User Tools

Site Tools


services:2fa

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
services:2fa [2021/03/22 19:39] – [Introcution] deulservices:2fa [2022/01/12 10:35] (current) – [Introduction] deul
Line 1: Line 1:
-======Two-Factor Authentication (2FA)======+======Two-Factor Authentication (2FA) @ STRW======
 {{ services:2fa_graphic.jpg?nolink&400|}} {{ services:2fa_graphic.jpg?nolink&400|}}
  
Line 6: Line 6:
   * [[:services:2fa#setup_ssh_keys|Setup ssh keys]]   * [[:services:2fa#setup_ssh_keys|Setup ssh keys]]
 =====Introduction====== =====Introduction======
-  * [[:services:2fa:introduction|why, what and how]]+  * [[:services:2fa:introduction|why, where and how]]
  
-======Timeline===== +[[:services:2fa:acronyms|Note on acronyms]]
-We will not implement 2FA at the same time for all services, but will gradually enable 2FA according to [[services:2fa:timeline|this timeline]].+
  
 ======Working with 2FA ===== ======Working with 2FA =====
Line 24: Line 23:
   * [[services:2fa:continued|remaining setup]]   * [[services:2fa:continued|remaining setup]]
  
- +=====Browser Extension===== 
 +For several popular internet browsers (Edge, Firefox, Chrome, ...) there is a very convenient add-on/extension/plugin that can be installed on your Personal Computer to generate the 2FA passcodes. This also works for the Multi-Factor Authentication (MFA) of Leiden University uaccount services. After 2FA / MFA is activated, here are the steps to install and activate the browser extension: 
 +  * [[services:2fa:browserextension|Authenticator Extension]]
  
 =====Regular use of 2FA===== =====Regular use of 2FA=====
Line 86: Line 86:
   * Reset your password   * Reset your password
   * Re-initiate the 2FA process as described above in the 'First Time Access' section   * Re-initiate the 2FA process as described above in the 'First Time Access' section
 +====Error Message====
 +If you see **Two-factor authentication has not been setup for your account <accountname> yet.  Please refer to
 + the computer documentation on the institute webpage for the description and setup of 2FA**, this means your secret code has not trickled down to this system yet. It may take up to 30 minutes after setting up 2FA before all Observatory systems know about your secret key. Thus be patient ant try again in 30 minutes. 
 +
 ====Code not accepted==== ====Code not accepted====
-Note that the passcodes have a lifespan of 30 seconds and that both the Observatory computers and your Smart Phone or personal computer need to be in time sync. You must enter the 2FA app settings and select "Time synchronisation". After this the codes should work again. You might also have been just a bit too late confirming your passcode. In that case repeat the process of creating the passcode en entering it into the prompt/web form.+Note that the passcodes have a lifespan of 30 seconds and that both the Observatory computers and your Smart Phone or personal computer need to be in time sync. You must enter the 2FA app settings and select "**Time synchronisation**". After this the codes should work again. You might also have been just a bit too late confirming your passcode. In that case repeat the process of creating the passcode en entering it into the prompt/web form.
  
 In principle the system also allows passcodes that are from the previous or next timeslot. So you should have a total of 90 seconds to deliver a trusted passcode. This period is shortened if the Observatory time keeping differs slightly from your smart phone or personal computer time keeping. In principle the system also allows passcodes that are from the previous or next timeslot. So you should have a total of 90 seconds to deliver a trusted passcode. This period is shortened if the Observatory time keeping differs slightly from your smart phone or personal computer time keeping.
services/2fa.1616441942.txt.gz · Last modified: 2021/03/22 19:39 by deul