Page tree

University of Tartu IT wiki

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

Introduction

What is twoTwo-factor authentication (commonly referred to as 2FA, MFA, multi-factor authentication) and why is it useful?
It adds another layer of protection for your school UT account and protects it from being used for malicious purposes even if your password has leaked. You can check how it works here.

Warning

NB! We recommend the Microsoft Authenticator and Google Authenticator apps.
In addition, we recommend adding an SMS method in case something happens to the smart device where the applications are installed.

Both a smart device and a computer are required for setup.

First-time setup

Info

The requirement to setup two-factor authentication is enabledfor all universitystaff and students starting June 13, 2023.Duringyournext login to Microsoft-associatedapplications (Outlook, Teams, Moodle), youwillbepromptedforadditionalinformation and thesetupof two-stepauthentication. 

  1. When first logging in to Microsoft services, you will be prompted with a More information required window. Click Next.
    Image Added
  2. Select I want to use a different method.
    Image Added
  3. From the drop-down menu, select Phone and click Confirm.
    Image Added
  4. Select area code Estonia (+372) and enter your phone number. Then click Next.
    Image Added
  5. A message will be sent to your phone number, the sender is Microsoft and the content is a 6 digit code.
    Image Added
  6. Enter the code on your browser and click Next.
    Image Added
  7. Your phone was registered successfully. Click Next.
    Image Added
  8. To finish the setup, click Done.
    Image Added
  9. The next time you log in to Office365, in addition to the password, you will also be asked for the code that came with the message.
    If you are at your home or work computer, you can let the computer remember it, i.e. within 90 days, you will no longer be asked for the second-level code at a specific computer.
    NB! Do not trust a device you are not sure about.
    After typing in the code, click Verify.
    Image Added


Two-factor authentication using Microsoft Authenticator

  1. Install the Microsoft Authenticator Authenticator application on your smart device via Google Play or App Store.
  2. On your computer, go to 365.ut.ee orkiri.ut.ee, click .ee 
    Image Added
  3. Log in using the format username@ut.ee (login with username and password).
    Image Added
  4. Click on your profile → select View Account → select .
    Image Added
  5. Select Update info.
    Image Removed
    Image Removed
  6. Select Add sign-in method.
    Image Modified
  7. From the menu, select Authenticator app and click Add.
  8. In the next window click Next.
    Image Modified

    Info

    NB! If you accidentally chose the wrong authentication method, or if you want to set up the Google Authenticator app or SMS authentication instead, select I want to use a different authentication app.

    Image Added

    Anchor
    qr_code_mfa
    qr_code_mfa

  9. To start your account set up, click Next.
  10. Leave the next window open on your computer and pick up your smart device.
  11. In the Microsoft Authenticator application select Add account.


  12. Select Work or school account.
  13. Select Scan QR code and scan the QR code in section 6 10 (the window you left open on your computer). 
    After scanning the QR code, move back to your computer view. A new window will be displayed.
    Image Removed
  14. The number 72 is displayed to test the application.
    Image Added
  15. Once again, pick up your smart device and Approve sign-in, enter the number 72 and click Yes.
    Image RemovedImage Added
  16. A confirmation that everything is working is displayed in the computer view.
    After setup, the
  17. Microsoft Authenticator setup was successful.
    Image Added
  18. given application (Microsoft Authenticator) and the smart device it is associated with (iPhone XR) are displayed.
    Peale seadistamist kuvatakse antud rakendus ja nutiseade, millega see on seotud.
    Image RemovedThe next time you log in to the UT Microsoft 365 account, in addition to the password, you will prompted to insert the code displayed into the Microsoft Authenticator mobile application.
    When logging in from a web browser, it is possible to remember the device for 90 180 days, so that you do not have to re-enter the second level of verification every time.
    NB! Use it only for a personal or work computer.
    Image Added
    Image RemovedImage Added

Google Authenticator

  1. Install Microsoft Authenticator on your smart device via Play store or App store.
  2. On your computer, go to 365.ut.ee or kiri.ut.ee, click your profile → select View Account → select Update info.


