Computer Documentation Wiki

User Tools

Site Tools

Trace:
services:2fa:continued

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
services:2fa:continued [2021/03/07 11:00] – deulservices:2fa:continued [2021/03/08 18:59] (current) – deul
Line 1: Line 1:
 =====First Time Access===== =====First Time Access=====
 ====Remaining Setup==== ====Remaining Setup====
-<figure>{{:services:idp3.png?nolink&400 |}}<caption>Private Email Address Confirmation (Click image to enlarge).</caption></figure> +<figure>{{:services:idp3.png?400 |}}<caption>Private Email Address Confirmation (Click image to enlarge).</caption></figure> 
 \\ \\
 The Identity Provider will then present you a window explaining that an email has been sent to your 'private email box'. This email contains a link (yes, indeed it is a clickable link, which is necessary as the security key provided is too complicated to type it in. But you should make sure that the link is pointing to our ''idp.strw.leidenuniv.nl'' identify server. Only after this verification you should click the link). The Identity Provider will then present you a window explaining that an email has been sent to your 'private email box'. This email contains a link (yes, indeed it is a clickable link, which is necessary as the security key provided is too complicated to type it in. But you should make sure that the link is pointing to our ''idp.strw.leidenuniv.nl'' identify server. Only after this verification you should click the link).
Line 8: Line 8:
 \\ \\
 Now look at your private mail inbox and find there the mail with \\ Now look at your private mail inbox and find there the mail with \\
-Subject: Verify email\\ +Subject: Leiden Observatory Identity Management verification email\\ 
-From: Observatory Identity Provider\\ +From: Observatory Identity Provider <idp@strw.leidenuniv.nl>\\ 
-And body text, similar like this, but made a bit more personal (not shown here for security purposes): +And body text, similar like this:
- +
-  Someone has created a Leiden Observatory Intranet account with this email address. If this  +
-  was you, click the link below to verify your email address+
      
-  Link to e-mail address verification+  Someone is trying to setup two factor authentication on the Leiden Observatory Intranet system. If this was you,  
 +  it is save to copy/paste the link below to verify your email address, but please do verify it is going to the  
 +  Observatory Identity server: idp.strw.leidenuniv.nl. 
 +     
 +  The link for email address verification is: https://idp.strw.leidenuniv.nl/auth/realms/STRW/login-actions/ 
 +  action-token?key=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldU... 
 +  BqPjnSig&client_id=local.strw.leidenuniv.nl&tab_id=KADCiBDmsaY
      
   This link will expire within 5 minutes.   This link will expire within 5 minutes.
      
-  If you didn't create this account, just ignore this message.+  If you didn't initiate two-factor authentication, just ignore this message. 
 where the text ''%%Link to e-mail address verification%%'' contains the link to verify and confirm your 2FA setup. For your information the link starts like: ''%%https://idp.strw.leidenuniv.nl/auth/realms/STRW/login-actions/action-token?key=eyJhbGciOiJIUzI1NiIsInR5cCIgOiA...%%'' and the key is a long series of characters. where the text ''%%Link to e-mail address verification%%'' contains the link to verify and confirm your 2FA setup. For your information the link starts like: ''%%https://idp.strw.leidenuniv.nl/auth/realms/STRW/login-actions/action-token?key=eyJhbGciOiJIUzI1NiIsInR5cCIgOiA...%%'' and the key is a long series of characters.
  
-Pasting the link in a WEB browser asks again for your credentials. Submit this form and you are now fully setup for Two Factor Authentication. A private email address is necessary to allow you to reset 2FA if necessary.+Pasting the link in a WEB browser asks again for your credentials. Submit this form and you are now fully setup for Two Factor Authentication.  
 + 
 +A private email address is necessary to allow you to reset 2FA if necessary. 
 + 
 +[[services:2fa|Back to 2FA main page]]
  
services/2fa/continued.1615114834.txt.gz · Last modified: by deul

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
CC Attribution-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki