MFA and passkey alternative on Windows on another device

Attention:

  • If a computer is used by several people, it is essential that each user has their own local user account.
  • No MFA login may be set up with a technical account.

Please note!

Before you can set up the passkey, the end device must be prepared. Please follow these instructions:

Create passkey on another device

  1. Log in to the IAM-Portal via the device on which you have already rolled out Passkey.
  2. First, create the Codematrix.
  3. You can then generate a confirmation code.

Then follow the link to roll out the passkey on the new device: https://getpasskey.iam.uni-bamberg.de.

The code matrix and confirmation code should be displayed for selection as a registration option.

Please enter the confirmation code you copied earlier into the field provided on the Getpasskey page and click Verify.

Roll out token

Select the menu item Roll out token.

As you have to roll out a passkey for each device, it is advisable to define a description.

Therefore, assign an appropriate name under Description, such as “Windows login”. Confirm this with Roll out token.

The temporary pop-up message “getpasskey.iam.uni-bamberg.de requests extended information...” will then be displayed. Please select the “Allow” option promptly. Otherwise the token will be deactivated and deleted.

Login with passkey in the web browser

Please make sure that you first use your BA number and password when logging in to the Firefox web browser.

Then confirm the process in KeepassXC by clicking the Authorization button.

If the passkey has been successfully stored, you will receive the message The token has been rolled out in the next window.

Note!

Once the passkey has been rolled out, you can tick the box for Always use automatic login with passkey when logging in to Shibboleth. This means you no longer need to enter your BA-Number and password before you can use the passkey.

Manage passkey

Passkeys are managed via the IAM-Portal (iam.uni-bamberg.de). You can deactivate or delete your passkeys under the menu item Manage Passkeys. Please note that the corresponding passkey must be deleted immediately if the device is lost or stolen.

Do you have any questions?

IT-Support
Telephone: +49 951 863-1333
E-Mail: it-support(at)uni-bamberg.de