ホーム ー Single Sign-On (English) ー Multi-Factor Authentication (MFA)
ホーム ー Single Sign-On (English) ー Multi-Factor Authentication (MFA)
Japanese / English
At Tohoku University, multi-factor authentication (MFA) is required for SSO regardless of whether you are on or off campus.
This page explains the authentication methods available and how to set them up.
Multi-factor authentication (MFA) is a mechanism that performs identity verification using an additional factor in addition to your ID and password. For improved security, Tohoku University has introduced multi-factor authentication.
The following three authentication methods are available for multi-factor authentication:
1. FIDO Authentication
FIDO authentication is also called password-less authentication, and password input is not required. A representative example is Windows Hello.
Login takes less effort and has strong resistance to phishing attacks.
(Reference) Available FIDO devices (Secioss official site)
2. One-Time Password (Token)
Enter the password displayed in an Authenticator app installed on your smartphone.
“Google Authenticator” or “Microsoft Authenticator” can be used.
3. One-Time Password (Email Authentication)
Receive the password by email and enter it in the login screen.
This is set up initially. The initial notification destination is TU Mail / DC Mail.
The initial setup for multi-factor authentication is “one-time password by email.”
One-time passwords are delivered to TU Mail / DC Mail.
By registering multiple authentication methods, you can still log in even if one of them cannot be used.
FIDO authentication (such as Windows Hello) allows you to log in smoothly because password input is not required.
Note: You can log in even with the default settings.
For how to set up multi-factor authentication, please refer to the following material:
English
Multi-Factor Authentication (MFA)