Differences

This shows you the differences between two versions of the page.

--- institute_lorentz:2fa-introduction [2021/06/07 05:52] – [Introduction] lenocil
+++ institute_lorentz:2fa-introduction [2022/05/02 09:26] (current) – [2FA-enabled Logins] lenocil
@@ Line 12: / Line 12: @@
 More information can be found in the published TOTP open standard https://tools.ietf.org/html/rfc6238.
-As an alternative to TOTPs, the Lorentz Institute offers the possibility of registering your own [[https://fidoalliance.org/fido2/|FIDO2]] security key and use that as second factor authentication. If you do not possess a FIDO2-compatible key and would like to obtain one provided by the IL, please do not hesitate to email <support@lorentz.leidenuniv.nl>. Login via a security key offers currently the strongest security possible to protect your IL account from cyber criminals.
+As an alternative to TOTPs, the Lorentz Institute offers the possibility of registering your own [[https://fidoalliance.org/fido2/|FIDO2]] security key and use that as second factor authentication. Note however that self-registration of a security key is **only** possible after you have completed a first-time 2FA setup via one of the methods below and you have notified <support@lorentz.leidenuniv.nl>. If you do not possess a FIDO2-compatible key and would like to obtain one provided by the IL, please do not hesitate to email <support@lorentz.leidenuniv.nl>. Login via a security key currently offers the strongest security possible to protect your IL account from cyber criminals.
+[[:services:2fa:acronyms|Note on acronyms]]
 ===== First-time 2FA Setup =====
-FA setup is different depending on whether you own a smart phone or not. Users without smart phone will have to use their personal computer. 2FA requires you to provide the Lorentz Institute with your private email address ((Used only for important security communications related to your IL account))
+FA setup is different depending on whether you own a smart phone, a personal computer or none of the two. Users without smart phone will have to use their personal computer or a FIDO2-compatible security key. 2FA requires you to provide the Lorentz Institute with your private email address ((Used only for important security communications related to your IL account)). Once that is on record, please follow the link below that is appropriate to your situation
-  * [[https://www.lorentz.leidenuniv.nl/www/people/login|Make sure your private email address is in our database]]
   * [[institute_lorentz:2fa-smartphone|Setup via a smart phone]]
   * [[institute_lorentz:2fa-pc|Setup via a personal computer]]
+  * [[institute_lorentz:2fa-key|Setup via a FIDO2 Security Key]]
 ===== 2FA-enabled Logins =====
@@ Line 28: / Line 30: @@
 | [[https://www.lorentz.leidenuniv.nl/www/people/user/services|Account Services]]|
+| [[https://webmail.lorentz.leidenuniv.nl/|Webmail]]|
 | [[https://remote.lorentz.leidenuniv.nl|Remote Workspace]]|
 | [[https://gitlab.lorentz.leidenuniv.nl|GitLab]]|
 | [[https://xmaris.lorentz.leidenuniv.nl:4433/| xmaris OpenOnDemand]]|
-| [[https://videoconf.lorentz.leidenuniv.nl| Videoconference System ]]|
   * gain [[Shell access]] to the Lorentz Institute SSH server
   * login to the IL GNU/Linux workstations

Computer Documentation Wiki

User Tools

Site Tools

Differences

Page Tools