Two-factor authentication (2FA)
Multi-factor authentication (MFA) is a security procedure in which access authorisation is verified using several independent security features (factors). Two-factor authentication (2FA) is a specific form of MFA in which exactly two factors are used for authentication.
When using and logging into the VPN client, your university account is protected against unauthorised access by an additional security factor (2FA token).
To set up and use 2FA, you will need:
- Your university account to log
in - a connection to the university network, whilst on campus (eduroam)
→ It is not possible to set up the 2FA token whilst outside the university network!
- a web browser to create a permanent 2FA token
- your own mobile device or laptop to set up and subsequently use the token
First, connect your device to the university network (eduroam) and then set up your 2FA token using the relevant instructions.
⚠️ Important notice
The Microsoft Authenticator app cannot be used for two-factor authentication (2FA tokens) at the university.
Please follow one of our recommendations listed below:
KeePassXC software
For computers
FreeOTP app
For mobile devices (Android / iOS)
YubiKey hardware token
Optional for staff at Worms University of Applied Sciences only.
→ Instructions for using YubiKey
→ Instructions for using YubiKey on macOS
Once you have set up your token via one of the apps, you can test how it works within the university network (eduroam).
1. Open the test page and log in with your university account. Enter your full username in lower case and without ‘@hs-worms.de’.
2. Enter the combination of numbers displayed for the token you created in your app, without any spaces in between.
3. Click on ‘Validate’.
How can you tell if the test was successful?
If your name appears on the “sptest Shibboleth test site” page, your token is working.
You can then use it to log in to the VPN client from outside the university network.
If “Undefined” is displayed everywhere
: - First, check that you have entered your university account username correctly and in full, in lower case and without “@hs-worms.de”.
- Enter a new combination of numbers displayed in your app from the token, without any spaces in between
. - Try this a second time if it still
isn’t working. - If, after this new login attempt, the page still displays “Undefined”, you will need to generate a new token by following the instructions. Make sure you do not skip any steps in the instructions for generating a 2FA token.
FAQs
Once you have set up your 2FA token following the instructions, you can set up the VPN client.
To do this, use the Cisco Secure Client.
→ Is your username being rejected, or are you seeing the message “Worms University of Applied Sciences Identity
Provider – Access denied”?
Please
enter your university username in full using lower-case letters,
for example: ibaXXXX, infXXXX, …
On Apple devices, the automatic spell-check may alter the first letter of the username.
Therefore, before logging in, check that the username is written entirely in lower case.
- Also, when logging in with your university account, use the “Log in” button
– enter the token (a combination of numbers with no spaces in between, and note the 30-second expiry time, which is displayed via a countdown bar) )
- Click the ‘Verify’ button instead of pressing the Enter key to complete the login.
→ ‘Verification invalid’?
Make sure you enter the number combination displayed correctly from the token generated in your app, without any spaces in between.
Each number combination displayed has a 30-second expiry timer, which is shown via a countdown bar.
→ Does Cisco Secure Client display “Unable to connect to the specified secure gateway”?
Ensure that you have installed the latest version of Cisco Secure Client.
The software updates automatically when establishing a connection if a new version is available.
For mobile devices, updates are carried out via the relevant app store.
Contact the Data Centre
Opening hours
Service office at Worms University of Applied Sciences, Building A, 1st floor, Room 104
- Monday to Thursday:
08:00–12:00 and 12:45–16:00 - Friday:
08:00–12:00 and 12:45–14:00
Information on how to get in touch
It will make it much easier for us to process your enquiry if you follow these guidelines:
- Subject: Problem with the software application (e.g. university account)
- Content: A detailed description of your problem, including at least the username you are using and, if possible, a screenshot
- Email sender: Please use the webmail service or email client with your university email address wherever possible
- Our email address: helpdesk@hs-worms.de