Additional Setup Guide (Passkey - WindowsPC - PIN)

You must register your biometric authentication on your device (WindowsPC) in advance.

Note: If you are using the same account on the same device and have already registered it as a keio.jp authentication factor using biometric authentication, no additional registration is required.

1. Multi-Factor Authentication (MFA) Setup (Passkey)

Please refer to the descriptions provided either to the right of or below the images for an explanation of each step

1.1. Access the Multi-Factor Authentication (MFA) settings page

Access the Multi-Factor Authentication settings page( https://keio.okta.com/enduser/settings )on your smartphone's browser and log in with your keio.jp account (ID and password).

1.2. Under "Security Method," click "Set up" in the "Security key or biometric authenticator" section.

Please Note:

When registering your second or subsequent passkey, the label in the column "Security Key or Biometric Authenticator" will change to "Passkey."

1.3. Verify with your phone

To verify via SMS, tap "Receive code via SMS." To verify via voice call, tap "Receive a code via SMS."

1.4. Verify with your phone

Enter the verification code sent to your registered phone number (6 digits for SMS or 5 digits for voice call) and tap "Verify."

1.5. Verify with your password

Enter your keio.jp account password and tap "Verify."

1.6. Set up security methods

Click "Setup".

1.7. Setting up a passkey

Click "Set up" on the next screen as well.

1.8. If a pop-up screen is displayed in your browser and you are prompted to save a passkey

If a Google Chrome popup appears prompting you to register a passkey, click "Save another way".

1.9. If a pop-up screen is displayed in your browser and you are prompted to save a passkey

Click "Windows Hello or external security key." (On macOS, you may want to select "iCloud Keychain." If you typically manage your passkeys using Google Password Manager or a similar service, you may select that option instead.)

1.10. Factor selection screen for Windows Hello (Windows Security screen)

(If you select a PIN: WinOS ver 23H2 )

(If you select a PIN: WinOS ver 25H2 )

Note: Registration via PIN is also available as an alternative to biometric authentication (fingerprint or facial recognition).

　It is recommended that you register a PIN as a backup after setting up biometric authentication (fingerprint or facial recognition).

Note: What is a PIN (Personal Identification Number)?

　Identity verification is performed using a Personal Identification Number (PIN) that is stored only on your PC. While it is often perceived as being similar to a password, a PIN can only be used on the specific device where it was registered.

1.11. Passkey registration completion screen (Windows Security screen)

Click "OK."

1.12. MFA settings page for the browser (Security method)

Once the registration is successful, the screen will automatically redirect, and your device will be registered.

We recommend setting a nickname so you can easily distinguish between your accounts and devices.

Please Note:

It is possible to register multiple passkeys for the same device or account.
If you delete the most recent passkey, you will no longer be able to log in, even if the setting still appears to be active.
When deleting a passkey, please check the registration date and time of the security methods on the multi-factor authentication (MFA) settings page, and ensure you only delete the older entries.

End of guide