【After Mandatory】Procedure for users accessing keio.jp via PC (with Biometric Authentication)

These instructions are for performing authentication using only a computer, specifically for cases where the computer is equipped with biometric authentication (face or fingerprint recognition). You can check if your computer supports biometric authentication here: Okta Authentication Method Device Verification (Please access this link from the device you wish to check).

If your computer does not support biometric authentication, please follow the instructions below:

Multi-Factor Authentication (MFA) Setup Guide: Procedure for Non-Biometric PCs
Multi-Factor Authentication (MFA) Setup Guide: Procedure for Using Both PC and Smartphone

(When configuring multi-factor authentication on a second or subsequent device, you may skip the step titled "1. Multi-Factor Authentication Setup (Phone)" as the initial setup has already been completed. )

Note 1: Registering phone authentication when staying overseas (e.g., studying abroad)

Multiple phone numbers can be registered simultaneously, and international numbers can be specified. However, due to the specifications of the SMS/Voice authentication system used by Okta, authentication codes may not be delivered to phone numbers outside of Japan (+81). In such cases, the registration process will not be completed successfully.
If you do not receive an authentication code within approximately 3 minutes during registration, that phone number may not be compatible with SMS/Voice authentication. If this occurs, please ensure you register multiple alternative authentication factors to prepare for risks such as device malfunction or loss.

1. Multi-Factor Authentication Setup (Phone)

2. Multi-Factor Authentication Setup (Security Key or Biometric Authenticator)

3. Logging In to keio.jp (Passwordless Login via PC)

1. Multi-Factor Authentication Setup (Phone)

Please refer to the descriptions provided either to the right of or below the images for an explanation of each step

(When configuring multi-factor authentication on a second or subsequent device, you may skip the operations in this step, as the setup has already been completed.)

1.1. Access keio.jp

Access keio.jp (https://keio.jp) using your PC browser and log in with your keio.jp account (ID and password).

1.2. Click "Set up" in the "Phone" section.
(If you replace your computer, biometric authentication data will be lost, which will prevent you from logging in on your new device. To ensure you have a way to recover access on your own, please set up phone authentication if you have a phone available.)

1.3. Set up phone authentication

To register via SMS, select "SMS," choose "Japan" for "Country/Region," enter your phone number, and click "Receive code via SMS." To register via voice call, select "Voice call," choose "Japan" for "Country/Region," enter your phone number, and click "Receive code via voice call." (When "Voice call" is selected, an extension field will be displayed; please leave this field blank.)

1.4. Set up phone authentication

Enter the verification code (6 digits for SMS, 5 digits for voice call) sent to your registered phone number via SMS or voice message, and click "Verify."

1.5. Proceed to the Set up security methods screen and confirm that the “Continue” button is displayed.

If the “Continue” button appears below the security method setup screen, your phone-based multi-factor authentication setup is complete. Tap “Continue” to log in to keio.jp.

Next, to enable passwordless login, proceed to “Step 2. Set Up Multi-Factor Authentication (Security Key or Biometric Authenticator)” if you wish to configure multi-factor authentication using a security key or biometric authenticator.

2. Multi-Factor Authentication Setup (Security Key or Biometric Authenticator)

Please refer to the descriptions provided either to the right of or below the images for an explanation of each step

2.1. MFA Settings Page for browser

Access the Multi-Factor Authentication settings page (https://keio.okta.com/enduser/settings) using a web browser on your PC, and log in with your keio.jp account (ID and password).

2.2. Click "Set up" in the "Security Key or Biometric Authenticator" section under "Security Methods."

2.3. Verify with your phone

To authenticate via SMS, click "Receive code via SMS." To authenticate via voice call, click "Receive a voice call instead."

2.4. Set up phone authentication

Enter the verification code (6 digits for SMS, 5 digits for voice call) sent to your registered phone number via SMS or voice message, and click "Verify."

2.5. Verify with your password

Enter your keio.jp account password and tap "Verify."

2.6. Set up security methods

Click "Set up."

2.7. Set up security key or biometric authenticator

Click "Set up" on the next screen as well.

2.8. If a pop-up screen is displayed in your browser and you are prompted to save a passkey

If a Google Chrome popup appears prompting you to register a passkey, click "Save another way."

2.9. If a pop-up screen is displayed in your browser and you are prompted to save a passkey

Click "Windows Hello or external security key." (On macOS, you may want to select "iCloud Keychain." If you typically manage your passkeys using Google Password Manager or a similar service, you may select that option instead.)

2.10. Factor selection screen for Windows Hello (Windows Security screen)

(In the case of Windows OS version 23H2)

(In the case of Windows OS version 25H2)

Select one of the methods registered with Windows Hello to register your device.

We recommend that you use biometric authentication (fingerprint or facial recognition) if it is available.

(If you select a PIN: WinOS ver 23H2)

(If you select a PIN: WinOS ver 25H2)

Note: Registration via PIN is also available as an alternative to biometric authentication (fingerprint or facial recognition).

　It is recommended that you register a PIN as a backup after setting up biometric authentication (fingerprint or facial recognition).

Note: What is a PIN (Personal Identification Number)?

　Identity verification is performed using a Personal Identification Number (PIN) that is stored only on your PC. While it is often perceived as being similar to a password, a PIN can only be used on the specific device where it was registered.

2.11. Passkey registration completion screen (Windows Security screen)

Click "OK."

2.12. MFA settings page for the browser (Security method)

Once the registration is successful, the screen will automatically redirect, and your device will be registered.

3. Logging In to keio.jp (Passwordless Login via PC)

Please refer to the descriptions provided either to the right of or below the images for an explanation of each step

3.1. keio.jp sign-in screen on a computer browser

Access keio.jp (https://keio.jp). Click on the username input field and select your Keio ID (the one with "Passkey" or "Windows Hello" displayed underneath it).

3.2. Authentication screen using factors registered in Windows Hello (Windows Security screen)

(If verifying with a fingerprint: Win OS ver 23H2)

(If verifying with a fingerprint: Win OS ver 25H2)

Authenticate using your registered method (face or fingerprint) and confirm that you have successfully logged in to keio.jp.

(If verifying with a PIN: Win OS ver 23H2)

(If verifying with a PIN: Win OS ver 25H2)

Authentication via PIN is also available as an alternative to biometric authentication (fingerprint and facial recognition).

If the options for facial recognition, fingerprint authentication, or Personal Identification Number are not displayed

By clicking "More choices" you will be able to select the available elements.

End of Document.