Computer Documentation Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
=====First Time Access=====
====With a Smart Phone====
First of all, you need to install an APP on your Smart Phone which will record a secret key that we provide to you, and which will also produce the passcodes for 2FA. You can download the ''%%FreeOTP%%'', ''%%Google Authenticator%%'', ''%%NetIQ%%'' or any other app that can produce ''%%TOTP%%''passcodes from either:

|[[https://play.google.com/store/apps/details?id=org.fedorahosted.freeotp&hl=nl&gl=US|{{:services:android.png?nolink&150|}}]]|[[https://apps.apple.com/nl/app/freeotp-authenticator/id872559395#?platform=iphone|{{:services:apple.png?nolink&150|}}]]|[[https://f-droid.org/en/packages/org.fedorahosted.freeotp/|{{ :services:2fa:get-it-on.png?nolink&150|}}]] |

<figure>{{:lion:2fa:lion1.png?400 |}}<caption>2FA Login screen (Click image to enlarge)/</caption></figure>
\\
After you have installed one of the two APPs you are ready to proceed. You now have to go to a web page that helps you setup 2FA. This page is located in our [[https://local.strw.leidenuniv.nl/services/?node=316|Self Service area]]. When you access that page you are redirected to the new Observatory Identity Provider and presented with a login window.
\\

<figure>{{:lion:2fa:lion2.png?400 |}}<caption>2FA setup secret key form (Click image to enlarge).</caption></figure>
\\
After entering your account credentials you are presented a QR code on the next page. Now use your smart phone APP to scan this QR code. This QR code is in fact your personal secret key, which you are now saving to your smart phone.
\\

 
<figure>{{:lion:2fa:lion6.jpg?200 |}}<caption>FreeOTP ID block after scanning QR code (Click image to enlarge).</caption></figure>
\\
 Once you scanned the QR code you get an identity block on your smart phone screen indicating the Observatory Identity server and your username, in this case we show the FreeOTP APP: 
\\

<figure>{{:lion:2fa:lion7.jpg?200 |}}<caption>FreeOTP Generated passcode (Click image to enlarge).</caption></figure> 
\\
To generate a passcode to fill into the WEB page just click the identity block on your smart phone. You are now presented a six digit number. Copy this number to the WEB page. Note that there is a little timer to the left of the passcode. This passcode is valid for the period the timer is shown. This period is 30 seconds. Within this period you must transfer the code to the WEB page and hit the Submit button. If you are too late, the next 30 seconds period start and another passcode is shown.



Since you are now setting up 2FA for the first time, you may also type in a name for the device from which you are getting the passcodes. It is merely a tag for later use. Having filled in all required fields, you continue to ''%%Submit%%'' the next form.

Now follow the steps from section [[services:2fa:continued|Remaining Setup]]
Computer Documentation Wiki

User Tools

Site Tools

Page Tools
