Two-factor authentication manual

Here you find step-by-step instructions on how to set up and log in with two-factor authentication.

You can find detailed information about your account, your password or two-factor authentication in our documentation.

Frequently asked questions and problems are explained in our FAQs.

Content

Set up two-factor authentication

Please set up at least 2 of the specified variants to prevent accidental locking out of your account (e.g. if your cell phone or the Security Key is damaged and can therefore no longer be used).

Authenticator App - Android and iOS

Please note: the installation is described using the privacyIDEA Authenticator app. You are free to use a different authenticator app. The apps are linked to your account in the Account Portal in the same way for all authenticators: use the app to scan the QR code in the Account Portal or enter the secret key in the app. You will find the secret key under the QR code in the Account Portal.

Install the authenticator app

  1. Open the Play Store (or App Store) on your cell phone/mobile device.
  2. Search for privacyIDEA Authenticator (NetKnights GmbH).
  3. Install the app and open it.
  4. Tap on the arrow pointing to the right to view the short info.
  5. Then tap on the green tick mark.

Connect authenticator app with your account

  1. Log in to the Account Portal with the user ID for which you want to set up a two-factor authentication.
    1. If you have never used two-factor authentication (2FA) before, click on Enable.
    2. If you have already activated two-factor authentication (2FA), click on Manage. Your existing tokens will be displayed. Then click on New token.
  2. Open the authenticator app on your mobile device.
  3. Tap on the blue circle in the middle of the mobile device. (You may need to allow the app to take pictures and videos here).
  4. Point your cell phone camera at the QR code on the PC screen to scan it.
  5. Then enter the generated one-time password (6 digits) on the PC, which is displayed on the mobile phone/mobile device.
  6. Click on Verify. The second factor has been set up successfully.

Security Key, Windows Hello, iCloud Keychain

Please note: As Windows Hello is device-bound, this variant can only be used on the device on which it has been activated! It is advisable that you set up another second factor (Authenticator App or Security Key)

Security Key

  1. Log in to the Account Portal with the user ID for which you want to set up a two-factor authentication.
    1. If you have never used two-factor authentication (2FA) before, click on Enable.
    2. If you have already activated two-factor authentication (2FA), click on Manage. Your existing tokens will be displayed. Then click on New token.
  2. Click on Security Key, Windows Hello, iCloud Keychain.
  3. Connect the security key to your device or hold it to your mobile device (NFC).
  4. Enter a personal mnemonic in the Description * field.
  5. Click on Set up now.
    • If you are using a Windows device and are prompted to set up Windows Hello, click CANCEL.
  6. Follow the instructions on your device. (The instructions differ between Windows, macOS, Linux and their individual versions).
    • Among other things, you will be instructed to touch the security key. To do this, tap the round logo/the golden area/button with your finger.

Windows Hello-PIN

Activate Hello-PIN on device (PC/laptop)

  1. Enter sign in options in the Windows search field and open it. If you cannot find a search field, proceed as follows:
    1. Click on the Windows Start icon (window), and here on Settings (cogwheel).
    2. Click on Accounts and then on Sign-in options in the menu on the left.
  2. Click on Windows Hello PIN and then on Add or Set up.
  3. Confirm your identity with your password.
  4. Set up the PIN.

Information: The next time you start or unlock your PC, you will be asked for this PIN instead of the password.

Please note: this PIN is only valid for the device on which you have set it up. If you would also like to set up a PIN on another device, please follow the necessary procedure for the corresponding operating system.

Connect Hello-PIN to your Account

  1. Log in to the Account Portal with the user ID for which you want to set up a two-factor authentication.
    1. If you have never used two-factor authentication (2FA) before, click on Enable.
    2. If you have already activated two-factor authentication (2FA), click on Manage. Your existing tokens will be displayed. Then click on New token.
  2. Click on Security Key, Windows Hello, iCloud Keychain.
  3. Enter a personal mnemonic in the Description * field.
  4. Click on Set up now.
  5. Follow the instructions on your device. (The instructions differ between Windows, macOS, Linux and their individual versions).

iCloud Keychain

Activate iCloud Keychain on device (PC/laptop)

At the moment, this variant only works with Safari on macOS. Chrome and Firefox are not supported.

