User Tools

Site Tools


services:2fa:smartphone

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
services:2fa:smartphone [2021/03/04 14:34]
lenocil [With a Smart Phone]
services:2fa:smartphone [2021/03/10 18:21] (current)
deul
Line 1: Line 1:
 =====First Time Access===== =====First Time Access=====
 ====With a Smart Phone==== ====With a Smart Phone====
-First of all you need to install an APP on your Smart Phone which will record a secret key we provide to you, and which also will produce the passcodes for 2FA. You can download the ''%%FreeOTP%%'' or ''%%Google Authenticator%%'' from either:+First of allyou need to install an APP on your Smart Phone which will record a secret key that we provide to you, and which will also produce the passcodes for 2FA. You can download the ''%%FreeOTP%%''''%%Google Authenticator%%'', ''%%NetIQ%%'' or any other app that can produce ''%%TOTP%%''passcodes from either:
  
-|[[https://play.google.com/store/apps/details?id=org.fedorahosted.freeotp&hl=nl&gl=US|{{:services:android.png?nolink&150|}}]]|[[https://apps.apple.com/nl/app/freeotp-authenticator/id872559395#?platform=iphone|{{:services:apple.png?nolink&150|}}]]|[[https://f-droid.org/en/packages/org.fedorahosted.freeotp/|{{https://fdroid.gitlab.io/artwork/badge/get-it-on.png?150 }}]] |+|[[https://play.google.com/store/apps/details?id=org.fedorahosted.freeotp&hl=nl&gl=US|{{:services:android.png?nolink&150|}}]]|[[https://apps.apple.com/nl/app/freeotp-authenticator/id872559395#?platform=iphone|{{:services:apple.png?nolink&150|}}]]|[[https://f-droid.org/en/packages/org.fedorahosted.freeotp/|{{ :services:2fa:get-it-on.png?nolink&150|}}]] |
  
-{{:services:idp.png?400 |}}After you have installed either APP you are ready to proceed. You now go to a web page that helps you setup 2FA. This page is located in our [[https://local.strw.leidenuniv.nl/services/?node=316|Self Service area]]. When you access that page you are redirected to the new Observatory Identity Provider and presented with a login window. +<figure>{{:services:idp.png?400 |}}<caption>2FA Login screen (Click image to enlarge)/</caption></figure>
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\+
 \\ \\
 +After you have installed one of the two APPs you are ready to proceed. You now have to go to a web page that helps you setup 2FA. This page is located in our [[https://local.strw.leidenuniv.nl/services/?node=316|Self Service area]]. When you access that page you are redirected to the new Observatory Identity Provider and presented with a login window.
 \\ \\
 +
 +<figure>{{:services:idp2.png?400 |}}<caption>2FA setup secret key form (Click image to enlarge).</caption></figure>
 \\ \\
 +After entering your account credentials you are presented a QR code on the next page. Now use your smart phone APP to scan this QR code. This QR code is in fact your personal secret key, which you are now saving to your smart phone.
 \\ \\
  
-{{:services:idp2.png?400 |}}After typing in your account credentials you are present a QR code on the next page. Now use your smart phone APP to scan this QR code. This QR code is in fact your personal secret key, which you are now saving to your smart phone. 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
    
-{{:services:otp1.jpg?200 |}} Once you scanned the QR code you get an identity block on your smart phone screen indicating the Observatory Identity server and your username, in this case we show the FreeOTP APP: +<figure>{{:services:otp1.jpg?200 |}}<caption>FreeOTP ID block after scanning QR code (Click image to enlarge).</caption></figure>
 \\ \\
 + Once you scanned the QR code you get an identity block on your smart phone screen indicating the Observatory Identity server and your username, in this case we show the FreeOTP APP: 
 \\ \\
 +
 +<figure>{{:services:otp2.jpg?200 |}}<caption>FreeOTP Generated passcode (Click image to enlarge).</caption></figure> 
 \\ \\
-\\ +To generate a passcode to fill into the WEB page just click the identity block on your smart phone. You are now presented a six digit number. Copy this number to the WEB page. Note that there is a little timer to the left of the passcode. This passcode is valid for the period the timer is shown. This period is 30 seconds. Within this period you must transfer the code to the WEB page and hit the Submit button. If you are too late, the next 30 seconds period start and another passcode is shown. 
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-\\ +
-{{:services:otp2.jpg?200 |}} To generate a passcode to fill into the WEB page just click the identity block on your smart phone. You are now presented a six digit number. Copy this number to the WEB page. Note that there is a little timer to the left of the passcode. This passcode is valid for the period the timer is shown. This period is 30 seconds. Within this period you must transfer the code to the WEB page and hit the Submit button. If you are too late, the next 30 seconds period start and another passcode is shown.+
  
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
-\\ 
  
 Since you are now setting up 2FA for the first time, you may also type in a name for the device from which you are getting the passcodes. It is merely a tag for later use. Having filled in all required fields, you continue to ''%%Submit%%'' the next form. Since you are now setting up 2FA for the first time, you may also type in a name for the device from which you are getting the passcodes. It is merely a tag for later use. Having filled in all required fields, you continue to ''%%Submit%%'' the next form.
  
 Now follow the steps from section [[services:2fa:continued|Remaining Setup]] Now follow the steps from section [[services:2fa:continued|Remaining Setup]]
services/2fa/smartphone.1614868482.txt.gz · Last modified: 2021/03/04 14:34 by lenocil