====== |
===== Introduction ===== | ===== Introduction ===== | ||
Line 9: | Line 9: | ||
|https:// | |https:// | ||
- | |Because 2FA via a security key offers the strongest protection against cyber criminals, the IL encourages you always to use this method to login to all IL services.| | + | |Because 2FA via a security key offers the strongest protection against cyber criminals, |
+ | |:!: If you have obtained a security key from the Lorentz Institute, you must return it upon termination of your appointment at the Institute | ||
===== Preliminary Actions ===== | ===== Preliminary Actions ===== | ||
Line 18: | Line 19: | ||
The setup of your security key differs slightly depending on whether you have already 2FA setup under your account, for instance via TOTP, or not. Follow the workflow below that is appropriate to your situation. | The setup of your security key differs slightly depending on whether you have already 2FA setup under your account, for instance via TOTP, or not. Follow the workflow below that is appropriate to your situation. | ||
- | ===== Setup without previous 2FA ===== | + | ===== Setup without previous 2FA in place ===== |
- | The setup of your security key differs slightly depending on whether you have already 2FA setup under your account, for instance via TOTP, or not. Follow the workflow below depending on whether you have previously setup 2FA. | + | |
==== Step 1 ==== | ==== Step 1 ==== | ||
+ | Notify the intention of registering a private key to < | ||
+ | |||
Navigate to any of the Lorentz Institute SSO web applications, | Navigate to any of the Lorentz Institute SSO web applications, | ||
Line 51: | Line 54: | ||
Click on //Back to application// | Click on //Back to application// | ||
+ | |||
+ | ===== Setup with previous 2FA in place ===== | ||
+ | ==== Step 1 ==== | ||
+ | Notify the intention of registering a private key to < | ||
+ | |||
+ | Navigate to any of the Lorentz Institute SSO web applications, | ||
+ | |||
+ | You will be redirected automatically to the Lorentz Institute Identity Provider login page as in **Figure 1**. | ||
+ | < | ||
+ | |||
+ | ==== Step 2 ==== | ||
+ | |||
+ | Enter your IL credentials and the correct TOTP to sign in. Upon successful login, your browser will ask you to register your security key (Figure 2). Plug your security key into an available USB-A port of your PC/laptop and confirm by pressing or touching the key button ((Key confirmation actions, such as pushing or touching, depend on the key used, please read the manual of your key's vendor)). | ||
+ | |||
+ | < | ||
+ | |||
+ | ==== Step 3 ==== | ||
+ | |||
+ | Once your security key has been successfully added, your browser will ask you to add a label if you wish (Figure 3). Click on `OK'. Your SK setup is completed. | ||
+ | |||
+ | < | ||
+ | |||
===== Problems and Solutions ===== | ===== Problems and Solutions ===== |