  3. Select Add sign-in method.
  4. Select I want to use a different authernticator app and click Next.
  5. A QR code will be displayed. Keep this window open.
  6. Pick up your smart device and scan the QR code by clicking Scan a QR code in Google Authenticator application.
  7. After scanning the QR code, Google Authenticator two-factor authentication is activaed.

SMS

  1. On your computer, go to 365.ut.ee or kiri.ut.ee, click your profile → select View Account → select Update info.


  2. Select Add sign-in method.
  3. From the drop-down menu, select Phone and click Add.
  4. Select area code Estonia (+372) and enter your phone number. Then click Next.
  5. A message will be sent to your phone number, the sender is Microsoft and the content is a 6 digit code.
  6. Enter the code on your browser and click Next.
  7. SMS authentication is activated. To finish, press Done.
  8. After setting up, the mobile phone number to which it is associated will be displayed.
  9. The next time you log in to Office365, in addition to the password, you will also be asked for the code that came with the message. If you are at your home or work computer, you can let the computer remember it, i.e. within 90 days, you will no longer be asked for the second-level code at a specific computer.
    NB! Do not trust a device you are not sure about.

Sissejuhatus

Kaheastmeline autentimine (kahefaktoriline, kahetasemeline või mitmeastmeline autentimine ja lühendid 2FA ja MFA) annab kasutajakontole lisakaitse ja aitab seda turvata isegi siis, kui parool peaks lekkima. Seda, kuidas see toimib, saab täpsemalt lugeda Microsoft kodulehelt.

Warning
NB! Soovitame Microsoft Authenticator ja Google Authenticator rakenduste kasutamist.
Lisaks soovitame lisada ka SMS meetodi juhuks, kui peaks midagi juhtuma nutiseadmega, kuhu rakendused on paigaldatud.

Seadistamiseks on vajalikud nii nutiseade kui ka arvuti.

Kaheastmeline autentimine Microsoft Authenticator rakendusega

  1. Paigalda nutiseadmesse rakendus Microsoft Authenticator läbi Google Play või App Store.
  2. Mine arvutis leheküljele 365.ut.ee või kiri.ut.ee.
    Image Added
  3. Sisselogimiseks kasuta formaati kasutajatunnus@ut.ee (sisenemine kasutajatunnuse ja parooliga).
    Image Added
  4. Klõpsa enda profiilile ja vali Kuva konto.
    Image Added
  5. Vajuta Turbeteave all olevale Värskenda teavet nupule.
    Image Added
  6. Vali Lisage sisselogimismeetod, et lisada kaheastmeline autentimine.
    Image Added
  7. Vali rippmenüüst Autentimisrakendus ja vajuta Lisa.
    Image Added
  8. Vali avanevas aknas Edasi.
    Image Added

    Info

    NB! Kui valisid kogemata vale autentimismeetodi või soovid seadistada hoopis Google Authenticator rakendust või SMS-iga autentimist, vali Soovin kasutada muud autentimisrakendust.

    Image Added


  9. Vajuta avanevas aknas Edasi.
    Image Added
    Anchor
    qr_kood_mfa
    qr_kood_mfa
  10. Jäta avanev aken arvutis avatuks ja võta kätte oma nutiseade.
    Image Added
  11. Vali nutiseadmes Add account.
    Image Added
  12. Vali Work or school account.
    Image Added
  13. Vali Scan QR code ja skaneeri punktis 10 olevat QR-koodi.
    Image Added
  14. Liigu pärast QR-koodi skaneerimist tagasi arvuti vaatesse ja vajuta nupule Edasi.
    Image Added
  15. Rakenduse katsetamiseks kuvatakse number 72.
    Image Added
  16. Võta nutiseade uuesti kätte. Sisesta rakenduse poolt kuvatud number 72 ja vajuta nupule Yes.
    Image Added
  17. Arvuti vaates kuvatakse kinnitus, et kõik toimib. Vajuta nupule Edasi.
    Image Added

