Single sign-on login system for various systems with Tohokudai ID
What's New
April 3, 2024.
The old system (SRP) is no longer in operation.
February 20, 2024.
With the update of SeciossLink, the system name of each icon in the SeciossLink portal is now displayed in Japanese or English depending on the language setting.
January 29, 2024
Updated "Frequently Asked Questions".
January 11, 2024
Updated "System Update Schedule".
January 9, 2024
Video "2 Minute Guide to Tohokudai ID Login" released.
December 4, 2023
Various manuals released.
November 30, 2023
we opened this site to the public.
1. User Guide
1-1. System Overview
(1) What is SeciossLink
"SeciossLink" is a Single Sign-On login system for various systems at the University using your Tohokudai ID.
We have a contract with Secioss Co., Ltd.'s cloud service.
(2) Login Flow
If you are connected to the campus network (TAINS), you can log in using your Tohokudai ID and password authentication.
On the other hand, if you are connected to an off-campus network such as home, multi-factor authentication is required in addition to password authentication to strengthen information security measures.
(3) System URL domain
The URL domain is "slink.secioss.com".
Note: The URL domain is not our university domain "tohoku.ac.jp" due to the cloud service contract.
(4) Email notifications from the system
SeciossLink will send the following email notifications
Email notification of one-time passwords for multi-factor authentication
Email notification when a login from an unusual location is detected
Confirmation of changes to the email address to be notified
The sender's email address is "slink-info(@)secioss.co.jp".
(5) Available multi-factor authentication
One-Time Password Authentication and FIDO Authentication are available for multi-factor authentication.
It is possible to register multiple.
(6) Default value for multi-factor authentication
The default value for multi-factor authentication is One-Time Password Authentication with TU Mail or DC Mail.
(If you do not have a campus-wide email, you are not initially registered).
(7) One-Time Password Authentication
One-Time Password is a password that can be used temporarily.
A new password is generated each time you log in, reducing the risk of unauthorized access due to password leakage, and eliminating the worry that you will not be able to log in if you forget your password.
The following two types of One-Time Password Authentication are available
[Mail Authentication]
You will receive a password to the email address you have set and enter it on the login screen.
[Token]
You can use the "Google Authenticator" or "Microsoft Authenticator" application installed on your smartphone/tablet to generate a password and enter it on the login screen.
(8) FIDO Authentication
FIDO Authentication is an authentication method that uses a device compliant with the FIDO standard (FIDO Authentication device).
FIDO Authentication devices include Windows Hello, iOS devices such as iPhones and iPads, and Android devices. (Click here for the FIDO device compatibility chart (official website)).
FIDO Authentication, also known as passwordless authentication, does not require password input. This makes it highly resistant to phishing attacks.
(9) Systems with single sign-on access
Student Affairs Information System, Budget Implementation Status Inquiry System, Work Time Management System , Faculty and Staff Groupware, etc.
The Academic Access Management Federation in Japan (GakuNin)
Microsoft365 account
1-2. How to use
(1) What to do first
1st: Please try to log in.
If you are on campus, please log in using password authentication.
On the other hand, if you are off-campus, multi-factor authentication is required in addition to password authentication. The default value for multi-factor authentication is One-Time Password Authentication with TU Mail or DC Mail. please use this to log in.
[Common on/off campus]
2nd: Set up multi-factor authentication
Set up multi-factor authentication for smooth login when accessing from off-campus.
(This is not necessary if you do not access the site from off-campus at all.)
3rd: Language settings for the SeciossLink portal
The default language setting for the SeciossLink portal is Japanese, but it can be changed to any other language. Please change it accordingly.
Also, we will start a synchronization feature between SeciossLink and Microsoft365 in February 2024, and the language settings in the SeciossLink portal will be reflected in your Microsoft365 account. Therefore, please set the language settings for your Microsoft365 account in the Seciosslink portal.
(Users as of November 30, 2023, do not need to do this because their Microsoft365 language settings have already been transferred to SeciossLink.)
