User Tools

Site Tools


lion:2fa

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
lion:2fa [2021/09/20 06:56] – [First Time Access] deullion:2fa [2022/01/12 10:36] (current) – [Two-factor Authentication @ LION] deul
Line 4: Line 4:
  
 Please read this document carefully or start from [[:services:2fa#first_time_access|here]] Please read this document carefully or start from [[:services:2fa#first_time_access|here]]
-=====Introduction===== 
-  * [[:lion:2fa:introduction|Why, where and how]] 
-The process of implementing 2FA @ LION will take some time, and has the below timeline (provided everything works out as planned). 
-===Timeline=== 
-  * 2FA is already activated for Webmail,  
-  * next week (Tuesday September 21, 2FA will be activated for Windows Desktop login, Remote console access.  
-    * During these weeks TOO and LIS desktops will be activated 
-  * Three week later (Tuesday October 12) the VPN service will be 2FA enabled.  
-  * One week later (Tuesday October 17) the ssh servers will require 2FA 
-  * During the second half of October all issues should be resolved and then LION will be fully 2FA compliant.  
  
 +
 +[[:services:2fa:acronyms|Note on acronyms]]
 ---- ----
 ======Working with 2FA ===== ======Working with 2FA =====
Line 20: Line 12:
  
 =====First Time Access===== =====First Time Access=====
-{{ :lion:yubikey.jpg?100|}}{{ :lion:smartphones.jpg?200|}}Before you can use 2FA we and you need to setup a few things. +{{ :lion:smartphones.jpg?200|}}{{ :lion:yubikey.jpg?100|}}Before you can use 2FA we and you need to setup a few things. 
   * **You should own a Smart Phone or own/obtain a YubiKey from the IT department**: Since during the 2FA process you need to generate **passcodes (a six digit number)** automatically based on a secret key, or enable **push authentication** you and the 2FA system have exchanged, you need a device to perform this action. This device can either be an app on a Smart Phone or a YubiKey hardware device. If you don not own a Smart Phine or cannot use that for any reason, contact the Physics IT Helpdesk to obtain a Yubikey.   * **You should own a Smart Phone or own/obtain a YubiKey from the IT department**: Since during the 2FA process you need to generate **passcodes (a six digit number)** automatically based on a secret key, or enable **push authentication** you and the 2FA system have exchanged, you need a device to perform this action. This device can either be an app on a Smart Phone or a YubiKey hardware device. If you don not own a Smart Phine or cannot use that for any reason, contact the Physics IT Helpdesk to obtain a Yubikey.
  
lion/2fa.1632120996.txt.gz · Last modified: 2021/09/20 06:56 by deul