| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| services:2fa:browserextension [2021/11/09 15:28] – [WORK IN PROGRESS] intema | services:2fa:browserextension [2021/11/12 09:42] (current) – [Adding Leiden University MFA] venemans |
|---|
| =====Authenticator - Internet Browser Extension===== | =====Authenticator - Internet Browser Extension===== |
| |
| === WORK IN PROGRESS === | |
| |
| A convenient way of managing and using multiple 2FA/MFA accounts is by means of the Authenticator extension. This extension can be installed for several popular internet browsers, like Microsoft Edge, Google Chrome, Mozilla Firefox and others. The extensions are platform-independent, so will work on e.g. Windows, Linux, and MacOS. The usage of the extension is the same for all browsers and platforms. Below are instructions on how to install the extension in Firefox on Windows, and how to add your 2FA/MFA code generators for Leiden Observatory and Leiden University logins. Installation for other browsers and/or on other platforms is very similar. | A convenient way of managing and using multiple 2FA/MFA accounts is by means of the Authenticator extension. This extension can be installed for several popular internet browsers, like Microsoft Edge, Google Chrome, Mozilla Firefox and others. The extensions are platform-independent, so will work on e.g. Windows, Linux, and MacOS. The usage of the extension is the same for all browsers and platforms. Below are instructions on how to install the extension in Firefox on Windows, and how to add your 2FA/MFA code generators for Leiden Observatory and Leiden University logins. Installation for other browsers and/or on other platforms is very similar. |
| <figure>{{:services:screenshot11a.png?400 |}}<caption>Leiden Observatory 2FA QR-code (Click image to enlarge).</caption></figure> | <figure>{{:services:screenshot11a.png?400 |}}<caption>Leiden Observatory 2FA QR-code (Click image to enlarge).</caption></figure> |
| \\ | \\ |
| Once the QR-code is visible within the browser window, click on the top-right Authenticator button to open the pull-down window, then click the //Scan QR-code// button (little square with a horizontal line in it). Probably the extension needs to be allowed some permissions for this to work. The browser will present a crosshair as mouse-pointer, as well as an example QR-code that is being //scanned//. Move the crosshair to the top-left of the true QR-code, hold down the left mouse button and drag toward the bottom-right, drawing a (dotted-line) box around the QR-code. Make sure to enclose the full QR-code while staying within the white boundary surrounding it. If done correctly, a message box will appear stating that //<username> has been added//. If a message box with //Unrecognized QR-code// appears, please try the scan again. After a successful scan, the //Authenticator// pull-down window will contain a box with the Leiden Observatory code generator linked to your account. Clicking on the box will copy the current code to the clipboard (//Copied// appears), which can then be pasted into any login window asking for the Leiden Observatory 2FA/OATH/One-time (pass-)code. | Once the QR-code is visible within the browser window, click on the top-right Authenticator button to open the pull-down window, then click the //Scan QR-code// button (little square with a horizontal line in it). Probably the extension needs to be allowed some permissions for this to work (only once). The browser will present a crosshair as mouse-pointer, as well as an example QR-code that is being //scanned//. Move the crosshair to the top-left of the true QR-code, hold down the left mouse button and drag toward the bottom-right, drawing a (dotted-line) box around the QR-code. Make sure to enclose the full QR-code while staying within the white boundary surrounding it. If done correctly, a message box will appear stating that //<username> has been added//. If a message box with //Unrecognized QR-code// appears, please try the scan again. After a successful scan, the //Authenticator// pull-down window will contain a box with the Leiden Observatory code generator linked to your account. Clicking on the box will copy the current code to the clipboard (//Copied// appears), which can then be pasted into any login window asking for the Leiden Observatory 2FA/OATH/One-time (pass-)code. |
| <figure>{{:services:screenshot16a.png?400 |}}<caption>Leiden Observatory 2FA code generator (Click image to enlarge).</caption></figure> | <figure>{{:services:screenshot16a.png?400 |}}<caption>Leiden Observatory 2FA code generator (Click image to enlarge).</caption></figure> |
| \\ | \\ |
| ====Adding Leiden University MFA ==== | ====Adding Leiden University MFA ==== |
| |
| | Now that the extension has been installed on your browser, you can also add the Leiden University MFA to generate codes to access pages from the university. To set this up, visit the [[https://account.services.universiteitleiden.nl|account services page]] of the university. Log in with your ULCN username and password. |
| | <figure>{{:services:screenshot24a.png?400 |}}<caption>Account services login page (Click image to enlarge).</caption></figure> |
| |
| === TO BE ADDED === | On the Account Services page, scroll down and click on //Multi-Factor Authentication//. |
| | <figure>{{:services:screenshot27a.png?400 |}}<caption>Select option ''Multi-Factor Authentication'' (Click image to enlarge).</caption></figure> |
| |
| | You will need to login again and reach a page to setup additional authentication. To add the 2FA code generator to the browser extension, select the option //TOTP Non-NetIQ Authenticator//. **Note that the following steps will invalidate any older apps you use to generate the 6-digit code, for example on your phone.** |
| | <figure>{{:services:screenshot31a.png?400 |}}<caption>Select option ''Multi-Factor Authentication'' (Click image to enlarge).</caption></figure> |
| |
| | Follow the steps. The first step is the installation of non-NetIQ app. In this case it is the browser extension that you already have installed, so you can click //Next//. In step 2 a QR code will appear. Similar to the Leiden Observatory QR code, this QR code has to be scanned by your browser extension. Click on the top-right Authenticator button to open the pull-down window, then click the //Scan QR-code// button (little square with a horizontal line in it). |
| | <figure>{{:services:screenshot34a.png?400 |}}<caption>Select option ''Multi-Factor Authentication'' (Click image to enlarge).</caption></figure> |
| |
| | The browser will present a crosshair as mouse-pointer, as well as an example QR-code that is being //scanned//. Move the crosshair to the top-left of the true QR-code, hold down the left mouse button and drag toward the bottom-right, drawing a (dotted-line) box around the QR-code. Make sure to enclose the full QR-code while staying within the white boundary surrounding it. If done correctly, a message box will appear stating that //<username> has been added//. If a message box with //Unrecognized QR-code// appears, please try the scan again. After a successful scan, the //Authenticator// pull-down window will contain a box with the Leiden University code generator linked to your account. **Important: if you also want to have the option to use your phone to authenticate, also scan this QR code with the OTP app on your phone before pressing //Next//.** |
| |
| | After scanning the QR code with your browser and your phone, you can press //Next// and finish the setup. When you click on the browser extension, you will see both the 6-digit code for the Observatory and for the University pages. Clicking on the number will copy the code to your clipboard. |