(2) Set up multi-factor authentication
The following three methods of multi-factor authentication are available
One-Time Password (Mail Authentication)
One-Time Password (Token)
FIDO Authentication
Multiple multi-factor authentication settings are recommended because if one of the authentication methods becomes unavailable, the remaining methods can still be used to log in.
How to set up
<Multi-factor authentication setup image>.
(3) How to log in
[off-campus]
Please log in using password authentication and multi-factor authentication.
If you have not set up multi-factor authentication, please log in using the One-Time Password Authentication by TU Mail and DC Mail, which is initially registered.
Note: If you check "Trust the browser" in multi-factor authentication, you can skip multi-factor authentication within a certain period of time.
<Multi-factor authentication usage image>
(4) How to log out
If you log out on a system that allow single logout, the SeciossLink portal will log out at the same time.
The target systems are as follows. (as of December 2023)
Faculty and staff groupware (as of February 2024)
(5) When you cannot log in
Please refer to "3. Frequently Asked Questions" below.
(6) Other functions
How to change the language displayed on the SeciossLink login screen📄 (follows the browser's display language)
(7) User Manual Set
About login and logout
About SeciossLink Portal
Others
* We will update the user manual as needed, so please refer to the latest file from this page.
1-3. Log in Page
(1) Log in Page URL
SeciossLink Portal
https://slink.secioss.com/user/index.php?tenant=auth.tohoku.ac.jp
Faculty and Staff Groupware
https://gw.tohoku.ac.jp
*In addition to the above, some systems display the SeciossLink login screen when accessing the system.
2. System Update
The SRP (Secure Reverse Proxy) system, which has been providing a single sign-on login service to various systems with Tohokudai ID, will be updated to the cloud service "SeciossLink" by Secioss Inc.
2-1. Major changes in the new system
(1) Authentication for off-campus access
The two-step authentication for off-campus access will be upgraded from image-matrix to multi-factor authentication to further strengthen information security measures.
Note: Image Matrix cannot be used in the new system.
(2) The login method to Microsoft365 account
The login method to Microsoft365 account (@mso.tohoku.ac.jp) will be switched to single sign-on with Tohokudai ID for improved convenience.
(3) System URL domain
The URL domain of the system will change.
Old system (SRP) : idp.srp.tohoku.ac.jp
New system (SeciossLink) : slink.secioss.com
Note: The new system is not the Tohoku University domain "tohoku.ac.jp" because of the cloud service contract. Some may suspect that this is a phishing site, but please be assured.
2-2. Comparison of old and new login screens
2-3. System Update Schedule
Trial (December 2023 - early February 2024)
Please do "(1) What to do first" in "1-2. How to Use" above.
Complete switchover (From April 2024)
All system login methods will be switched.
Note: SRP system will be out of operation.
3. Frequently Asked Questions
(Q1) I can't log in with my Tohokudai ID and password.
[Usage start date]
TohokuDai ID will be available for use after the start date.
Please reconfirm the start date of use. The distribution date of the TohokuDai ID notification and the start date of use are different.
[Password]
Please be careful not to enter similar characters incorrectly.
[1 (number one)] and [l (lower case L)] and [I (upper case A)]
[O (capital letter O)] and [0 (number zero)]
[6 (number six)] and [lowercase letter b]
[Terminal issue]
Please clear your browser cache.
(Q2) I don't know my Tohokudai ID.
[Tohokudai ID]
Tohokudai ID is a string of 8 random 2-digit alphanumeric characters.
⚠️This is different from your Employee Number or Student ID number.
⚠️This is different from the TU Mail address (@tohoku.ac.jp) and DC Mail address (@dc.tohoku.ac.jp).
[If you have forgotten your Tohokudai ID]
Please check the Tohokudai ID notification that was first distributed.
(Students who enrolled after April 2021 will be directed to the “Tohoku University ID confirmation page.”)
[If you no longer have a Tohokudai ID notification]
For faculty and staff, please contact the charge of General Affairs.
For students, please contact the charge of Educational Affairs.
(Q3) I don't know the password for my Tohokudai ID.
[Initialize Password]
Please use Tohokudai ID Password Reminder.
[If you cannot use Password Reminder]
For faculty and staff, please contact the charge of General Affairs.
