User Tools

Site Tools


lion:2fa:enroll

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
lion:2fa:enroll [2021/09/13 19:44] deullion:2fa:enroll [2025/09/02 10:34] (current) seitzinger
Line 1: Line 1:
 ======Enroll in DUO====== ======Enroll in DUO======
 ===You have to enroll the two factor authentication (2FA) DUO.==== ===You have to enroll the two factor authentication (2FA) DUO.====
 +Note that in order to use the DUO app you need to have a modern OS version on your Smart Phone:
 +  * Android 8.0 or greater
 +  * IOS 12.0 or greater
 +If your Smart Phone is running an older OS version, please contact helpdesk@physics.leidenuniv.nl. We can install a special key set that will work with more general TOTP (non-DUO) apps lie FreeOTP or Google Authenticator.
  
-The first step in this procedure is that you register yourself in the 2FA system called DUO. For this, login with your PHYSICS account on the WEB-mail, http://webmail.physics.leidenuniv.nl+====Standard DUO setup==== 
 +The first step in this procedure is that you register yourself in the 2FA system called DUO. For this, login with your PHYSICS account on the WEB-mail, http://mail.physics.leidenuniv.nl
  
 You will now be presented a setup procedure, as show and explained below. Just follow the instructions and you are all set for two factor authentication. You will now be presented a setup procedure, as show and explained below. Just follow the instructions and you are all set for two factor authentication.
Line 16: Line 21:
  
 {{ :lion:2fa:duo_2.png?400 |}} {{ :lion:2fa:duo_2.png?400 |}}
 +We will setup the most standard situation, where you have a smart phone on which you can install the DUO app. Note that if you own an old Android phone, you must be a version 8.0 or higher. If this is not the case, you will need to ask for a yubikey hardware device from the IT department.
  
 {{ :lion:2fa:duo_3.png?400 |}} {{ :lion:2fa:duo_3.png?400 |}}
 +In order for the DUO system to be able to push login authentication request sto your phone, you need to provide your mobile telephone number.
  
 {{ :lion:2fa:duo_4.png?400 |}} {{ :lion:2fa:duo_4.png?400 |}}
 +After providing the information you can continue the setup process.
  
 {{ :lion:2fa:duo_5.png?400 |}} {{ :lion:2fa:duo_5.png?400 |}}
 +DUO needs to know about your smart phone operating system since there are slight difference between those systems.
  
 {{ :lion:2fa:duo_6.png?400 |}} {{ :lion:2fa:duo_6.png?400 |}}
 +You must now go to the application store appropriate for yoyr phone's operating system and download/install the DUO app.
  
 {{ :lion:2fa:duo_7.png?400 |}} {{ :lion:2fa:duo_7.png?400 |}}
 +Once you have installed the app, you can use the + sign in the app to make it read the presented QRCode and let it learn you and our authentication keys.
  
 {{ :lion:2fa:duo_8.png?400 |}} {{ :lion:2fa:duo_8.png?400 |}}
- +Now everything is ready to continue to actually login to the application you were trying to access. In this case webmail.
-{{ :lion:2fa:duo_0.png?400 |}}+
  
 {{ :lion:2fa:duo_10.png?800 |}} {{ :lion:2fa:duo_10.png?800 |}}
 +You should have received an email from the DUO system explaining you successfully enrolled. It looks something like this.
 +
 +
lion/2fa/enroll.1631562252.txt.gz · Last modified: by deul