The sign-in method is now registered and ready for use.Select Next in the dialog with the QR code (from point 9) and paste - or enter the code in the box that appears.The one-time code becomes visible and will be copied to the clipboard. Double-click the entry and touch your YubiKey.If the QR code is visible, it will automatically fill in the fields required.Insert your YubiKey and open Yubico Authenticator.Leave this window like this until further notice. Click I want to use a different authenticator app.The setup of two-factor authentication is now starting.If you see the dialog box below, log in with your NTNU account.
Select the account you want to prepare for two-factor authentication. If you have already enabled two-factor authentication and would like to use a security key as an alternative method, go directly to the Security key as an alternative method section. To complete the setup, you will need a computer and a security key. Once you have been informed that two-factor authentication is about to be activated for your user, it is a good idea to make everything ready for the day it is introduced. If you use Mac or Linux, download Yubico Authenticator from. If you have a Windows PC, install Yubico Authenticator from Windows Store. It's this program that gives you one-time codes for two-factor authentication. You also need to install the Yubico Authenticator program on your computer. The cost must be covered by your department. Before you begin, you must have acquired your own security key. (This “Use Security Key” step is already the standard experience in Safari and Firefox for the traditional Duo Prompt.)įor full details on this change to the process and information on minimum web browser requirements, see Duo Updates to USB Security Key Method.įor questions or issues using Two-Step Login, contact the IT Service Desk. Previously, users could tap their security key to complete authentication as soon as the Duo Prompt loaded. Similar to when users authenticate with Duo using other methods, they will need to click a link in their browser to trigger the authentication request to the key. The new protocol will also add a step to the security key authentication process for Chrome and Microsoft Edge users. 
When they click Continue, the key will be updated to use the improved WebAuthn security protocol. To accommodate this change, Duo, the vendor that supports Cornell’s Two-Step Login service, will move to a different security protocol in mid-January 2022 called WebAuthn.Īfter Duo's scheduled change, USB security key users will see a one-time prompt during the Two-Step Login process, asking them to update their key. This technology has been used for USB security keys such as those many at Cornell use to authenticate with Two-Step Login. In the coming weeks, Google will end support for the U2F authentication standard in Chrome.
0 kommentar(er)