You can find out how to set up the Apple ID in the macOS manual.

Connect iCloud Keychain to your Account

  1. Log in to the Account Portal with the user ID for which you want to set up a two-factor authentication.
    1. If you have never used two-factor authentication (2FA) before, click on Enable.
    2. If you have already activated two-factor authentication (2FA), click on Manage. Your existing tokens will be displayed. Then click on New token.
  2. Click on Security Key, Windows Hello, iCloud Keychain.
  3. Enter a personal mnemonic in the Description * field.
  4. Click on Set up now.
  5. Follow the instructions on your device. (The instructions differ between Windows, macOS, Linux and their individual versions).

Password Manager: Proton Pass

Registration and installation of Proton Pass

  1. Open https://pass.proton.me/ and click on Create a Proton account.
  2. Select the Proton Free option.
  3. Enter your e-mail address and choose a password (note: please do NOT use the same password as for your university account).
  4. Click on Start using Proton Pass now. A new window will open.
  5. Enter the verification code you received by email and click Verify.
  6. In the Secure your account window, click Download PDF to get the Recovery kit. Keep this file safe! Follow the Safe storage tips on the PDF.
  7. Select I understand that if I lose my recovery details, I may permanently lose access to my account and click Continue.
  8. Confirm the installation of Proton Pass (add it as an add-on to your browser).
  9. You can now log in to your Proton Pass account.

You can find more information about using Proton Pass at https://proton.me/support/use-pass-web.

Connect Proton Pass to your account

  1. Log in to the Account Portal with the user ID for which you want to set up a two-factor authentication.
    1. If you have never used two-factor authentication (2FA) before, click on Enable.
    2. If you have already activated two-factor authentication (2FA), click on Manage. Your existing tokens will be displayed. Then click on New token.
  2. Click here under the QR code to copy the secret key*.
  3. Log in to https://pass.proton.me.
  4. Click on the plus symbol at the top right.
  5. Click on Login.
  6. Enter the following data:
    • Title: give the factor a name that is meaningful to you.
    • Username: leave this field empty.
    • Password: leave this field empty.
    • *2FA secret key (TOTP): enter the secret key from your account portal.
    • Websites: https://idp.uibk.ac.at/
    • Note: if desired.
  7. Click on Create login to save your details.

Detailed information on your specific operating system (macOS or Windows) and browser can be found at https://proton.me/support/pass-2fa.

Log in with two-factor authentication

Authenticator App - Android and iOS

  1. Open the service (VIS:online, OpenOlat, LFU:online, ...) for which you want to log in.
  2. Enter your user ID and the corresponding password as usual.
  3. Click on Login.
  4. Open the app on your mobile device. The available tokens will be displayed. The one-time password of a token consists of 6 digits that are updated every 30 seconds.
  5. Enter these 6 digits in the corresponding field on your login page.
  6. Click on Validate. You are now successfully logged in.

If you are unable to log in with an authenticator app, you can find possible sources of error in our FAQs.

Security Key, Windows Hello, iCloud Keychain

  1. Open the service (VIS:online, OpenOlat, LFU:online, ...) for which you want to log in.
  2. Enter your user ID and the corresponding password as usual.
  3. Click on Login.
  4. Click on Start under Security Key. A new window opens.
  5. Choose whether you want to use the Windows Hello pin, the security key or the iCloud keychain.
  6. Follow the instructions on the screen. (The instructions differ between Windows, macOS, Linux and their individual versions).

Password Manager: Proton Pass 

  1. Open the service (VIS:online, OpenOlat, LFU:online, ...) for which you want to log in.
  2. Enter your user ID and the corresponding password as usual.
  3. Click on Login.
  4. Click on Start under Security Key. The Proton Pass Verification code window opens.
  5. Click on Copy & fill in. The 6-digit code is inserted automatically.

Questions about or problems with your two-factor authentication? Feel free to contact us!

Service Desk / Service-Hotline
  (0512) 507-23999 (Monday- Friday, 08:00 AM to 04.00 PM)
E-Mail: ZID-Service@uibk.ac.at

Nach oben scrollen