For students, please contact the charge of Educational Affairs.
(Q4) I did not receive an email with my One-Time Password.
If you do not receive an email with your One-Time Password, please check the following
Please make sure that you are allowed to receive email from "secioss.co.jp" domain.
It may take some time before the email is sent.
If you have set up email forwarding to another email address, the email may be sorted into a spam folder or deleted on the server due to the spam filter of the forwarding email service.
Please set up your forwarding email service to receive emails from "secioss.co.jp" domain. Alternatively, please change your notification email address to the forwarding email address.
(Q5) I can't log in using One-Time Password (Mail Authentication).
Please check the flowchart and go to the number that applies.
[In the case of 1]
Please log in to Seciosslink on campus and set up multi-factor authentication.
[In the case of 2]
Please log in to your changed email address and receive a One-Time Password to login to SeciossLink.
If you can no longer use the changed email address due to cancellation of service by your Internet provider or cell phone carrier, please initialize your Notification Mail Address using this form (login to TU Mail or DC Mail is required).
[In the case of 3]
The default Notification Mail Address is your TU Mail (@tohoku.ac.jp) /DC Mail (@dc.tohoku.ac.jp).
Please log in to TU Mail/DC Mail and receive a One-Time Password to log in to SeciossLink.
[In the case of 4]
Please apply to change your Notification Mail Address.
⚠️Notes
(1) Do not change your Notification Mail Address to an email address used by more than one person, such as a mailing list.
(2) If you use your mobile carrier's email address, please be sure to allow email reception from "@secioss.co.jp", "@tohoku.ac.jp", and "@grp.tohoku.ac.jp" domains in advance.
・au
In case of application you
Please apply using this form (requires your Tohokudai ID and password authentication).
In case of an application by proxy
Please consult with a faculty or staff (secretary, colleague, the charge of General Affairs, or the charge of Educational Affairs).
The faculty or staff member consulted should use this application (log in to TU Mail is required) to request a change of Notification Mail Address.
Once you have changed your Notification Mail Address, please login to SeciossLink from off-campus.
Once you can log in to SeciossLink from off-campus, please take action so that you can receive TU Mail and DC Mail.
[In the case of 5]
Please apply to change your Notification Mail Address.
⚠️Notes
(1) Do not change your Notification Mail Address to an email address used by more than one person, such as a mailing list.
(2) If you use your mobile carrier's email address, please be sure to allow email reception from "@secioss.co.jp", "@tohoku.ac.jp", and "@grp.tohoku.ac.jp" domains in advance.
・au
In case of application you
Please apply using this form (requires your Tohokudai ID and password authentication).
In case of an application by proxy
Please consult with a faculty or staff (secretary, colleague, the charge of General Affairs, or the charge of Educational Affairs).
The faculty or staff member consulted should use this application (log in to TU Mail is required) to request a change of Notification Mail Address.
Once you have changed your Notification Mail Address, please login to SeciossLink from off-campus.
(Q6) I want to skip multi-factor authentication.
Please refer to this page.
(Q7) I trusted my browser, but now multi-factor authentication appears.
The skip period for multi-factor authentication is as follows.
The validity period is 7 days. (On the 8th day, you will be asked for multi-factor authentication again.)
If you log in within 7 days, it will be extended for another 7 days from there. (Period Renewal)
The skip period is valid for up to 30 days. After 30 days, you will be asked for multi-factor authentication again when logging in.
If you do the following, multi-factor authentication will be required again.
Clear your browser's cookies
Re-setup Multifactor Authentication
(Q8) I cannot login to NII-Filesender.
On the screen for agreeing to the information to be sent to the NII-Filesender service, an error message appears when you uncheck the required fields and click the Agree button.
To resolve this error, please login to the Seciosslink portal and revoke agreed services.
4. Contact Information
For Faculty and Staff
Common Infrastructure System Group, Information Infrastructure Operation Office, Data Synergy Creation Organization
(Digital Transformation Promotion Division, Information Department)
E-mail: auth-system(a)grp.tohoku.ac.jp
Note: Please replace (a) with @ when sending e-mail.For Students
Center for Data-driven Science and Artificial Intelligence