Two-Factor authentication

TWO-FACTOR AUTHENTICATION

WHAT IS TWO-FACTOR AUTHENTICATION?

Two-factor authentication adds an extra layer of security in that you login to AAU’s VPN connection using your username and password and an additional one-time passcode which is sent to your mobile device (such as your mobile phone, smartphone or tablet). If you use NemID or online banking, you might have already been introduced to two-factor authentication.

In increasing safety and complying with the General Data Protection Regulation, AAU now adds an extra layer of security by introducing two-factor authentication at AAU in 2018.

Two-factor authentication will be implemented gradually to all AAU departments and units, and all staff members will receive an email when two-factor authentication is to be implemented in their department or unit.

HOW TO USE TWO-FACTOR AUTHENTICATION

If you want to continue using VPN, you must sign up for two-factor authentication. Please note that when signing up for two-factor authentication your computer must be connected to AAU’s network.

How to sign up for two-factor authentication:

STEP1 – SELECT AUTHENTICATION METHOD

To be able to use two-factor authentication, you must select one of three methods:

1. SMS Passcode (recommended)

Download the app SMS Passcode from Apple iTunes Store or Google Play
Launch the app and follow the steps

2. Authenticator (alternative method)

Download an app that supports TOTP (Time-based One-Time Password), such as Google Authenticator, from Apple iTunes Store or Google Play

3. Text messages (alternative method)

This method lets you use SMS text messages. In step2 you’ll find more information on how to set up this authentication method.

STEP2 – SETTING UP TWO-FACTOR AUTHENTICATION

You must register your selected authentication method at mfa.aau.dk - Please note that when signing up for two-factor authentication your computer must be connected to AAU’s network.

Log on using your AAU email address and password.

+
SMS PASSCODE (RECOMMENDED)
SMS PASSCODE (RECOMMENDED)
- Your username is automatically entered
- Enter your mobile phone number in the field ‘Primært telefonnummer’ (the mobile phone number you have entered in the SMS Passcode app). PLEASE NOTE: This must be a Danish 8-digit mobile phone number or an international mobile phone number including a country code (for example 12345678 or +29 123456). The system’s default country code is +45 which is the country code for Denmark; therefore, you’ll still be able to receive text messages abroad if you have entered a Danish 8-digit mobile phone number. AAU’s local extension numbers, such as 61234 cannot be entered into the system.)
- Click 'Save'
+
AUTHENTICATOR (ALTERNATIVE METHOD)
AUTHENTICATOR (ALTERNATIVE METHOD)
- Your username is automatically entered
- In the field ‘Afsendelsespolitik’, uncheck ‘Sat af administrator’ and select ‘AAU TOTP Token’
- Under ‘Token ID’ click ‘Generer’ and you’ll see a QR code
- Scan this code using your Authenticator app. The code will automatically appear as a string of text. You can also copy the Token ID into the section - you’ll find the Token ID just above the QR code.
- Click 'Save'
+
TEXT MESSAGES (ALTERNATIVE METHOD)
TEXT MESSAGES (ALTERNATIVE METHOD)
- Your username is automatically entered
- Enter your mobile phone number in the field ‘Primært telefonnummer’
  PLEASE NOTE: This must be a Danish 8-digit mobile phone number or an international mobile phone number including a country code (for example 12345678 or +29 123456). The system’s default country code is +45 which is the country code for Denmark; therefore, you’ll still be able to receive text messages abroad if you have entered a Danish 8-digit mobile phone number. AAU’s local extension numbers, such as 61234 cannot be entered into the system.
- In the field ‘Afsendelsespolitik’, uncheck ‘Sat af administrator’ and select ‘SMS only’
- Click ‘Gem’ (save)

YOU ARE NOW READY TO USE TWO-FACTOR AUTHENTICATION

When you launch an AAU service or system that requires two-factor authentication, you’ll receive a one-time passcode via the authentication method selected at mfa.aau.dk, and the AAU service or system will ask you to enter this passcode.

NB. FOR STUDENTS

The usual systems for students, such as Moodle, Digital Eksamen and email do NOT require VPN connection. The VPN connection is only used for accessing special systems at AAU, such as fileshares and Print and copy.

AAU It Services

Menu

Two-Factor authentication