  18. Pärast seadistamist kuvatakse Turbeteave all Microsoft Authenticator rakendus.
    Image Added
  19. Järgmine kord küsitakse TÜ Microsoft 365 kontosse sisse logimisel lisaks paroolile ka Microsoft Authenticator mobiilirakenduses kuvatavat koodi.
    Kui oled kodu- või tööarvuti taga, võid selle arvutil lasta meelde jätta. Siis selles arvutis enam 180 päeva jooksul kaheastmelise autentimise koodi ei küsita. NB! Kindlasti ei tohiks seda teha avalikus arvutis.
    Image Added

Kaheastmeline autentimine Google Authenticator rakendusega

  1. Paigalda nutiseadmesse rakendus Google Authenticator läbi Google Play store või App store.
  2. Mine arvutis leheküljele 365.ut.ee või kiri.ut.ee.
    Image Added
  3. Sisselogimiseks kasuta formaati kasutajatunnus@ut.ee (sisenemine kasutajatunnuse ja parooliga).
    Image Added
  4. Klõpsa enda profiilile ja vali Kuva konto.

    Image Added
  5. Vajuta Turbeteave all olevale Värskenda teavet nupule.
    Image Added
  6. Vali Lisage sisselogimismeetod, et lisada kaheastmeline autentimine.
    Image Added
  7. Vali rippmenüüst Autentimisrakendus ja vajuta Lisa.
    Image Added
  8. Vali Soovin kasutada muud autentimisrakendust ja vajuta Next.
    Image Added
  9. Konto häälestamiseks vali järgnevas aknas Edasi.
    Image Added
  10. Jäta avanev aken arvutis avatuks ja võta kätte oma nutiseade.
    Image Added
  11. Skaneeri Google Authenticator rakenduses QR-kood nutiseadmega.
    Selleks vali Scan a QR code.
    Image Added
  12. Pärast QR-koodi skaneerimist on Google Authenticatori kaheastmeline autentimine aktiveeritud. 
    Image Added
  13. Järgmine kord küsitakse TÜ Microsoft 365 kontosse sisse logimisel lisaks paroolile ka Google Authenticator mobiilirakenduses arvutis kuvatavat numbrit.
    Kui oled kodu- või tööarvuti taga, võid selle arvutil lasta meelde jätta. Siis selles arvutis enam 180 päeva jooksul kaheastmelise autentimise koodi ei küsita. NB! Kindlasti ei tohiks seda teha avalikus arvutis.
    Image Added

Kaheastmeline autentimine SMS-iga

  1. Mine arvutis leheküljele 365.ut.ee või kiri.ut.ee.
    Image Added
  2. Sisselogimiseks kasuta formaati kasutajatunnus@ut.ee (sisenemine kasutajatunnuse ja parooliga).
    Image Added
  3. Klõpsa enda profiilile ja vali Kuva konto.

    Image Added
  4. Vajuta Turbeteave all olevale Värskenda teavet nupule.
    Image Added
  5. Vali Lisage sisselogimismeetod, et lisada kaheastmeline autentimine.
    Image Added
  6. Vali rippmenüüst Telefonja vajuta nupule Lisa.
    Image Added

    Info

    NB! Kui valisid kogemata vale autentimismeetodi vali Soovin kasutada muud autentimisrakendust.

    Image Added


  7. Vali regioonikood Eesti (+372) ja sisesta enda mobiiltelefoni number. Seejärel vajuta Edasi.
    Image Added
  8. Nutiseadmesse saabub sõnum koodiga, saatjaks on Microsoft.
    Image Added
  9. Sisesta kood ja vajuta nupule Edasi.
    Image Added
  10. SMS-ide autentimine on aktiveeritud. Lõpetamiseks vajuta Done.
    Image Added
  11. Kuvatakse seadistatud autentimismeetodid.
    Image Added
  12. Järgmine kord küsitakse TÜ Microsoft 365 kontosse sisse logimisel lisaks paroolile ka sõnumiga tulnud koodi.
    Kui oled kodu- või tööarvuti taga, võid selle arvutil lasta meelde jätta. Siis selles arvutis enam 180 päeva jooksul kaheastmelise autentimise koodi ei küsita. NB! Kindlasti ei tohiks seda teha avalikus arvutis.
    Image Added